Koozali.org: home of the SME Server

Legacy Forums => Experienced User Forum => Topic started by: SanDy on March 06, 2003, 07:43:01 PM

Title: How to disable transparent proxy???
Post by: SanDy on March 06, 2003, 07:43:01 PM
Hi!
How I can disable transparent proxy, e.g. when user want to access to the any of internet service (HTTP, SMTP, TIME, DNS) he can do this only thru squid.

Thanks.
ps: I hope, you understand what i want to say.... Sorry for bad English.

SanDy.
Title: Re: How to disable transparent proxy???
Post by: Jochen Hoegerl on March 06, 2003, 09:42:22 PM
log in to a console and type

/sbin/e-smith/db configuration setprop squid Transparent no

/sbin/e-smith/signal-event remoteaccess-update

that should do it.

jochen
Title: Re: How to disable transparent proxy???
Post by: Jon Blakely on March 07, 2003, 09:50:23 AM
You seem to have the wrong end of the stick. With transarent proxy enabled you are forcing the clients on your network to use squid proxy but they dont know it ( hence the proxy is transparent to the client ).
By disabling transparent proxy you will be required to ensure that the proxy settings are set up on all client pc's, bearing in mind that the client user can change this at any time to no proxy.

Jon
Title: Thanks, and I want to cpecify my question.
Post by: SanDy on March 07, 2003, 12:12:05 PM
Really, I want to disable non-authorization user access to all internet services.
On SME 5.5 this may be done by disabling masq (service masq stop), but on SME 5.6 when i do this i lose connection to server and whole server can not be reached from all clients.
How can I disable masq, but enable local access to squid, smtp, pop3, smb, ssh, http, https???
As i know, i must to do something with /etc/init.d/masq ?

Enabling transparent proxy (thanks to Jon Blakely and Jochen Hoegerl) disable non-authorization access to internet on port 80, but it is not solution to my problem.
Title: Re: Thanks, and I want to cpecify my question.
Post by: Jon Blakely on March 07, 2003, 01:05:53 PM
you probably should look at Proxy authentication

http://www.pagefault.org/code/e-smith.shtml#proxyauth

or squidguard

http://www.tech-geeks.org/servers/sme/squidGuard/

Jon