[ILUG] bypass proxy url generation?

Conor Daly conor.daly_ilug at cod.homelinux.org
Sat Mar 11 14:12:51 GMT 2006


I'm using dansguardian along with a proxy.pac and a bit of '--owner-uid'
iptables to net-nanny the kids.  for peace of mind, we all use the proxy
but occasionally come up against a denial for a legitimate request.  i'd
like to come up with a means to provide a direct connection url to allow a
temporary bypass of the proxy.  Given that the kids are already firewalled
out of direct net connections, there should be no difficulty in providing
a bypass link if i can construct a suitable one.  The proxy is on
server.example.com:8080 so i could presumably use an
http://website.tld:80/rest/of/url to attempt a direct connection.  So,
would the following work in the proxy.pac

function FindProxyForURL(url, host)
{
   if (isInNet(host, "192.168.1.0", "255.255.255.0")) {
      return "DIRECT";
   } else {
      if (shExpMatch(url, "http:*:80/"))
         return "DIRECT" ;
      if (shExpMatch(url, "http:*"))
         return "PROXY proxy.example.ie:8080" ;
      if (shExpMatch(url, "https:*"))
         return "PROXY proxy.example.ie:8080" ;
      if (shExpMatch(url, "ftp:*"))
         return "PROXY proxy.example.ie:8080" ;
      return "DIRECT";
   }
}

alternatively, is there a dansguardian setting to allow an authorised
bypass internally

Conor
-- 
Conor Daly <conor.daly at cod.homelinux.org>
-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GCS/G/S/O d+(-) s:+ a+ C++(+) UL++++ US++ P>++ L+++>++++ E--- W++ !N
PS+ PE Y+ PGP? tv(-) b+++(+) G e+++(*) h-- r+++ z++++ 
------END GEEK CODE BLOCK------
http://www.geekcode.com/ http://www.ebb.org/ungeek/



More information about the ILUG mailing list