[SOLVED] locking down proxy setting in red hat

prasanta · 02-19-2010, 10:53 AM

Since you already have the file, /usr/lib64/firefox-3.0.12/defaults/preferences/firefox.js, try using the lockPref there itself, before the share_proxy_settings.

lockPref("network.proxy.type", 0);

Create a new profile, and you should have everything disabled. Please close your existing browser. I have tried and it works.

--
Prasanta

chrism01 · 02-21-2010, 07:39 PM

Unless the users are using the console keybd of the servers, the browsers will be executing on the user (ie client) systems & accessing the server(s).
Anyway, you can easily use iptables to block any outbound addresses that are not in your LAN IP range(s).
Obviously only root has access to amend iptables.

unix1adm · 02-22-2010, 06:58 AM

Quote:

Originally Posted by prasanta

Since you already have the file, /usr/lib64/firefox-3.0.12/defaults/preferences/firefox.js, try using the lockPref there itself, before the share_proxy_settings.

lockPref("network.proxy.type", 0);

Create a new profile, and you should have everything disabled. Please close your existing browser. I have tried and it works.

--
Prasanta

I tried this as you suggested and still i can change the proxy setting and go out to the net.

But the application does start this time.

excetpt for my file..
pref("privacy.sanitize.promptOnSanitize", true);
lockPref("network.proxy.type", 0);
pref("network.proxy.share_proxy_settings", false); // use the same proxy settin
gs for all protocols

pref("network.cookie.cookieBehavior", 0); // 0-Accept, 1-dontAcceptForeign, 2-do
ntUse

unix1adm · 03-01-2010, 07:22 AM

well this has been unsuccessful. i guess Ill be talking to the network people to lock it down. I really want to keep control on the server as we will have several servers on different networks. if I could build an image with this configuration option turned off it would be simpler but nothing I tried from several sites has had the desired affects.