Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Our network uses a DrayTek VigorPro 5510. The content filtering on this isn't particularly strong - It work's on IP ranges - for example, our 10.0.10.xx range can view anything, but 10.0.65.xx has downloads, certain sites, facebook etc... blocked.

I'm wondering if it's possible to use IPCop alongside the DrayTek? And how would I go about configuring this?

Also- I am hoping that it's possible to filter content profiles based on Active Directory membership ACL?

For example...

the "IT" group can view everything the "Customer Service" group has very limited internet access "Mangers" group (for managers of depts) can access some sites that the above group cannot.

share|improve this question

What do you want to do with IPCop? If filtering, it might better be achieved with a dedicated server running Squid, that will certianly support applying filtering based on LDAP (AD) group membership and can authenticate Windows clients automatically via NTLM.

share|improve this answer
yes, basically JUST filtering... so Squid is capable of doing this? Just the filtering part..? how would i set up the draytek to pass all traffic through the squid server? – alex Jan 14 '10 at 14:44
Squid, or maybe combine it with a product like DansGuardian for more fine grained filtering. You would setup the proxy infront of your router (client->proxy->router->internet) and configure the clients to use it, or set it as the clients' default gateway and run it in transparent mode. – James Yale Jan 14 '10 at 14:52

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.