[ILUG] dansguardian, squid, smoothwall and transparent proxying

[conor.daly at cod.utvinternet.com]

On Wed, Mar 09, 2005 at 08:55:20AM +0000 or so it is rumoured hereabouts, 
Stephen McGuinness thought:
> 
> Correct, smoothwall will redirect all the HTTP traffic to the internal
> server, which will then try to access the interweb via the same route.
>  Can you set your internal proxy to use an upstream proxy at your ISP,
> avoiding the port 80 (and/or 443?) on the smoothwall box?
 
I could do that I suppose but I wanted to avoid using somebody else's
proxy too what with wanting to be fully in control of my internet
connection...
 
On Wed, Mar 09, 2005 at 09:12:24AM +0000 or so it is rumoured hereabouts, 
Niall O Broin thought:
> 
> 
> As you guessed, you do effectively have a loop there. One solution 
> might be to install Dan's Guardian on the Smoothwall box, which has 
> squid anyway. However, you might be of the view, as am I, that you want 
> to treat the Smmothwall as an appliance, and hence don't want to 
> install any other software on it.

Which is my take on the matter too.  

Any way to have smoothie block outbound 80 and 443 from internal IPs?  Can
I use the redirection rules normally used for the RED/ORANGE interfaces?
Have to try that later...

Conor
-- 
Conor Daly <conor.daly at oceanfree.net>

Domestic Sysadmin :-)
---------------------
Hobbiton.cod.ie
 10:43:40  up 29 days, 22:04,  1 user,  load average: 0.01, 0.01, 0.00