Hmm, I can't remember if ident worked or not, but what if the squid server is on the same as iptables? Will usernames/ips be logged in access.log? Henrik Nordstrom-5 wrote: > > On fre, 2008-05-30 at 05:56 -0700, mfiss@xxxxxxxxxxxxx wrote: > >> The whole ident setup (every client having an ident service running) >> is a little bit annoying, but I haven't found any other way to log >> usernames without forcing clients to enter a user/pass to access the >> internet. If there is another way please let me know. > > Clients configured to use the proxy, and NTLM authentication for > identification. Works for computers who are members of the windows > domain. > > Guests with computers outside of the domain has to enter a user/pass to > get access. > >> How can I make sure nobody uses a third party browser to get on the >> internet? > > Use the interception technique you already have played with, but instead > of intercepting in the proxy, send it to a web page explaining how to > configure the proxy settings in their browser. > > Regards > Henrik > > > -- View this message in context: http://www.nabble.com/Transparent-proxy-with-DansGuardian-using-IDENT-tp17544098p17562877.html Sent from the Squid - Users mailing list archive at Nabble.com.