Several Internet WWW and MAIL Servers

[cmihelich]

Wingate setup using WPAD entry and IE is set to automatically detect Proxy Settings. Picks up the proxy server fine but am unable to load webpages correctly from inside the same subnet. This especially happens when trying to get to our exchange server internally.

[cmihelich]

ISA Server has a feature that allows you to bypass going out the proxy for local request such as http://local_server or even qualifying a domain as local. Is there anyway to do this within Wingate. If IE is setup with the Proxy Server manually and told to bypass the proxy for the defined servers everything works fine.

[Nev]

Hi,

Probably a proxy.pac configuration script would do.

Have used them myself to tell browsers where to source pages and are *excellent* with Wingate, just a matter of centralising the file [.pac / script] and setting the browser to parse it when a user begins a session.

Here is some more on same: http://forums.qbik.com/viewtopic.php?t=3665&highlight=proxy+pac

Report back how it goes...

[cmihelich]

The to recap the network setup I've configured option 252 within my DHCP scope to point to http://wpad.mydomain.com/wpad.dat. Created a static dns entry for wpad that points to my wingate proxy server. I've modified the wpad.dat which now looks like this:

function FindProxyForURL(url, host)
{
// variable strings to return
var proxy_yes = "PROXY 10.28.20.5";
var proxy_no = "DIRECT";
if (shExpMatch(url, "*.domain1.com*")) { return proxy_no; }
if (shExpMatch(url, "*.domain2.com*")) { return proxy_no; }
if (shExpMatch(url, "*.domain3.com*")) { return proxy_no; }
// Proxy anything else
return proxy_yes;
}

wpad.dat is located under wingate\resources. Now, all I have to do to allow people to get on is to have them pickup a dhcp address, tell IE or whatever browser to Automatically Detect Settings, and whatever domain I include in wpad.dat bypasses the proxy server for the LAN address. Exactly what I wanted to do. I hope people see this solution because I've browsed topics for quite a while trying to find something like this.

[ImmediateAction]

When I was working with examples for WPAD.DAT, new changes I made to the script were not working in realtime. I found that IE caches the WPAD info; that could be fixed by a registry hack.

You can disable the Automatic Proxy Result Cache by using the following registry key:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings

Value: EnableAutoproxyResultCache
Type: REG_DWORD
Data value: 0 = disable caching; 1 (or key not present) = enable automatic proxy caching (this is the default behavior)
If the registry key is not present, you can create the registry key by using the following registry file:
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings]"EnableAutoProxyResultCache"=dword:00000000"
NOTE: If you disable automatic proxy caching, Internet Explorer performance may be affected.

[cmihelich]

Group Policy:

User Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Disable caching of Auto-Proxy scripts did the trick for me when enabled. I dont' think I'll have a problem but noticed that and figured it would be a necessary safeguard.