Question on Access Plans on Firewall (Kind of like an ISP)

[Bolin, Robert]

If you're going to use squid, maybe squidguard may be worth a look
(http://www.squidguard.org/) - I had the intention of setting up a similar
type of thing for my kids at one stage. Squidguard seems to promise time
access, site blocking and using different rules for different users (I'm
sure Mum and Dad don't want to be help to the same rules as the brother) . I
can only go off the website though as to it's usefulness - I still haven't
managed to get that far yet :-)

Rob

-----Original Message-----

Yep, I think this is the right way to do it.
The squid will give better performance even for web-pages that are being
constantly re-visited by the same user, but in different sessions etc.

Yes, you will need to block port 80 at the gateway, at least for the IP
address that your brothers machine is using. I haven't seen any problem
with doing this - I am not sure which applications you are referring to 
that don't know how to use a proxy.

Another option is to set squid up as a transparent proxy.

The squid ACLs will allow you to specify different access regimes for
different users.

Cheers,

Bob Edwards.