On Mon, Sep 13, 2010 at 8:24 AM, devlin7 <it@xxxxxxxxxxxxxx> wrote: > > I love my Squid proxy, it is fabulous! Having said this, I would prefer my > clients to talk directly to the web via the default gateway. This is > especially true of my Linux work stations in our school. > > Last week I was tinkering and I setup a new squid proxy server. I then > mucked around with IPTables on this box so that any any coming traffic is > redirected to the squid proxy. This is great as I can have a default gateway > and get filtering like Dansguardian. The only downside to this is that the > Squid proxy is running in transparent mode and I can't log which user is > accessing the web. > > Is there a way to authenticate my default gateway? You need to choose: interception or authentication. You can have squid forward via dansguardian, or vice verca, without using interception. -Rob