It's not just the fingerprints that are the issue though, I seem to remember that proxy bypass requires that the PacketFence server can reach the website itself, plus also the fetching of the network detection IP.
I can always add rules and NAT the request through my perimeter firewall if needs be. Cheers, Andi -----Original Message----- From: Tim DeNike [mailto:[email protected]] Sent: 07 May 2014 10:03 To: [email protected] Subject: Re: [PacketFence-users] Packetfence behind a proxy server Just wget the fingerprints file with proxy options set from command line. Sent from my iPhone > On May 7, 2014, at 5:01 AM, "Morris, Andi" <[email protected]> wrote: > > Thanks, that does help for the fingerprints, however I'd still like to know > if it is possible to configure PacketFence to sit behind a webproxy server. > It's not a massive issue if it can't, and to be honest our proxy server is > going to be taken out in the next year or so, but it would make things a > little more streamlined if it was possible now. > > Cheers, > Andi > > -----Original Message----- > From: Loick Pelet [mailto:[email protected]] > Sent: 06 May 2014 20:55 > To: [email protected] > Subject: Re: [PacketFence-users] Packetfence behind a proxy server > > Hello Andi, > > I just remember that you can just download the new > dhcp_fingerprints.conf,place it in /usr/local/pf/conf and run > /usr/local/pf/bin/pfcmd reload fingerprints > > It will update the db automatically. > > Have good day > Loick > >> On May 06-10:12AM, Loick Pelet wrote: >> Hello Andi, >> >> I attached you a little how-to to update the fingerprints offline. >> >> regards >> Loick >> >>> On May 06-12:41PM, Morris, Andi wrote: >>> Hi all, >>> Is there a way I can configure packetfence to access the internet through a >>> proxy server? At the moment I cannot update the DHCP fingerprints, and I >>> can see the requests hitting my perimeter firewall rather than going >>> through our proxy server. >>> >>> Cheers, >>> Andi >>> >>> ------------------------------------- >>> Andi Morris >>> IT Security Officer >>> Cardiff Metropolitan University >>> T: 02920 205720 >>> E: [email protected]<mailto:[email protected]> >>> -------------------------------------- >>> >> >>> -------------------------------------------------------------------- >>> ---------- Is your legacy SCM system holding you back? Join Perforce >>> May 7 to find out: >>> • 3 signs your SCM is hindering your productivity • >>> Requirements for releasing software faster • Expert tips and >>> advice for migrating your SCM now http://p.sf.net/sfu/perforce >> >>> _______________________________________________ >>> PacketFence-users mailing list >>> [email protected] >>> https://lists.sourceforge.net/lists/listinfo/packetfence-users >> >> >> -- >> [email protected] :: +1.514.447.4918 (x130) :: >> www.inverse.ca<http://www.inverse.ca/> >> Inverse inc. :: Leaders behind SOGo >> (www.sogo.nu<http://www.sogo.nu/>) >> and PacketFence >> +(www.packetfence.org<http://www.packetfence.org/>) >> gtalk or skype : lpelet.inverse > >> # Update Packetfence fingerprints database offline mode # author >> Loick PELET # creation 20130208 # update 20130208 # # # I assume your >> INSTALL_DIR is /usr/local/pf/ # and your configuration is a >> standalone Packetfence server. >> # >> # Download the file dhcp_fingerprints.conf from our github and # >> place the file on your pf server in /tmp by scp or ftp or other file >> transfert tool allowed in your network : >> https://github.com/inverse-inc/fingerbank/blob/master/dhcp_fingerprin >> t s.conf scp ./dhcp_fingerprints.conf root@serverpf:/tmp >> >> # Stop packetfence service : >> service packetfence stop >> >> # Back up the old fingerprints file : >> mv /usr/local/pf/conf/dhcp_fingerprints.conf >> /usr/local/pf/conf/dhcp_fingerprints.conf.save >> >> # Move the new fingerprints file in your CONF_DIR : >> mv /usr/local/pf/conf/dhcp_fingerprints.conf >> >> # Backup the old fingerprints table on mysql and flush the original: >> mysql -u root -p pf >> create table dhcp_fingerprint_save as select * from dhcp_fingerprint; >> delete from dhcp_fingerprint; >> >> # Then restart the packetfence service service packetfence start; >> >> # Check if the update is ok >> mysql -u root -p pf >> select * from dhcp_fingerprint; > >> --------------------------------------------------------------------- >> - >> -------- Is your legacy SCM system holding you back? Join Perforce >> May >> 7 to find out: >> • 3 signs your SCM is hindering your productivity • >> Requirements for releasing software faster • Expert tips and >> advice for migrating your SCM now http://p.sf.net/sfu/perforce > >> _______________________________________________ >> PacketFence-users mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/packetfence-users > > > -- > [email protected] :: +1.514.447.4918 (x130) :: > www.inverse.ca<http://www.inverse.ca/> > Inverse inc. :: Leaders behind SOGo (www.sogo.nu<http://www.sogo.nu/>) > and PacketFence > +(www.packetfence.org<http://www.packetfence.org/>) > gtalk or skype : lpelet.inverse > > ---------------------------------------------------------------------- > -------- Is your legacy SCM system holding you back? Join Perforce May > 7 to find out: > • 3 signs your SCM is hindering your productivity • > Requirements for releasing software faster • Expert tips and > advice for migrating your SCM now http://p.sf.net/sfu/perforce > _______________________________________________ > PacketFence-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/packetfence-users > > ---------------------------------------------------------------------- > -------- Is your legacy SCM system holding you back? Join Perforce May > 7 to find out: > • 3 signs your SCM is hindering your productivity • > Requirements for releasing software faster • Expert tips and > advice for migrating your SCM now http://p.sf.net/sfu/perforce > _______________________________________________ > PacketFence-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/packetfence-users ------------------------------------------------------------------------------ Is your legacy SCM system holding you back? Join Perforce May 7 to find out: • 3 signs your SCM is hindering your productivity • Requirements for releasing software faster • Expert tips and advice for migrating your SCM now http://p.sf.net/sfu/perforce _______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users ------------------------------------------------------------------------------ Is your legacy SCM system holding you back? Join Perforce May 7 to find out: • 3 signs your SCM is hindering your productivity • Requirements for releasing software faster • Expert tips and advice for migrating your SCM now http://p.sf.net/sfu/perforce _______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
