[SQU] ipmasq with force proxy

> Hi...
> thanks for your time...
> I have a situation I can't figure out..
>
> I have Potato running with ipmasq and squid....
> I have eth0 as 24.69.x.x (the IP from my ISP)
> I have eth1 as 192.168.1.1
>
> all my workstations can surf and do it all....
> The gateway that my workstations use is 192.168.1.1
>
> I would like to be able to stop the workstations from surfing if
> they don't have the proxy set in there browser....
> (This way the students can't disable it manually)
> I read the docs and stuff...it seemed to point me to ipchains...
> cool... I checked it out and noticed the masq in there...
> everything seems fine...
> so I went and added a rule ....boy.. I tried all kinds of rules...
> something along these lines....
>
> ipchains -A input -p tcp -s 192.168.1.0/24 www -j DENY
>
> I was hoping that I could block all web traffic...
> (and then use the proxy squid to surf)
> still being able to telnet out... use ping..FTP ... whatever...
 but no go.... I could still surf with the "no proxy" option in the
 browser....
 
 I tried all kinds of combonations and all I could get was either block
 everything
 or nothing...
 I looked at the transparency proxy .. but that might too much for me....
 
 Any help is really appreciated.....!!!
 Do most people force the proxy option? or just configure it in the
 browser and let it be?
 
 Thanks
Mike

--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html