Peter Farrow peter@farrows.org wrote:
You can always use a transparent proxy if you want inetnet access, but don't want all ports with direct access outbound...
Okay, step back a bit. I am _not_ asking why people use proxy services. Going back to the SELinux thread, I figured you'all would pick up on the fact that I _deny_all_ outgoing by _default_.
That means there _is_ a proxy server, if not an advanced filtering layer-7 gateway, that users _must_ go through.
I'm just saying that I don't use transparent proxy redirection. In fact, most of the nodes on my network are setup with_out_ a default gateway. That removes a lot of issues. ;->