Hi everyone,
This is my first e-mail to the list and I hope you can help. I`m running the lates squid stable on a Red Hat 7.3, the problem I have is the following:
Everyone of the computers in the office except for the IT one´s access the Internet with ncsa authentication. The following acl takes care of all the ip´s inside the office, acl office src "/etc/squid/etc/work", I have a respective acl to ban porn, acl porn url_regex "/etc/squid/etc/nosex", and a respective acl to block msn, acl msn req_mime_type -i ^application/x-msn-messenger$.
The http_access looks kinda like this: http_access deny paginas ....some other acl's http_access deny msn ....some other acl's http_access allow office password
Like I said the IT pc´s are not included on the squid configuration file because they're doing NAT directly through the firewall.
I am now required to allow acces to the msn messenger only on one PC, the sales manager PC, but I don´t know how to give msn access to it without allowing it to view porn. Here´s what I tried: I added the ip to the NAT table on my firewall and removed it from the office ip list requiring password but left the Internet Explorer on the pc still configured to access internet via squid, this way I think he will be able to access msn but still be affected by the acl´s on squid thus blocking the porn sites. But it didn`t work.
Any ideas are welcome or point out anything I left out.
Thanx,
Mario Maradiaga
