RE: [squid-users] MIGHT INTEREST YOU ALL

Thanks Robert.!!
That's what we do with windows 2000..centralised control.
Can we do something with ipchains MASQUERADE for the SSL traffic.

Thanks
Kushal

-----Original Message-----
From: Robert Adkins [mailto:raa@impelind.com]
Sent: Friday, May 03, 2002 11:25 AM
To: Kushal Lala; mailinglistsquid-users@squid-cache.org
Subject: RE: [squid-users] MIGHT INTEREST YOU ALL

A Transparent Proxy would be nice, although as far as I know, Squid is
unable to handle SSL traffic in a transparent mode. So, you would be out
of luck with that.

What you could do, to change the browser settings... Well, that would
depend on your network.

        With a Windows 2000 Active Directory network, you should be able to
change the settings for the proxy server through registry changes with
Group Policy Objects. You could also set all of the browsers to point to
a central in-house web-server that you could post Active-X controls to
that could be used to radically alter browser settings. Then, you
shouldn't have to run from desk to desk and have your support lines
filled with phones.

        For UNIX workstations, that setting should be in a text configuration
file for each and every user. In that case, a simple script could be
designed to run when a user logs into the network. This can be used to
alter the proxy server settings. Again, this should keep you from having
to run about your network and keep your support calls to a minimum.

        If you are using older MacOS systems... I am unable to help you there. I
do figure that newer MacOSX systems would be configured similar to the
UNIX workstations.

        Well, I hope that information can be of some use to you. Perhaps there
is something out there that will support a transparent proxy SSL data.

Regards,
Robert Adkins
IT Manager/Buyer
IMPEL Industries, Inc.

 -----Original Message-----
From: Kushal Lala [mailto:klala@scif.com]
Sent: Friday, May 03, 2002 11:03 AM
To: mailinglistsquid-users@squid-cache.org; squid-users@squid-cache.org;
Robert Adkins
Subject: [squid-users] MIGHT INTEREST YOU ALL :)

Hi All:

I am trying to figure out a way of implementing proxy
in our BGP network. Presently we have the proxy servers running in one
location and all the user browsers are configured to use those servers.
But eventually we want the proxy servers to run in three different
locations; cos if one site goes down the users can go out thru the other
side. But there is a hassle of manually configuring the browsers to
change
the proxy server ip :(

So guys what can be the best solution.."Transparent Proxy". But the users
could be more than 8000.

TIA
Received on Fri May 03 2002 - 12:48:48 MDT