WPAD Issue

[chazzy2501]

ok using Wpad for ages but I've discovered an issue! When using direct access (always on VPN thingy) the wpad is available and office tries to use the proxy and fails!

 

function FindProxyForURL(url, host) {

 

if (isPlainHostName(host)) { return "DIRECT"; }

 

if (shExpMatch(host, "vpn.beaminster.dorset.sch.uk")) { return "DIRECT"; }

 

if (shExpMatch(host, "*.dcc-sch-4505.local")) { return "DIRECT"; }

 

if (shExpMatch(host, "*des.dorsetcc.gov.uk")) { return "DIRECT"; }

 

if (shExpMatch(host, "*lbbij.dorsetcc.gov.uk")) { return "DIRECT"; }

 

return "PROXY proxy1.rmsafetynet.com:8080; DIRECT";

 

 

how do I make wpad go direct if it is outside the domain.

 

cheers

[mavhc]

Compare IPs

 

if (isInNet(myIpAddress(), "10.1.2.0", "255.255.255.0"))

[chazzy2501]

that is 99% working cheers, unfortunately it seems that youtube breaks for our local PCs. This must be a swgfl quirk.

[Opendium_Steve]

Compare IPs

 

if (isInNet(myIpAddress(), "10.1.2.0", "255.255.255.0"))

 

 

Beware that myIpAddress() is not reliable. The Mozilla documentation notes that it doesn't work for most Linux hosts (it returns 127.0.0.1) and I'm not entirely sure which IP address it'll return on Windows machines that have multiple network interfaces.

 

https://developer.mozilla.org/en-US/docs/Web/HTTP/Proxy_servers_and_tunneling/Proxy_Auto-Configuration_(PAC)_file#myIpAddress

 

Its better to configure access controls on the web server that's serving the wpad file so that the "wrong" clients can't see it at all.

[mavhc]

True, kinda breaks if you have a VM nic sometimes, so might not be good for vpn.

 

Could also put vpn users in a gpo that sets a different proxy.pac for the user