blacklist not for all users

[smbsmb]

I started to use 1.0.beta12.
Is there a way to use the thansparent proxy with a blacklist
not for all users of my office network?
For example, a chief and some managers has access to all sites,
but others have the blacklist of sites.

Also, is there a way for this blacklist to be time-specific,
for example – during lunch time (13:00-14:00) all users
can visit all sites (Let them get fun insted of lunch if they want)? 🙂

The problems is that the managers don’t have their personal PCs,
the use PCs shared with other users.

Can ZS as a PPTP Server as Host-toLAN to solve this problem
(“host” will be really inside of LAN, not outside) ?
For example, my users could work without VPN tunnel to ZS – and get blacklist,
but the managers can login to this VPN tunnel and work without blacklists.

Or could OpenDNS solve this problem?

[smbsmb]

Can Captive Portal help in this case?

[ppalias]

You can exclude the manager IP addresses from being passed through the proxy, in the same place you include the subnet that will be passing through the proxy. Instead of capture, select NOT CAPTURE for them.

There doesn’t seem to be an official way to let everyone browse during lunch break, but you could try that with a script or with cron.

Yes you can also do what you say, let everyone who is connected through a tunnel browse without blacklist. Just exclude this interface-subnet from proxy service.

[yum]

You can use pfsense distribution. It features squid proxy + squidGuard module. But pfsense lacks some other features that ZS has.

[Author]

Posts