Proxy Settings

[ITJS2015]

Hi All

 

Im wondering if anyone can help me, I look after 8 schools going through the same proxy settings and which most staff forget to turn it on or off when using it either at home or in work.

 

So without downloading 3rd party tools or spending any money on an ISA server. What is the best way to get round this so they just walk in to work and go home without messing about with proxy settings

 

 

Please can someone help

 

 

Thanks

[Jawloms]

Google - proxy.pac

[CyberDrac]

... and WPAD.

 

Both methods will allow you to deliver the settings you want internally, allow machines to operate at home properly (by not picking up the settings) as long as you lock them out of manually overriding them.

[mikeprice]

I set up the PC for the proxy - then change Firefox to use no proxy

 

Just tell them to use Chrome (or IE) in work and Firefox at home - they seem to cope fine - and some of my lot are serious technophobes

[ITJS2015]

Can someone put me in the correct direction of setting a proxy.pac file or wpad file?

 

All I want is it to site somewhere on there laptop without to click on anything and just to walk to school and use it at home without turning on and off

[klop]

we use a wpad file now if i remember correctly but our old pac file had this entry...

 

if (isInNet(myIpAddress(), "10.163.0.0", "255.255.0.0"))

return "PROXY proxy.gfl.suffolk.org.uk:8084";

else

return "DIRECT";

[ITJS2015]

is your top IP your home network and the bottom ip your work network

 

Where would you copy the file to on the laptop and set the Pac file up

[klop]

I copied the pac file into - %systemroot% system32 drivers etc

 

pac file worked well - but wpad is better - we bought a ruckus setup and seeing as there was the availability to host the wpad file on it i did that - works well (i hope!)

i belive you can just host the wpad anywhere though - worth looking into

 

otherwise i copied the pac file by gpo and set the path in ie settings - again using gpo

 

good luck :-)

[ITJS2015]

Do you have an example screen shot which you can provide ?

 

for all setting and locations

 

Sorry to be a pain

[LeMarchand]

is your top IP your home network and the bottom ip your work network

 

Where would you copy the file to on the laptop and set the Pac file up

 

we use a wpad file now if i remember correctly but our old pac file had this entry...

 

if (isInNet(myIpAddress(), "This bit is the start of the school's IP range","and its subnet"))

return "PROXY "This bit is the school's proxy:and its port";

else

return "DIRECT";

 

I'm sure someone reported that newer versions of IE or Windows don't like local .pac files, though. Could well be mistaken!

[klop]

I'm sure someone reported that newer versions of IE or Windows don't like local .pac files, though. Could well be mistaken!

 

Quite believable - I'm not sure, but it's on TechNet;

https://technet.microsoft.com/itpro/internet-explorer/ie11-deploy-guide/auto-proxy-configuration-settings-for-ie11

[ITJS2015]

Iv not really explained how my network is setup

 

I have staff laptops which are on work group and the council provide us with a proxy address..... some time down the line all staff which move over to domain accounts for there laptops.

 

But I would like to setup a wpac file which is stored locally on there laptop which picks up dhcp address and uses the proxy settings provided from the council in a pac file

 

 

Can someone put me in the correct direction

 

I have the following in my pac file now

 

if (isInNet(myIpAddress(), "START OF MY FIST IP","255.255.252.0"))

return "PROXY "COUNCIL PROXY IP:COUNCIL PROXY PORT";

else

return "DIRECT";

 

 

Is there anything wrong with that, I have placed it in my c drive and gone to internet settings which then iv typed in the script box c:\proxy.pac

 

 

 

HEEEEEEEEEEEEEEEELP

[LeMarchand]

Iv not really explained how my network is setup

 

I have staff laptops which are on work group and the council provide us with a proxy address..... some time down the line all staff which move over to domain accounts for there laptops.

 

But I would like to setup a wpac file which is stored locally on there laptop which picks up dhcp address and uses the proxy settings provided from the council in a pac file

 

 

Can someone put me in the correct direction

 

I have the following in my pac file now

 

if (isInNet(myIpAddress(), "START OF MY FIST IP This must end in 0","255.255.252.0"))

return "PROXY "COUNCIL PROXY IP:COUNCIL PROXY PORT";

else

return "DIRECT";

 

 

Is there anything wrong with that, I have placed it in my c drive and gone to internet settings which then iv typed in the script box c:\proxy.pac

 

 

 

HEEEEEEEEEEEEEEEELP

 

Couple of things in the script to note. IP range must end in 0, check your subnet, and you've got what I think is an extraneous " (probably because someone inadvertently added one in his example ).

