Re: [squid-users] Bypassing local address

This can be done with a proxy configuration file. The file needs to be
accessible by an internal network Web Server. Like:

            http://our-orgs-server.internal.net/proxy.pac

The contents of the proxy.pac file could look like:

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
function FindProxyForURL(url, host)
{
        // Direct connections to non-FQDN hosts
        if (isPlainHostName(host)) {
            return "DIRECT";
        }

        // Direct connections to local domain
        if (dnsDomainIs(host, ".internal.net") ||
            dnsDomainIs(host, ".sub-org1.net") ||
            dnsDomainIs(host, ".sub-org2.net") ||
            dnsDomainIs(host, "192.168.") ||
            dnsDomainIs(host, "192.168.20.250") ||
            dnsDomainIs(host, "www.peer-org.com")) {
            return "DIRECT";
        }

      else

        if (url.substring(0, 5) == "http:" ||
            url.substring(0, 6) == "https:" ||
            url.substring(0, 6) == "snews:") {
         return "PROXY proxy1.internal.net:3128;" +
                "PROXY proxy2.internal.net:3128";
        }

      else

        if (url.substring(0, 4) == "ftp:") {
         return "PROXY proxy1.internal.net:3128;" +
                "PROXY proxy2.internal.net:8081";
        }

      else

        if (url.substring(0, 6) == "socks:") {
         return "PROXY proxy2.internal.net:1080;";
        }

      else
       {
        // Otherwise use proxy servers
        return "DIRECT";
       }
}
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

The proxy.pac file may be used by IE, Mozilla (FireFox/Thunderbird),
Netscape. IE proxy.pac setting may be done via group policies.

Hope this helps...

Tim

----------------------------------------------------------------------
Timothy E. Neto
 Computer Systems Engineer Komatsu Canada Limited
 Ph#: 905-625-6292 x265 1725B Sismet Road
 Fax: 905-625-6348 Mississauga, Ontario, Canada
 E-Mail: tneto@komatsu.ca L4W 1P9
----------------------------------------------------------------------

Animateur cyber de Saint-Thonan (Stéphane Ascoët) wrote:

> Hello,
> You should configure browsers so they don't use proxy for this domain.
Received on Tue May 18 2004 - 07:29:37 MDT