Re: [Nufw-users] nufw and squid

[Eric Leblond]

Le mercredi 02 novembre 2005 à 10:46 +0100, maria perez a écrit :
> Hi,
> I am new in this list.
> I have discovered nufw searching solutions to my problem. I have working in 
> a tool for paternal control of the web use. We are using the proxy squid to 
> the content filter and we need establish transparent authentication for 
> users  at the same time the proxy works in transparent manner.
> I have read nufw offer these capacitys with the module squid-nufw-helper. If 
> i am not in a mistake about with nufw is possible squid works like 
> transparent proxy and offer transparent authenticacion to the system users.
> The idea is squid run in the same host, (like local proxy), with squidguard 
> to filter the web traffic.
> Have you any notice about similar attempt?

Yes, it is a setup that we already thought of and I think some people
have work to achieve this.

> How does it work nufw with squid?

You need to use the SQL database event storage and set up
squid-nufw-helper.

> Could you to guide me in this direction?

The main idea is that you have to put filtering rules in PREROUTING|
mangle as the filtering needs to occur before the NAT is done.
If you do filtering in FORWARD the destination of the packet will be
changed and the nufw client will send erroneous packet.

> Thank you in advance for your attention, and excuse me my irregular english.

No problem, I'm not a native speaker too ;-)

Don't hesitate to mail back if you need more details.

BR,
-- 
Eric Leblond <address@hidden>