Koozali.org: home of the SME Server

Obsolete Releases => SME 7.x Contribs => Topic started by: GlitchFreak on January 27, 2009, 04:05:15 PM

Title: Disabled Transparent Proxy, Web still accessible
Post by: GlitchFreak on January 27, 2009, 04:05:15 PM

Hey everyone

I setup my clients box to use NCSA auth to access the web. They need to manually setup proxy settings to enable the auth procedure.

I disabled transarent proxy for this reason.I f the user disables the proxy settings in the web browser, they can access the web without authentication.

Any pointers please?

Thanks!

Title: Re: Disabled Transparent Proxy, Web still accessible
Post by: Franco on January 27, 2009, 05:29:16 PM

Hi,
Assuming you went with Dansguardian, then http://wiki.contribs.org/Dansguardian#Configuring_your_system_to_force_Dansguardian_usage_.26_prevent_bypassing

Title: Re: Disabled Transparent Proxy, Web still accessible
Post by: GlitchFreak on January 27, 2009, 06:25:19 PM

Have already done so...

Code: [Select]

[root@gateway ~]# config show squid
squid=service
    EnforceSafePorts=no
    RequireAuth=nsca
    SafePorts=21,70,80,81,119,210,443,563,980,1024-65535
    TCPPort=3128
    TCPProxyPort=80:3128
    Transparent=no
    TransparentPort=8080
    access=private
    status=enabled

Code: [Select]

[root@gateway ~]# config show dansguardian
dansguardian=service
    portblocking=yes
    status=enabled

That is why I find it bizarre that they are able to access the web

Title: Re: Disabled Transparent Proxy, Web still accessible
Post by: Franco on January 27, 2009, 06:46:34 PM

very strange, my setup is the same and works fine.
Do you see activity when reading the squid and dansguardian logs?

Title: Re: Disabled Transparent Proxy, Web still accessible
Post by: stephen noble on January 28, 2009, 12:38:08 AM

http://bugs.contribs.org/show_bug.cgi?id=4820#c5

the workaround is don't disable transparent proxy
then 80 diverts to 3128
and enable portblocking
3128 is blocked

Title: Re: Disabled Transparent Proxy, Web still accessible
Post by: GlitchFreak on January 28, 2009, 09:48:35 AM

Thanks snoble. Will give it a shot and report back...

On a side note, should this not be included in the wiki?

Title: Re: Disabled Transparent Proxy, Web still accessible
Post by: GlitchFreak on January 28, 2009, 06:32:26 PM

Looks like the fix worked.

Thanks SNoble

Title: Re: Disabled Transparent Proxy, Web still accessible
Post by: David Harper on January 29, 2009, 11:34:54 AM

Updated the wiki; see http://wiki.contribs.org/Dansguardian#Configuring_your_system_to_force_Dansguardian_usage_.26_prevent_bypassing

Title: Re: Disabled Transparent Proxy, Web still accessible
Post by: GlitchFreak on January 29, 2009, 03:56:16 PM

Thanks David. :grin: