proxy server undermining group policy to block internet?

Discussion in 'Networking & Security' started by FLATcura, Oct 5, 2009.

  1. FLATcura

    FLATcura [H]Lite

    Messages:
    96
    Joined:
    Oct 20, 2006
    hey, i am completely baffled

    for years now i have used GP to give users who are not supposed to access the internet a proxy server address of 127.0.0.1. recently i installed a pfsense firewall/router using squid and squidguard set to run in transparent mode.

    now suddenly "some" of the users have internet access and i have no idea why.i would love to just tell squidguard to block the internet and leave GP out of it, but team leaders need internet access when they log into their accounts.

    ive made whitelist destination in squidguard and it dosent work, ive made a new OU and a new GP and that dosent work..

    so the problem lies with having the loopback address as my proxy server. any recommendations or suggestions on how i could block internet on a windows 2003 domain on a per user basis?

    thanks for your time :)
     
  2. djBon2112

    djBon2112 [H]ardness Supreme

    Messages:
    5,299
    Joined:
    Jul 29, 2006
    Direct it to another meaningless private IP? If you're network is a 10.x.x.x network, point the proxy to 192.168.0.1 or something stupid like that. See if that helps.