topic Re: SQUID allows autodetect settings in IE in Operating System - Linux

SQUID allows autodetect settings in IE

nibble — Tue, 09 Aug 2005 22:05:59 GMT

hi guys, help on this please.

ive got squid with authentication setting. using IE, if use proxy is set, authentication works and the user can use the internet.

but if IE is set to Automatically Detect Settings (w/o proxy), it still can...

i want to control it as much as possible, that they need to use the proxy so that they need to authenticate first..
any idea how to do this in the squid or iptables perhaps?

thanks,

Re: SQUID allows autodetect settings in IE

Steven Chan_9 — Tue, 09 Aug 2005 23:02:57 GMT

Hi~

You can use proxy.pac or wpad.dat.

With proxy.pac, you can put this script on any webserver then setup client's IE to get configuration form this webserver.

With wpad.dat, you can put this sctipt to a webserver name "wpad" in your client's domain then setup client's IE to auto detact proxy.

For proxy.pac:

http://wp.netscape.com/eng/mozilla/2.0/relnotes/demo/proxy-live.html

For wpad.dat

http://www.wrec.org/Drafts/draft-cooper-webi-wpad-00.txt

But if you want to force all clients' IE to access Internet via you proxy server, you'd better disable all you clients' Internet access form your firewall.

regards,
Steven Chan

Re: SQUID allows autodetect settings in IE

Bejoy C Alias — Tue, 09 Aug 2005 23:39:00 GMT

U can use acl for restricting access to the squid proxy based on ip address on user name, passwd combinations. If u want to allow only a certain ips , then u can add something like below in ur squid.conf file's acl section .

acl test src 192.168.1.1/255.255.255.255
acl all src 0.0.0.0/0.0.0.0

Then add the following to the http_access section

http_access allow test
http_access deny all

This will allow access for only the ip 192.168.1.1 and all the other addresses will be blocked . U can add ur ips before the 'acl all ' and in http_access .

Re: SQUID allows autodetect settings in IE

Patrick Terlisten — Fri, 12 Aug 2005 01:07:14 GMT

Hello,

be sure that you clients canÂ´t reach the internet over the standard gateway. Your standard gateway must deny the internet access for you clients, so that the clients _must_ use the proxy to reach the internet.

Regards,
Patrick

Re: SQUID allows autodetect settings in IE

nibble — Mon, 04 Sep 2006 05:44:55 GMT

thanks!