Squid and IPFW

[Ted Mittelstaedt]

> -----Original Message-----
> From: owner-freebsd-questions at freebsd.org
> [mailto:owner-freebsd-questions at freebsd.org]On Behalf Of RW
> Sent: Friday, June 01, 2007 5:23 AM
> To: freebsd-questions at freebsd.org
> Subject: Re: Squid and IPFW
> 
> 
> On Thu, 31 May 2007 13:13:36 -0400
> "Spiros Papadopoulos" <spap13 at googlemail.com> wrote:
> 
> > Dear all,
> > 
> > I would like to setup a gw / firewall (IPFW) which will also run
> > Squid, in order to restrict access to certain websites
> > or to allow certain workstations to have full access to the internet.
> > How can I redirect all traffic going to port 80 on the gw, to port
> > 3128 on Squid 
> 
> Are you really sure you want to do that way?  Squid wont be able to
> control access to https or ftp. And what about http on non-standard
> ports, e.g. http://easynews.com:81 
> 

The people that are smart enough to get around this kind of a block
in an organization are generally not the problem.  It is the morons that
have no concept of appropriate use of the Internet in the workplace
who are the problems, and they will be effectively stopped.

I use much the same setup for my 8 year old son.  He only gets Internet
access to websites that we have approved and added to the squid list.


Ted