[TriLUG] limiting Internet access with squid?

[Jeremy Portzer]

Magnus wrote:
> Greg Brown wrote:
>> Problem: I have a client with a small network at a resturant.  His 
>> computer
>> is XP Home so it can't be locked and he would like to restrict Internet
>> access (when he isn't there his employees are surfing the web on the 
>> office
>> computer, going to myspace.com, crap like that.  


> If you don't block anything, it would be trivial for someone to connect 
> to the internet via their own proxy server or ssh account.

Magnus, how likely do you think it is that the average "restaurant" 
employee is going to be able to use their own proxy server and/or ssh 
account?  Or even if they could figure that out, that they would really 
spend the time doing that?   From the description there is clearly a 
desire to prevent *casual* use - this is not bulletproof corporate 
security we're talking about.

In my opinion the restaurant owner should set reasonable expectations 
about employee performance that make sure the work gets done when he's 
not around, and as long as the work duties are taken care of, why should 
he care if they surf myspace or not during breaks.  But I can understand 
if their use of the company computer causes spyware and such to get 
installed.

Then again, I understand how hard it is to find responsible workers in 
the Triangle's service economy.  Still, I wouldn't want to work in a 
place where I was treated like a child - so it goes both ways.

--Jeremy