Jump to content

robjcrowston

Members
 View Profile  See their activity

  • Posts

    12

  • Joined

  • Last visited

 Content Type 

Everything posted by robjcrowston

  1. robjcrowston
    @Duke5A The internet connection we are provided with comes in to the school ready proxied, we have to point machines to a proxy server at the local authority, there is no "transparent internet" so to speak, the purpose of the transparent proxy is to have a cache_peer setup to the proxy server further up in the chain, it also allows us to block certain sites we dont visitors accessing but do want authenticated users to. we currently dont really have a way of blocking https access anyway, so we are not really losing anything. I think the answer is going to be your solution, to setup forwarding rules directly to exchange for the webmail, and not provide https. As there is no transparent internet on the WAN side of the proxy server anyway, I assume @dhicks solution wouldnt work. Appologies if im missing anything, Im new to squid and ip tables. Cheers, Rob
  2. robjcrowston
    Unfortunately not, as the reason for the Transparent Proxy is so users who bring in their own devices don't have to do any configuration of their browsers, I was hoping for something more on the lines of a Server Side exception? if thats possible
  3. robjcrowston
    If only London was down the road... Looks like a great role!
  4. robjcrowston
    ah! sounds like that isnt going to work then, All I really want https for is our OWA, Is there a simple way of directing HTTPS request to DIRECT on my squid box? so I could provide an internal link to the exchange server? Iv had a play creating Routing Rules for this but im not having much luck! Thanks for all your help, Rob
  5. robjcrowston
    Fantastic! thank you! Installed BIND and its working now, Just need to figure out https now! haha Cheers, Rob
  6. robjcrowston
    Okay, so DNS lookups are not working, What is best practise? should i install something like dnsmasq on my squid server to handle this? As these clients are on a different subnet they wont see our main DNS servers. I wasnt aware that the proxy wouldnt handle lookups in Transparent mode. Thanks, Rob
  7. robjcrowston
    @tom_newton pooched? sorry I dont follow
  8. robjcrowston
    Yep, tried putting the dns servers in squid.conf, still no luck :/ cheers, Rob
  9. robjcrowston
    I have setup a VM running Linux 12.04 Server with Squid 3 installed, however I am having some issues making it work transparently. I have added Transparent to the http_port line in squid.conf and I have added the following routing rule; sudo iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j DNAT --to 192.168.1.10:3128 I have setup ACLs correctly to allow for my network (192.168.1.0/24 and for the localhost) and seem to be working, on my client machine I have setup the following IP settings; IP Address: 192.168.1.44 Sub mask: 255.255.255.0 Gateway: 192.168.1.10 DNS: 192.168.1.10 If I point IE's proxy settings to 192.168.1.10 on port 80 all works fine, I can browse to sites no problem, however once I take the proxy settings out I am unable to browse to sites using the Hostname, but If I browse to an IP (74.125.224.72 for google) it works fine. The Squid VM has eth1 (LAN Side) configured on the 192 and eth0 is on 10.xxx.xxx.xx (WAN Side), an upstream proxy to LSN is also setup in the squid.conf. Both my DNS Servers on the WAN side of the squid are setup in the resolv.conf file, I have also tried adding them into the squid.conf using dns_nameservers option. No matter what I try I can't seem to be able to browse to sites using the FQDN, but can using an IP when in Transparent mode. Any ideas would be much appreciated! Rob
  10. robjcrowston
    Hi Smarties11, we are having the same issue here, any chance you could send me a PM with that IP? Cheers, Rob
  11. robjcrowston
    Got it working in the end guys! Not sure exactly what i did, buts it working and thats the main thing Thanks!
  12. robjcrowston
    We are in the process of integrating several iMacs into our windows domain using the "Magic Triangle" configuration, However we want to keep users windows and mac home directories seperate, so when a user logs on to a windows machine they get there usual windows home stored on our 2008 server, but when they log into a mac they get a different Mac home directory that is stored on the Mac Mini Server (Running snow leopard server). All the clients also run Snow Leopard, Here is what i have done so far; Mac Server is binded to AD and to itself and setup as a OD Master. Clients are bound to Both the Mac server and the Windows Domain (in that search order). The "Use SMB" and "Force Local Home" options are not selected on either the Server or the Clients. I have enabled AFP and Setup and Automount to the Users Folder. I have verified all DNS, Forward and Reverse Lookup Zones are all setup correctly etc. I have attempted to setup an Augmented User Record but cannot get this option to appear in Workgroup Manager. I have noticed that in Workgroup Manager AD accounts are showing an NFS and an AFP share both on the Mac server but i have no idea where this NFS is coming from or how to get rid of it? ANY help on configuring this Dual Home Directories configuration would be hugely appreciated! Thanks, Rob
×
×
  • Create New...