Differences between version 41 and predecessor to the previous major change of WPAD.
Other diffs: Previous Revision, Previous Author, or view the Annotated Edit History
| Newer page: | version 41 | Last edited on Saturday, September 3, 2005 10:13:38 am | by CraigBox | Revert |
| Older page: | version 32 | Last edited on Friday, June 18, 2004 3:57:03 am | by MalteStretz | Revert |
@@ -13,8 +13,9 @@
Step 2: set your gateway machine up so that it has a CNAME for wpad.yourdomain.tla pointing to server.yourdomain.tla
Step 3: Copy something like this into your HTTP root as wpad.dat:
+<verbatim>
function FindProxyForURL(url, host)
{
if(shExpMatch(url, "!https:*") || isPlainHostName(host) || \
dnsDomainIs(host, ".yourdomain.tla") || dnsDomainIs(host, ".youralias.tla"))
@@ -23,34 +24,32 @@
} else {
return "PROXY www-cache.yourdomain.tla:3128; DIRECT";
}
}
-
-Step 4: Check you can access it by going !
http://wpad.yourdomain.tla/wpad.dat.
+</verbatim>
+Step 4: Check you can access it by going ~
http://wpad.yourdomain.tla/wpad.dat.
(Optional) Step 5: Make Apache serve it with the correct MIME type (x-ns-proxy-autoconfig) using a virtual host in your [Apache] configuration file (/etc/apache/httpd.conf):
-
<!
VirtualHost ip.ad.dr.es>
- !
ServerName wpad.yourdomain.tla
- !
AddType application/x-ns-proxy-autoconfig .dat
- </!
VirtualHost>
-
-My MSIE 6.00.2800.1106 on Win98SE does not look up the hostname. So I had to write:
+<verbatim>
+<
VirtualHost ip.ad.dr.es>
+
ServerName wpad.yourdomain.tla
+ ServerAlias ip.ad.dr.ess
+
AddType application/x-ns-proxy-autoconfig .dat
+</VirtualHost>
+</verbatim>
- <!VirtualHost ip
.ad
.dr
.ess>
- !ServerName ip
.ad.dr.ess
- !AddType application/x-ns-proxy-autoconfig .dat
- </!VirtualHost>
+(The alias is added because MSIE 6
.00
.2800
.1106 on Win98SE does not look up the hostname
.)
----
InternetExplorer has a "Automatically detect settings" check box. This will cause the browser to search for the configuration file.
-If your DomainName is machine.something.meta.net.nz then InternetExplorer will request the following urls[1]
until it finds a [WPAD] configuration file.
+If your DomainName is machine.something.meta.net.nz then InternetExplorer will request the following urls*
until it finds a [WPAD] configuration file.
-* !
http://wpad.something.meta.net.nz/wpad.dat
-* !
http://wpad.meta.net.nz/wpad.dat
-* !
http://wpad.net.nz/wpad.dat
+* ~
http://wpad.something.meta.net.nz/wpad.dat
+* ~
http://wpad.meta.net.nz/wpad.dat
+* ~
http://wpad.net.nz/wpad.dat
Note: you might need to take the tick out of the check box and put it back in order to make it go.
Warning: Beware that Internet Explorer 5.5+ may cache your wpad file and not recognize future changes you make to it -- this feature is referred to as Automatic Proxy Result Cache ([MS Knowledge Base 271361|KB:271361]). If you turn off "Automatically detect settings", save the change, restart IE, turn it back on, and restart IE again, then it will force a refresh of the wpad.dat file from your webserver (If you're lucky. It seems IE 6 refuses to flush even then). Here is a [Google Groups'|http://groups.google.com/groups?q=squid+wpad.dat+doesn%27t+work&hl=en&lr=&ie=UTF-8&oe=UTF-8&selm=b6239t%24mif%241%40FreeBSD.csie.NCTU.edu.tw&rnum=3] discussion of the issue.
@@ -60,37 +59,100 @@
Other alternatives include (subst. host.co.nz for your hostname):
The DHCP method (the MicrosoftCorporation "preferred option", which like most MSFT'isms, doesn't actually work). Add the following to your /etc/dhcpd.conf
-
option option-252 "!
http://wpad.host.co.nz/proxy.pac";
+<verbatim>
+
option option-252 "http://wpad.host.co.nz/proxy.pac";
+</verbatim>
With ISC DHCP v3+, 'option-#' options don't work, You have to do this in the global section of your configuration:
+<verbatim>
option wpad-url code 252 = text; (define a new option)
-
option wpad-url "!
http://wpad.host
.co
.nz
/proxy.pac"; (use new option)
+</verbatim>
+
+And add this in either the global or appropriate subnet section(s) of your configuration:
+<verbatim>
+
option wpad-url "http://wpad.my
.domain
.tld
/proxy.pac\n
"; (use new option)
+</verbatim>
+
+You might like to try using an IP address there instead; there has been a report that a DNS domain doesn't work, but no indication on what version of dhcpd.
