Re: [Efw-user] Outgoing Firewall and HTTP Proxy

[Lee M. <le...@ma...>]

On 10/28/2010 09:18 AM, Elmar Natter wrote:
> Hello,
>
> today I've encountred a strange problem. I've blocked thru Outgoing
> Firewall (means<ANY>  to<Specific IP's) DENY). This works perfectly as
> long i don't use the transparent proxy. If I enable transparent Proxy,
> Users a able to browse the Sites behind the blocked IPs. For me it's
> looking like the Endian IP is able to browse this IP's and also squid is
> able ti access them. As the transparent Proxy is able to access, user
> using this are able to. Can this be right and how to prevent the
> Proxy-Users from Accessing?
>
> Regards!
>    

Outbound access is via one of two paths:

- through the outbound firewall     -or-
- http proxy

So,  yes firewall rules are not used by the proxy.   You have to use 
proxy rules.
With a proxy, you typically block by using content filters , not 
individual sites,  but
you can also blacklist a site if needed.

Lee

-- 
"Between subtle shading and the absence of light lies the nuance of iqlusion..."  - Kryptos

Lee Marzke,     le...@ma...                              http://marzke.net/lee/