If you set the server firewall redirection up with an ipchains or iptables
rule as you would for transparent proxying, then the clients are forced to
use the proxy even if it's not transparent.
AS someone else has already noted, you can use the IE admin kit to set up a
system policy which will enforce the proxy on setting. This simplfies
administration of your clients. If possible, you should have the policy
select the autodiscovery method. This is where the option for "automatically
detect settings" is checked, and you have a wpad CNAME entry in your DNS
server which points to a Web server with wpad.dat in its web root folder.
The wpad.dat file is a javascript which you can tune for your needs. In its
simplest form, you return the proxy address for URLs outside of your
network, and DIRECT for URLs inside.
I'm sorry for this generic explanation; if you look for wpad and/or
autodiscovery on MSDN you'll find the complete story.
For Netscape there is a similar mechanism which uses proxy.pac.

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Jay Turner
Sent: Wednesday, May 15, 2002 9:06 PM
To: [EMAIL PROTECTED]
Subject: Win98 Browser Proxy


Hi All,

We have a number of clients using SquidGuard to access the net.

My question is, is there an easy way to prevent them from switching off the
browser proxy setting in Win98.

Reply via email to