This seems like more work, for the admin and clients. Also, we have clients who go offsite often (salesmen are barely here), if they have proxies, when they go offsite they will not be able to work online without using the VPN and proxy through that. And if they are at a hotel that requires registration, that may not work either. Correct me if I am wrong, but I think it will be much easier moving the Squid and Firewall onto one box. Henrik Nordstrom-5 wrote: > > On fre, 2008-05-30 at 05:56 -0700, mfiss@xxxxxxxxxxxxx wrote: > >> The whole ident setup (every client having an ident service running) >> is a little bit annoying, but I haven't found any other way to log >> usernames without forcing clients to enter a user/pass to access the >> internet. If there is another way please let me know. > > Clients configured to use the proxy, and NTLM authentication for > identification. Works for computers who are members of the windows > domain. > > Guests with computers outside of the domain has to enter a user/pass to > get access. > >> How can I make sure nobody uses a third party browser to get on the >> internet? > > Use the interception technique you already have played with, but instead > of intercepting in the proxy, send it to a web page explaining how to > configure the proxy settings in their browser. > > Regards > Henrik > > > -- View this message in context: http://www.nabble.com/Transparent-proxy-with-DansGuardian-using-IDENT-tp17544098p17693766.html Sent from the Squid - Users mailing list archive at Nabble.com.
