How To: Configure ucs@school Proxy To Allow Local Servers

How To Configure ucs@school Proxy To Allow Local Servers

You have a local server in your environment which provides web based access. Additionally your clients are configured to use the central proxy server provided by ucs@school.

Step 1

Identify the IP address and port where your additional service listens on.
i.e. port 4534

Step 2

Set your proxy configuration file to not proxy local nets by using the following UCR variables:

proxy/pac/exclude/domains/dnsnames: <empty>
 Browser proxy configuration via proxy.pac: Whitespace separated list of domain names that have to be accessed directly (and not via proxy) (example: ".univention.de .software-univention.de")

proxy/pac/exclude/domains/enabled: <empty>
 Browser proxy configuration via proxy.pac: If this variable is set to "yes", requests for a defined list of domain names are not sent via proxy (default: no)

proxy/pac/exclude/domains/parentproxy/enabled: <empty>
 Browser proxy configuration via proxy.pac: If this variable is set to "yes", requests for the given list of domain names are not performed directly but via the parent proxy (default: no)

proxy/pac/exclude/expressions/enabled: <empty>
 Browser proxy configuration via proxy.pac: If this variable is set to "yes", requests for a defined list of URLs are not sent via proxy (default: no)

proxy/pac/exclude/expressions/expressionlist: <empty>
 Browser proxy configuration via proxy.pac: Whitespace separated list of URL expressions that defined URLs which have to be accessed directly (and not via proxy) (example: "*://(www|ftp).example.com/subfolder/*")

proxy/pac/exclude/expressions/parentproxy/enabled: <empty>
 Browser proxy configuration via proxy.pac: If this variable is set to "yes", requests matching to the URL expressions are not performed directly but via the parent proxy (default: no)

proxy/pac/exclude/localhost: <empty>
 Browser proxy configuration via proxy.pac: If this variable is set to "yes", requests for "localhost" are not sent via proxy (default: no)

proxy/pac/exclude/networks/enabled: <empty>
 Browser proxy configuration via proxy.pac: If this variable is set to "yes", requests for a defined list of subnets are not sent via proxy (default: no)

proxy/pac/exclude/networks/networklist: <empty>
 Browser proxy configuration via proxy.pac: Whitespace separated list of IP subnets (incl. netmask) that have to be accessed directly (and not via proxy) (example: "10.0.0.0/255.0.0.0 192.168.0.0/255.255.255.0")

proxy/pac/exclude/networks/parentproxy/enabled: <empty>
 Browser proxy configuration via proxy.pac: If this variable is set to "yes", requests for the given list of subnets are not performed directly but via the parent proxy (default: no)

Step 3

Make sure changes have taken place by
ucr commit /var/www/wpad.dat

Mastodon