configuring squid

Guillermo Garron ggarron at alketech.com
Fri Apr 7 03:16:35 UTC 2006



Tim wrote:
> Guillermo Garron:
>>>> option local-wpad "http://10.1.1.1/proxy.pac\n";
> 
> Tim:
>>> Did you find the "\n" necessary?  It's not something I've seen, or heard
>>> anything about, before.
> 
> On Thu, 2006-04-06 at 10:27 -0400, Guillermo Garron wrote:
>> I have read that IE needs it, i think old versions of, i have never test 
>> without it :)
> 
> Hmm, I'd be interested to know what happens if you try it without.
> Around here we've still got MSIE 5 and 6 on some boxes, and they accept
> a proxy without a /n after it.
> 
> But I just noticed that mine (according to the rules I read on one or
> three websites) doesn't use local-wpad, mine's like this:
> 
> option wpad-curl        code 252 = text;
> option wpad-curl       "http://proxy.example.com/wpad.dat";
:)
You can use anything i think as you are defining this on the first line.
the secret words are (i think)
option [anything-here] code 252 = text;
option [the same as above] "http://proxy.example.com/wpad.dat";



> 
> I also notice that despite Microsoft recommending that technique, none
> of their browsers pay any attention to DHCP supplied proxy addresses.
> They blandly look for /wpad.dat on the local webserver (a webserver with
> the same domain name as itself, or a proxy sub-domain, or the same
> subnet).
I have also found that is more effective to have you browsers configured 
to look for a file with the proxy configuration.

and do not use the DNS nor the DHCP aproach, just do the config 
manually. (if you do not have too much PCs)

Also configure squid as transparent proxy using IPTables.

I have two squids machines working as siblings, my browsers with manual 
configured proxy config file.

the file with a code that makes a round robbing proxy use, and finally I 
use (in case the user erase my config, and the DHCP aproach does not 
work) squid in transparent mode using IPTables for that. ( I am using NAT).

regards,

> 
> Looks like time for some more experimenting.  :-\
> 




More information about the fedora-list mailing list