Help me with squid guard

[iamthed]

do i need configure my browser to use the proxy?
my boss gave me this project to prevent staff from accessing porn stuff..
if ur suggestion to configure browser to use proxy and i must go to the everyone computer in my company and set the browser?
i think it's not efficient.. is there any other way to solve this case?
or i juz block based on IP address in rules?

[dvserg]

Enable Transparent proxy in Squid

[iamthed]

@dvserg:

Enable Transparent proxy in Squid

still the same.. i can browse.. any idea??
i configure the squid only like this..
is it wrong?

[dvserg]

Possible view squid and squidGuard config's ?
/usr/local/etc/squid/squid.conf
/usr/local/etc/squidGuard/squidGuard.conf

[iamthed]

do you mean like this?

how do you see
/usr/local/etc/squid/squid.conf
/usr/local/etc/squidGuard/squidGuard.conf
in shell ??
sorry i'm newbie in freebsd this shell makes me crazy..

12.txt
13.txt
14.txt

[dvserg]

still the same.. [u][b]i can browse[/b][/u].. any idea??
i configure the squid only like this..
is it wrong?

You can browse or you users ?
I found this in you config

src test2 {
ip 122.200.14.67
}
...
acl {
# 
test2 {
pass !in-addr !blk_BL_porn !blk_BL_warez [u][b]all[/b][/u]
redirect ...
rewrite test62
}

From ip 122.200.14.67 - you allow browse. All any - no

[iamthed]

i'm the one who configured it.. and i test it..
the illustration like this

my PC –--->PFsense------>switch-----> router

when i browse i'm act as a user.. before i'm implementing it..

i already set the deny rules
see the picture above
is there any error on my log?

[dvserg]

Also if you setup browser proxy options  - what behavior with blocking ?

[iamthed]

@dvserg:

Also if you setup browser proxy options  - what behavior with blocking ?

i wanna test the squidguard is working.. so i deny all as the default..
if my default is deny then it must be block anything right..
but i still can browse..
or i should reinstall sg and squid and installed it again?
hey if you don't mind can u PM me ur printscreen squid+squidguard
i'd like to see it..
i'm affraid that i misconfigure about the squid..
and sorry if it's bother you..

[dvserg]

Try this pls

• disable transparent mode in squid, disable squidGuard
• set you brouser Proxy options as squid configured (ip/port)
• test http browsing = must work
• enable SG, remove all ACL's, Default page set [all Deny], disable safesearch, Apply
• test HTTP browsing - must be nothing.

[iamthed]

@dvserg:

Try this pls

• disable transparent mode in squid, disable squidGuard
• set you brouser Proxy options as squid configured (ip/port)
• test http browsing = must work
• enable SG, remove all ACL's, Default page set [all Deny], disable safesearch, Apply
• test HTTP browsing - must be nothing.

thx for ur answer but when i configure like u said i have a problem..
when i set proxy..
it cannot connect to internet..
plz see the picture below
any idea where it might be wrong??
thx again

[dvserg]

Why enabled squid upstream proxy? Squid has parent proxy server ?
And you browser must be set to squid IP/Port, but not to upstream proxy setting.

[iamthed]

@dvserg:

Why enabled squid upstream proxy? Squid has parent proxy server ?
And you browser must be set to squid IP/Port, but not to upstream proxy setting.

thx.. it's worked.. it's blocked everything.. even i tried to change the default rules to allow all traffic..  ???

but how to enable the transparent proxy server..
so if client want to access website with port 80 they go to proxy server..
cmiiw if i'm using transparent proxy it means i don't need to setup the browser proxy right?

i already setup the like this but it's blocked all traffic..
thx dvserg