<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN"> <HTML> <HEAD> <META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8"> <META NAME="GENERATOR" CONTENT="GtkHTML/3.2.5"> </HEAD> <BODY> Barry R Cisna <<A HREF="mailto:cisna-barry@wc235.k12.il.us">cisna-barry@wc235.k12.il.us</A>> wrote: Of course if the student knows how to take out the proxy number in Internet Explorer, they are home free anyway:(. You can prevent that by transparent proxy. You can also force use of the proxy by having the firewall on the LTSP server and blocking port 80 access unless it comes from squid. You can set up squid ACL to prevent access to port 3128 by anyone but the dansguardian user. The only port left is 8080 to get into dansguardian. </BODY> </HTML>