how to setup a proxy server to allow access to selected sites only 1

[Sina]

Hello everyone?

How can I create a custom proxy server to allow only access to selected domains on the internet only.

i.e Allow access to the following sites only:

http://www.cnn.com

http://www.yahoo.com

http://www.google.com

Using squid is that possible?

Thanks for your help.

 

[ifincham]

Hi,

You would do something like this :

acl all src 0/0
acl mylan src 172.16.16.0/255.255.255.0
acl acldoms dstdomain .cnn.com .yahoo.com .google.com
http_access allow acldoms mylan
http_access deny all

Hopefully that's self-explanatory. See -->

http://www.squid-cache.org/Doc/FAQ/FAQ-10.html

.

Regards

 

[Sina]

Hi ifincham,

First of all thank you so very much for the hint.
Now one question I have. the company has a proxy server that is basically the main proxy. called globalproxy.city.gov.

I have to setup a proxy for our department that forwards requests to the main proxy (globalproxy.city.gov.).

I already installed a proxy server(call it gatekeeper) on Linux for our department and in the browser (netscape) on linux I can get out to the ineternet using the globalproxy.city.gov.

The client workstation has to use the proxy gatekeeper to access only the selected domains.

What should I do (or where to look for ) to tell the gatekeeper to allow forwarding or internet access for client who use the gatekeeper as their proxy server to simply allow internet access for only selected domains?
i.e

http://www.yahoo.ca

http://www.cnn.com

I hope I'm clear, since we do not have access to the global proxy server and it is pretty wide open, we can not request changes to the global proxy server, hence creating a custum proxy server for this purpose to allow limited domains through.

Your help is greatly appreciated.

Thanks much

 

[Sina]

I don't know if I should be using IPchains, ipforwarding (echo "1" > ip_forward) or squid?

Just which way should I go?

Thanks