Tag Info

Hot answers tagged

3

This is a classic case of trying to use technology to enforce a process or business practice and doing such things often leads to unintended results. I'd find some other "incentive" to "encourage" them to do these things before forcing it down their throats with technology.


3

The typical technical approach is to install a HTTP proxy server where you implement your download restrictions/policies. Then you can use a GPO to enforce that the proxy server gets used (assuming that your computers are all AD domain members) and as the next phase you block direct internet access at your gateway/firewall. Normally you precede the ...


2

This website is using SSL Client certificates for authentication. The dialog box is asking you to specify which certificate you'd like to authenticate with.


1

Order is important. Put the allow line before the deny. Also url_regex matches one the whole URL including http:// so you need to change your regexes. Remember to restart or reload squid after changes.


1

You will need to add local host to the localnet definition. acl localnet src 127.0.0.1 # localhost acl localnet src ::1 # IPv6 localhost Using a firewall to force transparent proxy access on localhost will require some additional parameters to ignore traffic from squid.


1

Yes, you could perfectly create a Compute Engine instance to act as the proxy. The only caution you should take is to use a static IP for that instance (instead of a temporary IP), so that if the instance gets rebooted, the IP wouldn't change from the one you authorized in your Cloud SQL instance.


1

Squid has the option offline_mode which will always serve content from cache, if it is present there. It is neither a safe general purpose option, nor a recommended, but can be useful in some occasions. But expect some odd web browsing experiences.


1

Six year later I came to this question and almost let it down based on the accepted answer. As of today, it is not complicated, using policy routing. All the details are available on this same site, at http://serverfault.com/a/389004/70774. In my case, I had first to make sure that the vpn was not the default route. How you will achieve that depends on what ...


1

I ran into the same black screen + disconnect problem myself today, using putty as my client. I did find a solution eventually. I switched from putty to bitvise tunnelier, and setup a S2C connection with the following settings: listen if:0.0.0.0 listen port:13389 destination host:localhost dest port:3389 As chance would have it, I'm using bitvise ssh ...


1

Nginx configured as a reverse proxy can do this easily : http { upstream remoteserver { # here you add your remote server's IPs or hostnames server 54.175.222.246; # for example here we use HTTPBin's address keepalive 10; # maintain a maximum of 10 open connections } server { listen 80; location / { proxy_set_header X-Forwarded-For ...


1

It is a usual case, you have a proxy with SSL termination, the connection between the client and the proxy is SSL encrypted. At the proxy, the traffic is being decrypted and forwarded to the real server(s) on the local/trusted network. All can be done with the internal Apache mods, i.e. mod_ssl.


1

Apparently, this is what you are looking for: http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_ssl_certificate Available since version 1.7.8. location / { ... proxy_pass the_other_nginx; proxy_ssl_certificate the_certificate.pem; ... }


1

It depends on how the users are using the workstations in question--are they supposed to be saving files, or are these generic workstations? Is the problem that you don't want them listening to music, or that they're downloading viruses with their music? (I also don't know your budget.) Depending on this, I'd probably use multiple approaches. Proxy ...


1

You could use GPO to force the browsers to use a specific web proxy and then install a forward web proxy such as apache on a new server and put the functionality you need into the proxy itself. Clever users may be able to work out ways to bypass the proxy e.g. by using browsers that dont look at GPO settings but you could always block outbound HTTP and ...



Only top voted, non community-wiki answers of a minimum length are eligible