 

IIRC the syntax for the script location is a bit odd; going to see if I still have my old GPO. Council hosts pac file atm, so it makes my life easier!

 

May also be the aforementioned probable need to host the file on a web server on IE 11.

[LeMarchand]

Didn't find my old GPO, but found this: proxy - local .pac-file URL format that works with IE and Safari (Windows)? - Super User

 

As you can tell, this will only work for IE (IIRC Firefox needs a different syntax for the location too) but at least there is a possible solution to the "no local pac" problem if that does prove to be a problem.

[klop]

file://c:/windows/system32/drivers/etc/proxy.pac

[ITJS2015]

okay iv created the following pac file and called it proxy.pac (Please tell me if that is correct or not)

 

my settings for my pac file is

 

if (isInNet(myIpAddress(), "10.25.148.0","255.255.252.0"))

return "PROXY 172.30.20.90:8881";

else

return "DIRECT";

 

I have copied it to the following- c:/windows/system32/drivers/etc/proxy.pac

 

My internet settings says User automatic configuration script -file://c:/windows/system32/drivers/etc/proxy

 

 

I don't feel confident that it isn't working properly

 

[klop]

Don't forget the .pac on the end of the filename

 

Does it not work? Have you disabled the proxy on a laptop and tried it?

 

Have you included the {'s ??

[ITJS2015]

I have chance the file name to .pac

 

I have disabled the proxy on the laptop

 

what where should the {`s be within the file or the config path on ie settings

[LeMarchand]

Dug out my old pac, if it's any help:

 

function FindProxyForURL(url, host)
{
// If at school, use proxy
   if (isInNet(myIpAddress(), "[i]NNN.NNN.NNN[/i].0", "[i]NNN.NNN.NNN.NNN[/i]"))
       return "PROXY [i]NameOfProxy:Port[/i]";
   else
       return "DIRECT";
}

 

Have italicised the bits you need to alter.

[ITJS2015]

Im trying it again with yours but I don't think it wants to work

 

should the settings be this in IE or the other

 

My internet settings says User automatic configuration script -file://c:/windows/system32/drivers/etc/proxy

 

or

 

My internet settings says User automatic configuration script -file://c:/windows/system32/drivers/etc/proxy.pac

[LeMarchand]

My internet settings says User automatic configuration script -file://c:/windows/system32/drivers/etc/proxy.pac

 

This. If it's not working you may have to try the registry edit in the link I posted. You can push it out through GPO if needed. If still no joy, I got nuttin'.

[klop]

Hi, this below I'm 99% certain worked for me. I have however removed some parts that were for local addresses, but you'd not need those.

I named this proxy.pac and copied it into the c:\windows\system32\drivers\etc folder Cant rem why that folder - must have been for a reason.

make sure you're saving it as a .pac file and not a .txt file.

 

In ie I entered file://c:/windows/system32/drivers/etc/proxy.pac into Automatic Configuration Script and make sure you tick the box.

Make sure you untick Proxy box

I cannot rem if Automatic Connection Settings were ticked or unticked.

 

 

 

function FindProxyForURL(url, host)

{

if (isInNet(myIpAddress(), "10.163.0.0", "255.255.0.0"))

return "PROXY proxy.gfl.suffolk.org.uk:8084";

else

return "DIRECT";

}

 

Then hopefully at school the laptop will use the proxy and at home (unless they unfortunately have a 10.163 address which is unlikely!) it'll connect direct.

 

Good luck! :-)

[ITJS2015]

Do you need IIS for this to work as I have spoken to my local authority who proxy our internet filtering and he said yes

 

I have just got it working with the settings through my home and works direct so it must be trying to fine an IIS Server some how.

 

 

We are nearly there, please keep posting

[LeMarchand]

Do you need IIS for this to work as I have spoken to my local authority who proxy our internet filtering and he said yes

 

I have just got it working with the settings through my home and works direct so it must be trying to fine an IIS Server some how.

 

 

We are nearly there, please keep posting

 

If it's still not working, then it does look like it doesn't like local (or UNC?) locations for the PAC file. If you tried the regedit on the page I linked to:

HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\  Value: EnableLegacyAutoProxyFeatures  Type:  REG_DWORD  Data:  1

and it still doesn't work after a restart then you probably do need to properly host the file yourself using IIS. Never had to do it myself, so can't offer help there.

 

The other option (which I'm looking at as it means that any device should "just work" in school) is setting up a transparent proxy. Using a PAC file is a lot easier if you're only worried about Windows/IE though!

[klop]

I cannot see why you would need IIS for a PAC file.

If you were hosting wpad then yes, but pac files - nope :-)