...

The only possibility is to force all LAN stations to pass through the proxy...somehow... Is there a fool-proof way to set the default proxy/route in Windows? Also, how do I restrict LIMITED users from changing the LAN settings?

All your help will be appreciated.

G.Patronas.

1. Cisco Router+WCCPv2+Squid. 2. For Windows in AD environment, GPO to get proxy.pac files loaded for browsing. That is foolproof to me.

You can also use iptables to redirect all traffic hitting port 80 and 443 to the proxy server. Note, 443 traffic may result to your breaking SSL, just throwing it there in case you plan to proxy that too and have taken the necessary actions to make it possible. Muriithi