23a9b6ff97
For working exam-mode we need to block direct internet access by firewall. Users have to use squid-proxy on firewall, which can be disabled for exam-users. To allow VM-traffic (anonymous user), we use a local squid server with users kerberos-ticket to authenticate on the parent squid. When using VMs on teacherdevices offsite, the local squid has to use direct internet access. So we need two squid configs. When switching between offsite and onsite, the squid has to be restartet with corresponding config.
11 lines
354 B
Django/Jinja
11 lines
354 B
Django/Jinja
acl local-servers dstdomain .{{ domain }}
|
|
cache_peer firewall.{{ domain }} parent 3128 0 no-query default login=NEGOTIATE auth-no-keytab
|
|
never_direct deny local-servers
|
|
never_direct allow all
|
|
#access_log stdio:/tmp/access.log squid
|
|
access_log none
|
|
cache_log /dev/null
|
|
logfile_rotate 0
|
|
pid_filename none
|
|
http_port 192.168.122.1:3128
|
|
http_access allow all
|