Changes

'''1) Configure your SME Server to use Transparent Proxy port 8080 and to block direct access to the squid proxy port 3128 & redirect port 80 to port 8080'''

'''1) Configure your SME Server to use Transparent Proxy port 8080 and to block direct access to the squid proxy port 3128 & redirect port 80 to port 8080'''

Note the functionality to create the required custom firewall rules using iptables is built in to the smeserver-dansguardian and is configured with the following commands

Note the functionality to create the required custom firewall rules using iptables is built in to the smeserver-dansguardian and is configured with the following commands. The Transparent proxy must also be enabled (which is the sme default) to prevent users bypassing Dansguardian filtering.

  config setprop squid TransparentPort 8080

  config setprop squid TransparentPort 8080

  signal-event post-upgrade; signal-event reboot

  signal-event post-upgrade; signal-event reboot

To return Transparent Proxy port to default value and to disable portblocking

To return Transparent Proxy port to default value and to disable portblocking and to enable the Transparent proxy (which is the sme default)

  config setprop squid TransparentPort 3128

  config setprop squid TransparentPort 3128

  config setprop squid Transparent no

  config setprop squid Transparent yes

  config delprop dansguardian portblocking

  config delprop dansguardian portblocking

  signal-event post-upgrade; signal-event reboot  

  signal-event post-upgrade; signal-event reboot  

{{Note box|If you disable the Transparent Proxy feature of SME Server, Dansguardian can be bypassed at will by your users. You should keep the Transparent Proxy enabled (but configured as above) for filtering to work.}}

{{Note box|If you disable the Transparent Proxy feature of SME Server, Dansguardian can be bypassed at will by your users. You should keep the Transparent Proxy enabled (configured as above) for filtering to work.}}

   

   

'''2) Configure your workstation web browser to auto detect proxy port'''

'''2) Configure your workstation web browser to auto detect proxy port'''