Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I intend to configure a server as a gateway.

I'll use it to manage network users, as well as share the internet connection for this network.

I will not share the Internet with squid, but I still wanted to be able to establish rules of access, such as sites that can not be accessed.

How can I do this without using squid?

Important note:

I consider squid an excellent software. My problem is not with the squid in particular, but with any kind of proxy, because I have clients that use a series of programs that simply can not access the Internet via proxy.

Rather to score my question negatively, you could put your points of view, and you might understand that this is a case study.

share|improve this question
    
What do you have against squid? –  Zoredache Aug 29 '11 at 18:38
    
What operating system is your gateway going to use ? –  Iain Aug 29 '11 at 18:40
    
I have seen many programs that do not support proxy simply can not access the internet. –  Paulocoghi Aug 29 '11 at 18:46
add comment

3 Answers 3

up vote 2 down vote accepted

You can use some other proxy server if you have a particular bent against squid. However, if the only limitation you have is that you use software which accesses resources via HTTP but doesn't support the explicit configuration of a proxy (which means it's stupid software, but whatever) then you can use Squid in transparent mode. It doesn't allow you some of the cool features of squid (such as proxy authentication), but it still gives you the ability to filter the websites that can be visited, and with a non-technical userbase and statically-assigned IP addresses, you can still do some measure of per-user filtering and access logging.

share|improve this answer
    
Then, the transparent proxy allows applications that do not support proxy access the internet normally. Is that right? –  Paulocoghi Aug 29 '11 at 19:07
    
Yes, that is correct. –  womble Aug 29 '11 at 20:02
    
Thank you very much, Womble. :) –  Paulocoghi Aug 31 '11 at 4:05
add comment

If you are not going to use that machine for any purpose, I would suggest you to install a firewall distro like untangle, which will provide you more control & customization.

Check Wikipedia for a complete list and choose the one which comply with your requirements.

share|improve this answer
    
please don't "sign" your posts as you have been doing. If you haven't already, please check out the FAQ section on the subject. –  Ben Pilbrow Aug 29 '11 at 18:46
    
Thanks for the note, Ben :) –  SparX Aug 29 '11 at 20:38
add comment

You can check out http://www.opendns.com/

I use it in a bar for restricting public wifi access. Using firewall I blocked local network to use any other DNS service but the local DNS one; and local DNS is just forwarder for OpenDNS.

Via OpenDNS web you can specify groups of sites you want to block, or specify per domain which things should be blocked. Definitely not a bullet proof solution but a simple and easy to deploy that will serve well in most environments when you need quick and easy to maintain solution.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.