SiDHEaD

Currently looking at using a webcache for our clients, but i want to make use of the feature in IE settings which says "Automatic discovery of settings" in the proxy server stuff. We have a number of fixed ip users, which will involve us visiting each machine to stick the proxy in, BUT our reps have DHCP enabled laptops for when they come into the office.

What needs doing ??? I did think about enabling the option of the http filter on our but it will mean the access log on the netcache will be full of the firewall's ip rather than each client's ip. This was the main reason we are using a netcache - to at last get decent reporting...


Andy

warrenm2

just make it a group policy setting....

stevencotton

Can you not just set your firewall to redirect all packets destined for your default route out, ports 80 and 443, to your squid cache? That way it won't matter if they're DHCP or statically assigned addresses, and you don't need to bother with visiting any machines. 'Course it will all depend on how your network works.

SiDHEaD

The DHCP machines are not on the domain as they are rarely on site.

Steve: yes, but then all the accounting in the logs is from our firewall IP rather than the client. One of the reasons to move to this was so that we could have reporting tools on who is looking at what.

stevencotton

No it wont, it just changes the destination IP, not the source address. You're thinking of proxying?

SiDHEaD

Ah i get ya. Good plan i'll have a look!

SiDHEaD

Oh wait that wont work.. The cache listens on 3128 and expects to be a proxy, so forwarding web traffic at it isn't much use...

stevencotton

Of course, you forward your port 80 bound traffic to port 3128 of your cache.

SiDHEaD

Just found our firewall wont forward outgoing traffic (Watchguard Firebox), the NAT button is grey'd for outbound traffic. Rubbish! Time for a SonicWall!