Search the Community

Hi, I am deploying a proxy .pac file. I want laptop users to hit the smootwall when in school and go direct to the internet when at home. Does the following look ok? Is there anything that you think I can add/remove? Thanks in advance function FindProxyForURL(url, host) { var serverip = "smoothwall ip"; if ((host == serverip) || localHostOrDomainIs(host, "smoothwall name")) { return "DIRECT"; } if (isPlainHostName(host)) return "DIRECT"; var ip = dnsResolve(host); var quads = ip.split("."); var ipnum = (parseInt(quads[0], 10) * 16777216) + (parseInt(quads[1], 10) * 65536) + (parseInt(quads[2], 10) * 256) + parseInt(quads[3], 10); if ((ipnum >= 178916032) && (ipnum <= 178916063)) return "DIRECT"; if (shExpMatch(host, "*website to exclude")) return "DIRECT"; if (serverip == "server ip") { return "PROXY server ip:3128"; } return "DIRECT"; }

We're a school district, so all Internet traffic is filtered through a proxy. The thing is all of our teachers have district issued laptops and they're encouraged to take them home at night if they need them for work. Currently, teachers just check off the usage of a proxy in IE when they take it home. I still get questions periodically though when they forget to turn it off, or turn it back on when they bring the laptop back into the district. So I decided to give an automatic proxy configuration script a try, but there are a few issues I need to iron out before making it live. I used a proxy.pac posted by FN-GM on this forum (Thanks!) as a starting point. Looks something like this.... function FindProxyForURL(url, host) { //Declare proxy strings as variables var staffproxy = "PROXY StaffProxy:3128"; // IP not to use proxy if (shExpMatch(url, "*172.*")) { return "DIRECT"; } if (shExpMatch(url, "*10.*")) { return "DIRECT"; } if (shExpMatch(url, "*192.*")) { return "DIRECT"; } if (isPlainHostName(host)) { return "DIRECT"; } // URLS not to use proxy server if (shExpMatch(url, "someurl1.com")) { return "DIRECT"; } if (shExpMatch(url, "someurl2.com")) { return "DIRECT"; } // Apply proxy if machine is on internal network if (isInNet(myIpAddress(), "10.0.0.0", "255.0.0.0")) { return staffproxy; } else return "DIRECT"; The PAC file works, but my hang up is in how it ascertains whether or not it is behind or school's network. The line below is too general to identify our network. if (isInNet(myIpAddress(), "10.0.0.0", "255.0.0.0")) { return staffproxy; } We use a class A private address scheme here in the district, and so does a lot of home networks, bars, and Internet cafes. I suppose I could make it more specific, but I would still run the risk of an outside network matching that line. I've seen examples where you can query DNS to see what network you're on (for instance trying to resolve the hostname of our primary DC), but every time you launch a browser window it tries to perform this DNS query, and will hangup while waiting for the request to timeout if you're on an outside network. The only other option I've been able to think of is comparing the primary DNS suffix the client gets from DHCP to the one that we use in the district. This would be able to be done instantly without a timeout issue, but I don't know how write this in the PAC file, or if it is even possible. Any ideas? Thanks guys....