On Saturday 03 May 2003 11.38, Mahesh Kudva wrote:
> I have squid2.5s1 on RH-7.3 as transparent proxy. I want to
> restrict users using the windows based sharing like ICS, Wingate
> and Winproxy.
Not a easy job. These are effectively the same as NAT gateways, making
requests from multiple users via the same single IP address.
The best action is to not use transparent proxying but enforce the use
of proxies, and then use proxy authentication combined with a policy
which makes sure the users know they are not allowed to share
passwords and will be punished if they do.
Alternatively you can use delay pools to make sure no single IP
address is using more than a certain amount of bandwidth.
Regards
Henrik
-- Donations welcome if you consider my Free Squid support helpful. https://www.paypal.com/xclick/business=hno%40squid-cache.org If you need commercial Squid support or cost effective Squid or firewall appliances please refer to MARA Systems AB, Sweden http://www.marasystems.com/, [email protected]Received on Sat May 03 2003 - 13:37:31 MDT
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:16:13 MST