RE: [squid-users] forcing users to acces

From: Robert Adkins <raa@dont-contact.us>
Date: Fri, 24 Jan 2003 13:34:00 -0500

Kenn,

        They can still hit the gateway, but if you have a firewall denying them
access through that gateway. Then they get nothing but frustration.

Regards,
Robert Adkins II
IT Manager/Buyer
Impel Industries, Inc.
Ph. 586-254-5800
Fx. 586-254-5804

 -----Original Message-----
From: Kenn Murrah [mailto:kenn@thebytebusiness.com]
Sent: Friday, January 24, 2003 12:20 PM
To: mailinglistsquid-users@squid-cache.org; squid-users@squid-cache.org;
Robert Adkins
Subject: Re: [squid-users] forcing users to access Squid ...

   

I guess I should have supplied more details ... i AM running a
transparent
proxy, but that simply saves me from having to configure everyone's
browser
.. they can STILL hit the gateway directly if they know the address ...
isn't that right?

 ----- Original Message -----
From: "Gavin Hamill" <gdh@acentral.co.uk>
To: <squid-users@squid-cache.org>
Sent: Friday, January 24, 2003 11:04 AM
Subject: Re: [squid-users] forcing users to access Squid ...

> On Friday 24 January 2003 4:58 pm, Bob Avery-Babel wrote:
> > Yep. Transparent Proxy.
>
> > However, if you can't use or don't want to use transparent proxy then
it
> > becomes a little more complicated.
>
> If not, then possibly the best way would be to apply a registry policy
to
the
> Windows machine and make sure the user of the machine actually only has
'User
> Rights' - this is a more broad general sysadmin topic...
>
> It means the user can use applications to do their job - they don't
need,
and
> shouldn't be able to modify network, proxy, hard disk or system
settings.
>
> Configuring each local user into the "Administrator" group is asking
for
> trouble, even if it does mean a little less inconvenience re: ActiveX
> controls and installing new software.
>
> But that doesn't change the fact I still administer networks where
everyone
> has a password of "password" <sigh>.... don't worry, the yearly
maintenance
> fee makes up for it :)
>
> Cheers,
> Gavin.
>
Received on Fri Jan 24 2003 - 11:32:08 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:12:50 MST