Advertisement
Help Keep Boards Alive. Support us by going ad free today. See here: https://subscriptions.boards.ie/.
If we do not hit our goal we will be forced to close the site.

Current status: https://keepboardsalive.com/

Annual subs are best for most impact. If you are still undecided on going Ad Free - you can also donate using the Paypal Donate option. All contribution helps. Thank you.
https://www.boards.ie/group/1878-subscribers-forum

Private Group for paid up members of Boards.ie. Join the club.

Proxy Auto Config question re firewall

  • 09-08-2005 09:47AM
    #1
    Capt'n Midnight
    Moderators, Recreation & Hobbies Moderators, Science, Health & Environment Moderators, Technology & Internet Moderators Posts: 96,006 Mod ✭✭✭✭


    Our firewall allows some PC's more internet access than others. So I can't just stick in a proxy as some people will have too much/too little internet access.

    The firewall replaces blocked pages with a generic html page, so I'm not sure if the proxy can tell if it's hit a block or not. I can't export the firewall rules to the proxy server 'cos that would be just too easy :rolleyes:

    I could setup one proxy (SquitNT) per firewall profile so each PC would connect to a proxy that was on the same firewall rules as it - this is messy and I'd rather not do it that way.
    If I do this I could setup them to be cache peers - I just want to confirm that one of the peers won't retrieve stuff from the internet for another peer that isn't allowed out to all of the internet because of it's rules. Or do I just setup the one with least access as a parent ?

    Or is there any way I could get Squid to use make it's requests using the IP address of the PC instead of it's own address so that the firewall rules apply (can't use fancy tricks 'cos it will be running on a windows box) ?

    Proxy Autoconfig for clients - yes I can set it up so if a proxy isn't found PC's can go direct - but would this work on a per site basis so that if the proxy can't find a site the client (IE) would go direct ?
    http://wp.netscape.com/eng/mozilla/2.0/relnotes/demo/proxy-live.html


Advertisement