Re: [Sheflug] preventing bypass of proxy settings in browsers

[Alan Pope <alan.pope [at] xxxxxxxxx>]

On Wed, 29 Sep 2004 07:29:52 +0100, Pete Collier <pecb [at] nildram.co.uk> wrote:
>         I've managed to get dansguardian and local proxy working on my standalone
> machine. However it is possible for a user to alter their settings in a
> browser to direct connection instead of proxy. This makes dansguardian
> ineffective. How do I stop someone from altering the settings to direct
> connection?
> 
> Peter C
> 

Block ports on the firewall for traffic originating at the client PCs
using ports used by proxies, including 80, 1080, 8080, 3128 etc?

That way to get out via http they have to go via your box.

Cheers,
Al.
___________________________________________________________________

Sheffield Linux User's Group -
http://www.sheflug.co.uk/mailfaq.html

  GNU the choice of a complete generation.