+
+__NOTE__ :
+It seems tha IE eats the last character of the URL given in option 252. You have to append a space there (or any other character) to get it working:
+
+<verbatim>
+ option wpad-url "http://wpad.my.domain.tld/proxy.pac ";
+</verbatim>
+
+(tested with ISC DHCPD server v3..1 and MS IE v6.0 SP2).
or if you're configuring a Windows DHCP server, right click on the server and click "Set predefined options" to add 252 as a String value (it's not in there by defult. See [here|http://support.microsoft.com/default.aspx?scid=kb;EN-US;252898] for more.)
The DNS method(s). Add all or some of the follwing entries to your DNS zone file.
+<verbatim>
$ORIGIN host.co.nz.
wpad IN A 192.168.0.254
IN TXT "service: wpad:!http://wpad.host.co.nz:80/proxy.pac"
wpad.tcp IN SRV 0 0 80 wpad.host.co.nz.
+</verbatim>
See also:
* RFC:2052
* RFC:3040
* [Internet Draft on WPAD|http://www.web-cache.com/Writings/Internet-Drafts/draft-ietf-wrec-wpad-01.txt]
* [http://wiki.debian.net/ProxyAutodetectConf]
* [Super Proxy Scripts|http://naragw.sharp.co.jp/sps/]
+
+----
+
+Notes by Michael Zieger:
+
+If you try to use a wpad.dat in Konqueror (I tested version 3.2.2), be aware that the following does NOT work:
+
+<verbatim>
+if (isInNet(myIpAddress(), "10.0.0.0", "255.0.0.0") || isInNet(myIpAddress(), "192.168.0.0", "255.255.0.0"))
+</verbatim>
+
+It seems Konqueror does not know the function "isInNet". Therefore, I changed the config slightly:
+
+<verbatim>
+ var proxy_yes = "PROXY proxy.i.zmi.at:3128; DIRECT";
+ var proxy_no = "DIRECT";
+
+ // WARNING: The "dnsDomainIs" is a check of which DNS domain the _client_
+ // is inside. It's not a check for where the client wants to go!!!
+ // if (dnsDomainIs( host,"zmi.at") { return proxy_no; }
+
+ // Proxy if PC is on local LAN - doesn't work with Konqueror!
+ // So this test is for Internet Explorer and compatible only
+ if (isInNet(myIpAddress(), "10.0.0.0", "255.0.0.0") || isInNet(myIpAddress(), "192.168.0.0", "255.255.0.0")) {
+ if (url.substring(0, 5) == "http:" ||
+ url.substring(0, 4) == "ftp:" ||
+ url.substring(0, 7) == "gopher:")
+ return proxy_yes;
+ else
+ return proxy_no;
+ }
+ // Konqueror comes until here:
+ if (url.substring(0, 5) == "http:" ||
+ url.substring(0, 4) == "ftp:" ||
+ url.substring(0, 7) == "gopher:")
+ return proxy_yes;
+ else
+ return proxy_no;
+</verbatim>
+
+
+Now you even can differentiate between Konqueror and Internet Explorer, and could give them different proxies. If you want to download the running config, visit !http://zmi.at/wpad.dat
----
!Footnotes
-[1
] Though it checks only to the second level, I would assume that someone could register wpad.co.nz and be really nasty if they wanted. According to the [Microsoft Security Bulletin MS99-054|http://www.microsoft.com/technet/security/bulletin/ms99-054.mspx] was the third level special-cased in some unspecified ways.
+* ~
[*
] Though it checks only to the second level, I would assume that someone could register wpad.co.nz and be really nasty if they wanted. According to the [Microsoft Security Bulletin MS99-054|http://www.microsoft.com/technet/security/bulletin/ms99-054.mspx] was the third level special-cased in some unspecified ways.
wpad.com does actually exist and is owned by Duane Wessles, the author of [Web Caching|http://www.oreilly.com/catalog/webcaching/]. There's no wpad.dat there.
I mailed him a while back asking about it, and he constantly gets between 10 and 40 hits per second depending on the time of day. The 404 logs for that site are at http://www.life-gone-hazy.com/~snmp/http_status.cgi if you're interested.
----
CategorySystemAdministration
