[K12OSN] Changing proxy settings

[Joe Guenther]

I only noticed this thread later so maybe this has been addressed.

We had a similar situation where we only had one LTSP box in a boys dorm and
wanted to force proxy use.  Andrew Bartlett of the Samba team happened to
come by Germany as we were working on this.  He wrote us an IPTABLES that
only allowed packets from UID root, named, and squid directly out the public
eth1 network card.  Thus the students could change their proxy settings on
Mozilla, but then they got *nothing* ... turn it on if you want internet.
IPTABLES has the ability to verify UID of the packet sender ... so that was
a brilliant bit of programming on the iptables developer's part.  This makes
for a VERY powerful firewall.  We then did not do any transparent proxy or
anything like that ... just a normal proxy setup, proxy set in Mozilla and
GO...

my 2 bits
joe

-----Original Message-----
From: k12osn-admin at redhat.com [mailto:k12osn-admin at redhat.com]On Behalf
Of Rick O'Dell
Sent: Thursday, February 19, 2004 12:05 PM
To: k12osn at redhat.com
Subject: [K12OSN] Changing proxy settings


	Hi all I'm new to the list and Linux in general. I have a Red Hat 9
terminal server set up, I'm using squid and squidguard for proxy and
filtering. My question is how do you keep the students from changing the
proxy settings in Mozilla???? Also along the same line, is there a way to
disable Mozilla profiles or at least use one profile for everyone???? I'm
trying to get out of creating profiles and proxy settings for every
user......
Thanks...
Rick O'Dell
rodell at bakersfield.k12.mo.us
Bakersfield R4 School
Bakersfield MO


--
Outgoing mail is certified Virus Free.
Checked by AVG Anti-Virus (http://www.grisoft.com).
Version: 7.0.211 / Virus Database: 261.9.6 - Release Date: 2/18/2004


_______________________________________________
K12OSN mailing list
K12OSN at redhat.com
https://www.redhat.com/mailman/listinfo/k12osn
For more info see <http://www.k12os.org>