Author Topic: Proxy filter  (Read 3131 times)

matias-holder

  • Zen Apprentice
  • *
  • Posts: 12
  • Karma: +0/-0
    • View Profile
Re: Proxy filter
« Reply #15 on: July 21, 2011, 08:25:27 pm »
I check the ip adress of my pc and is the same that i put in an object of zentyal(cmd ip config in windows ).
I have a windows 2003 server and i reserve this ip for this pc with him mac adress in the dhcp server.
I chek again and i have the transparent proxy activated(the checkbox).

In the profile(filter profile default) i select content filter threshold in very strict and in domain filtering i add some pages for testing like a newspaper from argentina that is http (not https) that should block.
Thanks
« Last Edit: July 21, 2011, 08:28:31 pm by matias-holder »

Christophe

  • Zen Warrior
  • ***
  • Posts: 170
  • Karma: +6/-1
    • View Profile
Re: Proxy filter
« Reply #16 on: July 21, 2011, 08:28:09 pm »
Where is your gateway  : Win2003 or Zentyal ?
Zentyal has to be your gateway for transparent proxy
DELL PowerEDGE R210 - ESXi 4.1 - 4 VM Zentyal

matias-holder

  • Zen Apprentice
  • *
  • Posts: 12
  • Karma: +0/-0
    • View Profile
Re: Proxy filter
« Reply #17 on: July 21, 2011, 08:37:35 pm »
my gateway is windows 2003. I dont want transparent proxy like i said. i want to manually configure the machines that will have the internet restricted. The idea is that the zentyal only works for this purpose. Can i do this with zentyal?
Thanks

Christophe

  • Zen Warrior
  • ***
  • Posts: 170
  • Karma: +6/-1
    • View Profile
Re: Proxy filter
« Reply #18 on: July 21, 2011, 08:46:19 pm »
I'm sorry ! i understood you wanted transparent proxy.

you have to disable (uncheck transparent proxy)
and manage with group policy

and in your machines (web browser), set adress of your proxy and the port (3128, i think)

for more detail, have you read this doc : http://doc.zentyal.org/en/proxy.html

DELL PowerEDGE R210 - ESXi 4.1 - 4 VM Zentyal

matias-holder

  • Zen Apprentice
  • *
  • Posts: 12
  • Karma: +0/-0
    • View Profile
Re: Proxy filter
« Reply #19 on: July 21, 2011, 08:54:57 pm »
Yes , i did this things, i have my pc with the proxy configured that have the port 8080(set it in zentyal) and with this i have internet(the proxy is working) if i put in http proxy general to always deny i dont have internet (it works) but if i want to restrict only some sites it doesnt works. i Readed this docs.
I dont want to use the groups because a lot of employees dont use their credentials to log on(use ubuntu) so i think that it wouldnt work, i only want to that all the machines that are conected to the proxy(manually configured) cant enter to facebook, hotmail ,and some other pages. The others machines will conect without the proxy and have to access the internet without restriction.
Thanks
« Last Edit: July 21, 2011, 08:58:25 pm by matias-holder »

Christophe

  • Zen Warrior
  • ***
  • Posts: 170
  • Karma: +6/-1
    • View Profile
Re: Proxy filter
« Reply #20 on: July 21, 2011, 09:18:45 pm »
ok, your proxy works, it's a good thing.

in proxy http => general => did you set your filter to filter

did you set group policy  for admin group ?
DELL PowerEDGE R210 - ESXi 4.1 - 4 VM Zentyal

matias-holder

  • Zen Apprentice
  • *
  • Posts: 12
  • Karma: +0/-0
    • View Profile
Re: Proxy filter
« Reply #21 on: July 21, 2011, 09:23:04 pm »
i dont have any group, i have to create one? . i dont want to transfer the active directory users to the zentyal because it wouldnt work(like i said the employees dont use their credential to log on)

Christophe

  • Zen Warrior
  • ***
  • Posts: 170
  • Karma: +6/-1
    • View Profile
Re: Proxy filter
« Reply #22 on: July 21, 2011, 09:36:04 pm »
there is something i dont understand :

1. if you dont want use  credentials users, why not use transparent mode ?
2. if someone unset proxy in web browser, are you sur you continue block http ?

i find another doc http://trac.zentyal.org/wiki/Documentation/Advancedproxy

i use tranparent mode (easier to manage). I need read more before continue with you



DELL PowerEDGE R210 - ESXi 4.1 - 4 VM Zentyal

Christophe

  • Zen Warrior
  • ***
  • Posts: 170
  • Karma: +6/-1
    • View Profile
Re: Proxy filter
« Reply #23 on: July 21, 2011, 09:42:41 pm »
it could be difficult to manage a none transparent proxy without manage user !
DELL PowerEDGE R210 - ESXi 4.1 - 4 VM Zentyal

matias-holder

  • Zen Apprentice
  • *
  • Posts: 12
  • Karma: +0/-0
    • View Profile
Re: Proxy filter
« Reply #24 on: July 21, 2011, 10:00:59 pm »
1. if you dont want use  credentials users, why not use transparent mode ?
2. if someone unset proxy in web browser, are you sur you continue block http ?

because we dont want to put something between some machines and internet(is not my decision)
The idea is to remove the default gateway in the host machines so if they remove the proxy configuration in the browser they wouldnt have internet at all(tested and it worked this way)
Can i create a transparent proxy that only some computers use and others conect directly to the router?
Thanks

Christophe

  • Zen Warrior
  • ***
  • Posts: 170
  • Karma: +6/-1
    • View Profile
Re: Proxy filter
« Reply #25 on: July 21, 2011, 10:10:33 pm »
Quote
Can i create a transparent proxy that only some computers use and others conect directly to the router?

Unfortunately, i think no, because you firewall will redirect all http request to 3128 in trasnparent mode.

You can do that, only if you use another network.

but in transparent mode, you can manage filter also, for admin and user machines.
DELL PowerEDGE R210 - ESXi 4.1 - 4 VM Zentyal