Joel,
Firewalling is the simple answer here. If there's a firewall between your
network and the Internet, just configure it so that only the Squid proxy
has access to the outside world for web-browsing. Your users will bitch
about it but it'll certainly encourage them to leave their browser config
alone :-)
Rgds
Richard Stagg
On Tue, 29 Jun 1999, Joel Taqueban wrote:
>
> 1) I have configured my local proxy server using SQUID to deny access to
> anything or everything.
>
> 2) I can very simply go to each users PC and set Netscape up to use proxy
> server. Therefore that PC is controlled via the proxy server. So far so good.
>
> 3) However, if a smart user changes the netscape config such that he will
> bypass the proxy server and use the direct connection, he now have full access
> to the Internet again.
>
> How do I fix this such that the user will not able to change the config on the
> Netscape? Otherwise the use of the proxy would be pointless if the user can
> change components on his PC.
>
> Joel
>
---------------------------------
Richard Stagg
Internet Architect
squid@bae.co.uk
Received on Tue Jun 29 1999 - 04:16:56 MDT
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:47:02 MST