On Sun, 30 Nov 2003, Robert S wrote:
> I am getting the impression that I would have to have my linux box acting as
> the firewall. At the moment I operate my entire network behind a hardware
> filewall. Short of blocking all of the ports for my client PCs, it looks as
> if there is no way of blocking these sites.
You need to have the firewall block direct access to the applications from
the client PCs. As long as the clients can use the application when the
Squid proxy is not in your network they will still be able to use the
application when the proxy is connected.
The proxy can only control traffic which must go via the proxy. It can not
control traffic where the client can go directly not using the proxy.
Regards
Henrik
Received on Sun Nov 30 2003 - 01:45:41 MST
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:21:43 MST