On Fri, May 22, 2009 at 12:55 AM, Dhaval Thakar <dhaval.thakar at networthdirect.com> wrote: > > John R Pierce wrote: >> Dhaval Thakar wrote: >> >>> Hi, >>> >>> I am using Squid for local users since two years & is working fine. >>> I am trying to implement web filtering for remote computers e.g few laptops & branch / franchise computers on dynamic ips. >>> >>> I do not want to use Squid proxy for it, if all remote computers will use Squid from my public ip, bandwidth utilization will increase. >>> Need valuable suggestion to achieve this. >>> >>> >> >> how are these remote computers connected to the network, and what OS are >> they running? >> >> > all are windows clients > connecting through internet using dynamic ips. >> filtering, by necessity, has to be between the user and the thing you >> want to filter. >> > > _______________________________________________ > CentOS mailing list > CentOS at centos.org > http://lists.centos.org/mailman/listinfo/centos > Good morning: If your needs are simple (e.g. you are able to apply one filtering policy to roughly all users at the same time and you aren't concerned with per-user reporting on usage for accountability, etc.) you can try OpenDNS. I just use this service for normal name resolution but they have a filtering service as well. http://www.opendns.com/solutions/enterprise/filtering/ Of course you can get around this filtering scheme but then no web filtering technique is fool-proof...and blocking outbound dns requests to all resolvers except the IP addresses of OpenDNS (there are just two to put in your firewall) would go a long way towards preventing users from escaping the filter. -- Jake Paulus JakePaulus at gmail.com