[PLUTO-help] Domanda su Firewall-Proxy

[Mariano Cunietti]

> volevo sapere se c'è un modo per obbligare tutti
> i client di una lan a passare dal proxy per uscire su
> internet.

> Il mio proxy è sullo stesso PC che fa da GATEWAY,

La risposta al tuo problema si chiama "transparent proxy". 

cito:

"In ``ordinary'' proxying, the client specifies the hostname and port
number of a proxy in his web browsing software. The browser then makes
requests to the proxy, and the proxy forwards them to the origin
servers. This is all fine and good, but sometimes one of several
situations arise. Either

      * You want to force clients on your network to use the proxy,
        whether they want to or not.
      * You want clients to use a proxy, but don't want them to know
        they're being proxied.
      * You want clients to be proxied, but don't want to go to all the
        work of updating the settings in hundreds or thousands of web
        browsers.
This is where transparent proxying comes in. A web request can be
intercepted by the proxy, transparently. That is, as far as the client
software knows, it is talking to the origin server itself, when it is
really talking to the proxy server. "


La tua configurazione di rete quindi va benissimo così com'è. 
Per una spiegazione di cosa sia il transparent proxy e di come si
implementi su Linux e usando Squid, vai qui:

http://www.tldp.org/HOWTO/TransparentProxy.html#toc2

Ciao

Mariano
-----------------------------
Mariano Cunietti
System Administrator
Enter S.r.l.
Via  Stefanardo da Vimercate, 28
20128 - Milano - Italy
Tel.  +39 02 25514319
Fax   +39 02 25514303
mcunietti a enter.it
www.enter.it - www.enterpoint.it
-----------------------------
Gruppo Y2K - www.gruppoy2k.it