Koozali.org: home of the SME Server
Legacy Forums => General Discussion (Legacy) => Topic started by: Mike Coan on January 24, 2002, 02:31:39 AM
-
I am running SME Server with update 3 installed. I had been using Squidguard for content filtering, but just switched to Dan's Guardian.
Before I was able to limit internet access to a group of machines by doing the following in squid.conf
acl permitted_hosts src 192.168.3.240-192.168.3.253/255.255.255.240 (all on one line)
http_access allow permitted_hosts
http_access deny all
There were actually a bunch of other entries as well.
Note I modified squid.conf by creating the custom templates in the appropriate place. If the line
http_access allow permitted_hosts
is in squid.conf, then no has internet access. If the line is changed to
http_access allow localsrc
then everyone has internet access.
I tried it machine by machine. For example
acl jupiter src 192.168.3.240/255/255.255.255
http_access allow jupiter
jupiter has no access. the error message indicates it is because of access control and suggest contacting the administrator, which is me.
The filtering is working fine. If i attempt to reach a filtered site via the browser, it is blocked and I get the Dan's Guardian message about an inappropriate url or whatever.
I know that squidguard used 3128 as the port and Dan's Guardian use 8080. Setting the browser to use the proxy server at 8080 goes through Dan's Guradian, but blocks internet access for everyone if there is anything other than
http_access allow local src
in squid.conf.
I have always expanded the template and restarted squid and Dan's Gurdian as needed.
Any ideas are appreciated
Mike
-
If you will look at the squid/access.log you will noice that dansguardian is passing the proxy address of 127.0.0.1 instead of the ip address of the requestor. I am searching for a solution to this problem as well as I use SARG to get user internet usage and everything shows as one address 127.0.0.1. If you find the solution please let me know and I will do the same for you.