I'm using dansguardian along with a proxy.pac and a bit of '--owner-uid'
iptables to net-nanny the kids. for peace of mind, we all use the proxy
but occasionally come up against a denial for a legitimate request. i'd
like to come up with a means to provide a direct connection url to allow a
temporary bypass of the proxy. Given that the kids are already firewalled
out of direct net connections, there should be no difficulty in providing
a bypass link if i can construct a suitable one. The proxy is on
server.example.com:8080 so i could presumably use an
http://website.tld:80/rest/of/url to attempt a direct connection. So,
would the following work in the proxy.pac
function FindProxyForURL(url, host)
{
if (isInNet(host, "192.168.1.0", "255.255.255.0")) {
return "DIRECT";
} else {
if (shExpMatch(url, "http:*:80/"))
return "DIRECT" ;
if (shExpMatch(url, "http:*"))
return "PROXY proxy.example.ie:8080" ;
if (shExpMatch(url, "https:*"))
return "PROXY proxy.example.ie:8080" ;
if (shExpMatch(url, "ftp:*"))
return "PROXY proxy.example.ie:8080" ;
return "DIRECT";
}
}
alternatively, is there a dansguardian setting to allow an authorised
bypass internally
Conor
--
Conor Daly <conor.daly at cod.homelinux.org>
-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GCS/G/S/O d+(-) s:+ a+ C++(+) UL++++ US++ P>++ L+++>++++ E--- W++ !N
PS+ PE Y+ PGP? tv(-) b+++(+) G e+++(*) h-- r+++ z++++
------END GEEK CODE BLOCK------
http://www.geekcode.com/http://www.ebb.org/ungeek/
Maintained by the ILUG website team. The aim of Linux.ie is to
support and help commercial and private users of Linux in Ireland. You can
display ILUG news in your own webpages, read backend
information to find out how. Networking services kindly provided by HEAnet, server kindly donated by
Dell. Linux is a trademark of Linus Torvalds,
used with permission. No penguins were harmed in the production or maintenance
of this highly praised website. Looking for the
Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!