[ILUG] dansguardian, squid, smoothwall and transparent proxying

[conor.daly at cod.utvinternet.com]

On Wed, Mar 09, 2005 at 12:12:40PM +0000 or so it is rumoured hereabouts, 
Proinnsias Breathnach thought:
> 
> On the smoothwall: try putting this in the /etc/dhcpd.conf - it should
> work for both linux and win clients - but I've only used it on winXP
> ones :(

So now I'm confused.  Internal server is running isc-dhcpd-V3.0pl1 from
the dag repository on RH9 up to date with apt-rpm using fedora.legacy.org,
dag and freshrpms.  I got loads of "unknown option" errors when I
restarted dhcpd.  First time out, I forgot to correct and restart which
necessitated a trip to the colo to reset the deamon.  Fortunately, my colo
is in the attic so the trip was short enough.

Anyway, I realised that I needed to _define_ the option before using it.
My /etc/dhcpd.conf now looks like:

authoritative;
option option-252 code 252 = text;
option wpad-curl code 252 = text;
option option-252 "http://www.cod.ie/proxy.pac\n" ;
option wpad-curl "http://www.cod.ie/proxy.pac\n" ;

ddns-update-style ad-hoc;
shared-network cod.ie {.....

The 'wpad-curl' version is an IEism so it shouldn't be necessary.  So,
restarted dhcpd, restarted browsers {firefox}, restarted network
interfaces in case, rebooted machines but in no case is the proxy.pac
getting downloaded...  Only if I specify an auto config URL in the
browser's settings does proxy.pac get accessed. 

Now, each of my hosts is in a:

	host foo {
		hardware ethernet XX:XX:XX:XX:XX:XX;
		fixed-address 192.168.XX.XX;
	}

stanza within the shared-network ... block so:

shared-network cod.ie {
	option routers 192.168.XX.XX;
	option domain-name-servers 192.168.XX.XX;
	option domain-name "XX.ie";

	subnet 192.168.XX.0 netmask 255.255.255.0 {
		default-lease-time 600;
		max-lease-time 600;
		option subnet-mask 255.255.255.0;
		option broadcast-address 192.168.XX.0;
        host foo {
                hardware ethernet XX:XX:XX:XX:XX:XX;
                fixed-address 192.168.XX.XX;
        }
                                                                                                                  
So, is there anything there preventing my clients from grabbing the
proxy.pac?

> and the http://proxy.mydomain.home/proxy.pac file should be :

So I've hacked on this to return "PROXY hobbiton.cod.ie:8080" in the
correct places.

Conor
-- 
Conor Daly <conor.daly at oceanfree.net>

Domestic Sysadmin :-)
---------------------
Hobbiton.cod.ie
 23:52:26  up 30 days, 11:12,  2 users,  load average: 0.01, 0.05, 0.06