RE: [squid-users] Using Squid as a proxy to change network devices' properties instead of web broswers'?

From: Dean Weimer <dweimer_at_orscheln.com>
Date: Wed, 15 Apr 2009 09:34:23 -0500

Interesting, saw this and thought that it might solve some problems I have been having with applications that import settings from the browser, but don't work with auto detect. I thought I would try this on Vista, of course it doesn't exist, but there is a replacement.

In Vista (of course you have to run as admin):
To Display current setting:
netsh winhttp show proxy
To import form IE:
netsh winhttp import proxy source=ie
(Does anyone know if you can use a different source?)
To manually set it:
netsh winhttp set myproxy:port "<local>;localsite1;localsite2;..."
To Set back to direct:
netsh winhttp reset proxy

Also I noticed that it imports no proxy if you are set to use a script or automatically detect, the proxycfg in XP still pulls the manual configuration even after I set it to auto detect. It was set to manual configuration the first time I ran the command, so it appears to not look at the current settings but looks at what is in the registry for the manual configuration whether or not it is currently enabled.

In XP:
To Display Current Settings:
proxycfg -d
To Import from IE:
Proxycfg -u
To Manually Set:
Proxycfg -p myproxy:port "<local>;localsite1;localsite2;..."

Looks like under my environment I will have to use the manual set options to possibly solve the issue, the main problem I have found is that Java doesn't seem to work correctly if the browser is configured for auto detect, it will work however, if the browser is set to use a specific configuration script, or a manually configured proxy. Both of these options however do require the user to change settings if they have a laptop and try to use it outside of our network.
Guess if this command fixes the problem I can look at writing a startup script to detect if they are on our local LAN or not and set it to direct or a manual proxy depending on the result, then push this script to clients with group policy.

Thanks,
     Dean Weimer
     Network Administrator
     Orscheln Management Co

-----Original Message-----
From: Amos Jeffries [mailto:squid3_at_treenet.co.nz]
Sent: Wednesday, April 15, 2009 7:32 AM
To: Phillip Pi
Cc: squid-users_at_squid-cache.org
Subject: Re: [squid-users] Using Squid as a proxy to change network devices' properties instead of web broswers'?

Phillip Pi wrote:
> Hello.
>
> I got Squid v2.7 stable 6 installed and working in a Windows XP Pro. SP2
> machine, with its IIS, as a proxy server. I can make clients' web
> browsers (e.g., IE and Firefox in Windows XP), go through this proxy
> server with no problems.
>
> I am wondering if I can use Squid to do the same proxy for network
> devices (e.g., onboard network). I would like to be able to set up PCs'
> Internet access instead of web browsers.
>
> Thank you in advance. :)

The use of Squid as HTTP proxy is limited only individual app or devices
capabilities.

On windows XP the command "proxycfg -u" IIRC is sufficient to get the
MS-produced apps using the same settings as IE, whether they are proxy
or not.

I've heard tell of people using ActiveDirectory to push out proxy
settings to all machines in a controlled network environment, mayhap an
expert on that will say how if you need it.

Other devices and apps you will have to check out individually and see
what can be done.

As a fallback for the really limited apps there is always interception
at the network gateway device. Though this has a whole other set of
problems and should only be considered as a last resort.

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE6 or 3.0.STABLE14
   Current Beta Squid 3.1.0.7
Received on Wed Apr 15 2009 - 14:34:32 MDT

This archive was generated by hypermail 2.2.0 : Wed Apr 15 2009 - 12:00:02 MDT