<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta http-equiv="Content-Type" content="text/html;charset=ISO-8859-1"> <title></title> </head> <body text="#000000" bgcolor="#ffffff"> Hi All! Thanks for the information I have received thus far. I feel like I am starting to get somewhere. I do have a quick question. I have setup the client browser to manual proxy, HTTP - 192.168.1.208 port 3128. I shutdown Mozilla and brought it back up, I received - The requested URL could not be retrieved ... Access is denied. Access control configuration prevents your request.... yada yada yada. OK, I checked my squidGuard.conf and I commented out the acl section and added " pass all " and attempted once more. Same result - blocked. My question is do I have to change something in the squid.conf file to allow all to pass to squidGuard? I did change my /etc/squid/squid.conf file to read at the bottom: redirect_program /usr/sbin/squidGuard -c /etc/squid/SquidGuard.conf I guess if I have a bright side right now, if this were in use no one could go to websites they shouldn't be going to :) just a slight problem with the ones they are allowed to go to..... Thanks for all the help everyone! Mike Jim Wildman wrote: <blockquote type="cite" cite="midPine.LNX.4.58.0403051641500.6444@newross.rossberry.private"> <pre wrap="">On Fri, 5 Mar 2004, Michael Elliott wrote: </pre> <blockquote type="cite"> <pre wrap="">Hi Richard, Thanks for the reply. You are correct I was trying to use the server to connect to the internet. When I logged in to a client machine, I then launched Mozilla and entered in one of the sample URLs that are supposed to be blocked. As expected, it was open. So I entered the preferences of Mozilla. I changed the Direct connection to the internet to a Manual proxy configuration, I entered in the address of my K12LTSP (192.168.0.208) & Port 80. To be safe I restarted the browser, but I received an alert - The connection was refused when attempting to contact the proxy server. This was just going to google.com. I then for the heck of it changed the proxy address to the LAN side IP address that is see by our main LAN (192.168.1.208). Same alert. So finally I attempted to change the proxy setting to "Automatic proxy configuration" setting to my K12LTSP address. Unfortunately, I could get internet access to everthing once again. </pre> </blockquote> <pre wrap=""> Autoconfiguration does not work. You need to point your proxy to port 3128 (for just Squid) or 8080 for Dan's Guardian (assuming the defaults). If you want it to work automatically, then you have to setup transparent proxying. Dan and squidGuard work a bit differently, but you can use both. The big differences are.. Dan will check the content and attempt to grade the site on the fly. SG does not. SG is more configurable by time, day, requesting machine, etc. So to do the obligatory text drawing.. client -> tranparent proxy on 80 -> proxy:8080 (Dan) -> proxy:3128 (Squid) -> SquidGuard -> Internet If the transparent proxy is left out, set browser to use port 8080 or 3128 of the proxy. If Dan is left out, set browser to point to port 3128 of the proxy. each layer (transparent proxy, Dan, Squid and SquidGuard) can include it's own access control lists, databases etc. ------------------------------------------------------------------------ Jim Wildman, CISSP, RHCE <a class="moz-txt-link-abbreviated" href="mailto:jim@rossberry.com">jim@rossberry.com</a> <a class="moz-txt-link-freetext" href="http://www.rossberry.com">http://www.rossberry.com</a> _______________________________________________ K12OSN mailing list <a class="moz-txt-link-abbreviated" href="mailto:K12OSN@redhat.com">K12OSN@redhat.com</a> <a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/k12osn">https://www.redhat.com/mailman/listinfo/k12osn</a> For more info see <a class="moz-txt-link-rfc2396E" href="http://www.k12os.org"><http://www.k12os.org></a> </pre> </blockquote> </body> </html>