Markus.Rietzler@xxxxxxxxxxxxxx disse na ultima mensagem: >>since the frontend is the server connected to other networks it is the >>place where things should be done, but that is only the easier way >> >> >>Michel > > sure, but it's not that simple. > there are local (at user-squid) acls which are also responsible to > restrict access. > eg. internet-access is restricted to some users, we also distinguish > between "browsing" and > "downloading" the internet, for that we use NTLM auth togehter with > "some" local acls. > > with this scenario we provide services at about 150 subsidiaries and > 30.000 users... > you mean there is no dedicated connection between the remote squid and it's peer? Without ACl the user could get internet access without going through the peer? Michel ... **************************************************** Datacenter Matik http://datacenter.matik.com.br E-Mail e Data Hosting Service para Profissionais. ****************************************************