[ILUG] dansguardian, squid, smoothwall and transparent proxying

[Proinnsias Breathnach]

On Wed, Mar 09, 2005 at 12:12:32AM +0000, conor.daly at cod.utvinternet.com wrote:
> Eeek!  Now that the kids are starting to want to go surfing, I'm working
> on a dansguardian / squid setup for the HAN.  
<snip> 
> So, is there anything I can do to get smoothwall either 
> 
> 1. Use my internal dans/squid proxy transparently
> 2. Block relevant ports outbound so that a manual proxy config will be
>    needed.  
> 
On the smoothwall: try putting this in the /etc/dhcpd.conf - it should
work for both linux and win clients - but I've only used it on winXP
ones :(

subnet 192.168.X.0 netmask 255.255.255.0
{
        option subnet-mask 255.255.255.0;
        option domain-name "mydomain.home";
        option routers 192.168.X.1;
        option domain-name-servers 192.168.X.2;
        option option-252 "http://proxy.mydomain.home/proxy.pac\n" ;
        range dynamic-bootp 192.168.X.50 192.168.X.250;
        default-lease-time 86400;
        max-lease-time 86400;
}

and the http://proxy.mydomain.home/proxy.pac file should be :

---------------8<------------------
function FindProxyForURL(url, host)
{
   if (isInNet(host, "192.168.X.0", "255.255.255.0")) {
      return "DIRECT";
   } else {
      if (shExpMatch(url, "http:*"))
         return "PROXY proxy.mydomain.home:3128" ;
      if (shExpMatch(url, "https:*"))
         return "PROXY proxy.mydomain.home:3128" ;
      if (shExpMatch(url, "ftp:*"))
         return "PROXY proxy.mydomain.home:3128" ;
      return "DIRECT";
   }
}
---------------8<------------------


P