exonetsystems

Hi all, We're replacing our server imminently, and whilst looking around on the net making sure we have all bases covered (not leaving anything to chance), I came across a few articles explaining that you shouldn't use .local in a domain name. There wasn't any solid evidence to suggest it's 'wrong', just not best practice apparently. Whenever I've personally built DC for school, I usually go for the school's website but with .local on the end (..sch.local). Now I'm rethinking this and wondering if something like internal...sch.uk would be better. How does everyone else do it? Thanks in advance!

Looks ideal - thanks will have a look into that!

Hi all, a quick question if I may! I've recently been looking into some sort of hardware appliance that has our SWGfL proxy embedded into it, and passes all network traffic through it. It's an alternative to the transparent proxy system which doesn't seem quite as reliable. Obviously the only frustration with having proxy settings in the first place is the need for BYOD and staff laptops - not too fussed about the devices that never leave school. To look at this from the other end of the spectrum, my question is does anyone have a way of setting the domain clients to use the proxy when they're inside school, but set to go direct when they're outside school? This would have to be without any user intervention, and I want it to work just like any home network when you don't have to worry about proxy settings at all! Thanks in advance

Makes absolute sense! Well I've got lots to play with and research, so thanks for all your help!

Very interesting! Especially the reliability, which is obviously a huge factor with anything that gets in the way of an internet connection these days! I have been looking into Proxy PAC files, and am going to be experimenting with them when we get the new server, although my ideal goal is to not have any client/server configuration - to have it basically act like your internet connection at home, as logging nor separate routes for staff/students and necessary in this particular instance. I just need to learn a little about Squid now, as I have to say it looks to be slightly out of my depth! Thanks for your continued help all!

Hmm, yeah I see your point - much like the RM SSL certificate for Google search results. Not sure how it would handle things like that. I'm going to speak to the SWGfL tomorrow if I get a chance, and see what they think. I mean my idea was basically some sort of router that we provide (not the SWGfL) that would have the SWGfL proxy embedded into it (proxy.swgfl.org.uk:8080) and route all traffic through it. I know it can be done with a VPN on most 'business' routers, so I would like to think the idea was at least feasible. I'll see what take the SWGfL has on my idea, and if they can help in anyway but installing this method or something similar inside their Cisco routers that they give to the school? I'm liking the idea of Squid, although having a PC or server sitting in between the LAN and WAN is a little scary. Saying that, a router could fail anytime, often without any means of recovery if backups weren't taken - at least you'd stand a chance of data recovery with a PC or server!

Thanks for your reply, will look into this!

Hi all, I'm looking to deploy our SWGfL proxy settings out via PAC script and GPO, but before I start testing anything I wondered if anyone could just have a quick ganders and confirm that the script is correct? It should look at the IP address of the laptop, and if the laptop is on the school network and has a school IP address, then it should use the proxy - if on any other network, it won't use any proxy at all. Also, it should recognise that if an address or IP is used that is on the local network, then the proxy shouldn't be used. function FindProxyForURL(url, host) { if (isInNet(myIpAddress(), "10.130.113.0", "255.255.255.0")) return "PROXY proxy.swgfl.org.uk:8080"; else return "DIRECT"; if (isPlainHostName(host) shExpMatch(host, "*.local") isInNet(dnsResolve(host), "10.130.113.0", "255.255.255.0") isInNet(dnsResolve(host), "127.0.0.0", "255.255.255.0")) return "DIRECT"; } I'm half tempted to take the transparent proxy module route with staff laptops, but in other schools I work at it just seems to unreliable. Shame Thanks in advance, and have a good weekend!

Hi all, bit of an odd idea but hopefully this is feasible! Our current ISP is the SWGfL, which we need not comment on *ahem* We have enabled the transparent proxy service, but are finding it extremely unreliable. Having spoken to the powers that be, we've agreed that it does seem a step backward to start entering proxy settings again, even if it does make the connection outside more reliable! I was thinking late last night (I'm sad like that) that maybe there was a way we could route all network traffic through another router or some other hardware device which had the SWGfL proxy embedded into it, sitting in between our network and the Cisco router that SWGfL provide. I'd love to know if this is possible, and if anyone has done it before. Or just generally any input or advice on this topic would be helpful! Thanks in advance!