Web proxing question
 

Hello,

I'm curious as to how M$ Internet Explorer's 'Automatically detect settings' work and wether or not Squid can be setup to be detected in that fashion.

FYI...I run Squid concurrently with Iptables as a router...this is so as to gain some speed via Squid's cache.

Thank you

Hey pembo, curious to find this myself. I did lot's of searching and came up with little so..

Which part of the Carrib are you from? I'm Jamaican but living in Oz since 1979.

I am from Dominica aka 'The Nature Isle'.

Where is Oz?

Is there any proof that this M$ Internet Explorer feature ever detects proxies at all?

Peace

Australia.
I have never seen it working full stop but that doesn't mean anything.

I think it just tries to contact Microsoft using a variety of methods but again not really sure. Would love to find out though

I dont really know HOW it works but if you are wanting to ensure that everything is passed through the proxy your best bet is to Forward requests on Port 80 to port 3128

eg...

# Redirect Traffic for Port 80 to Squid Proxy Server:3128
$IPTABLES -t nat -A PREROUTING -i $INSIDE -p tcp --dport 80 -j REDIRECT --to-port 3128

this will make everything connecting on port 80 go to 3128 (default squid port)

Cool. Thanks for the info Chris. Will put that into my archives for next time. I've been manually configuring the client machines with the proxy info so this could be usefull. Of course if you want to run an internal server at that IP you would need to modify that rule but it's all good.

no probs :)

ya if u wanted an internal proxy that would reside off of the gateway you would need to Forward to that computer too as well as the port.. not sure if this would create problems... dont think it should though hmmm

i think something like...
IPTABLES=/sbin/iptables
INSIDE=eth1
PROXYSERVER="192.168.1.2"

$IPTABLES -t nat -A PREROUTING -i $INSIDE -p tcp -m tcp --dport 80 -j DNAT --to $PROXYSERVER:3128

etc etc

then in the iptables make sure the proxy has the correct permissions to get back through??? nto sure :)

Hello chrisfirestar,

I'm aware of that transparent prooxing option....just was curious about things...right now I have my proxy clients being configured via a .pac file.

But thanks for the advice.