[K12OSN] transparent proxying with LTSP--SOLVED

Mark Gumprecht gumprechtm at msad3.org
Tue Feb 28 11:27:37 UTC 2006


The setup I have been running for a while is a 1 nic card setup with 
squid. I have a sonic wall at this point and still use an external DHCP 
for addressing. I use the sonic wall to forward to the DMZ to port 3128. 
All web traffic is re-routed to the squid and back again (transparent). 
I have forwarded for headers turned on in squid so that when people 
override the bess filter, it is only for the machine they are on, not 
the whole network. I had to work with MSLN on the forwarded for headers 
(provider), they just needed to allow them. I'm currently incorporating 
dansguardian into the setup. I would like to get dhcrelay working and 
can the sonic wall altogether, or swap the whole network (1024 subnet) 
over to it's own DHCP
HTH
Mark

David Trask wrote:

>"Support list for opensource software in schools." <k12osn at redhat.com> on
>Monday, February 27, 2006 at 4:44 PM +0000 wrote:
>  
>
>>The LTSP box can be directly connected to the Internet, but the filter
>>can't be on the same computer for a transparent proxy setup.
>>
>>Is this correct?
>>    
>>
>
>
>No this is not correct....although I'm using an SME server for my filter
>and transproxy....(www.contribs.org)....I have both on the same box. 
>Transparent proxy can only work if the server it's running on is at the
>"choke point" of the network   AFAIK.
>
>David N. Trask
>Technology Teacher/Director
>Vassalboro Community School
>dtrask at vcsvikings.org
>(207)923-3100
>
>
>_______________________________________________
>K12OSN mailing list
>K12OSN at redhat.com
>https://www.redhat.com/mailman/listinfo/k12osn
>For more info see <http://www.k12os.org>
>
>  
>

-- 
Mark Gumprecht
Data Systems Specialist
MSAD3
Unity, ME
gumprechtm at msad3.org




More information about the K12OSN mailing list