non-transparent proxy

[Guest]

[towly]

I have setup EFW as a non transparent proxy. But my client pc still gives access to the internet.
I want to, when a client connects that the configuration be done manually.
I've read that IE, firefox etc uses .pac and .wpad config to auto discover.
Is there a way to disable it completely on EFW's side so that manual connectivity is only possible.
As well as my Http antivirus (havp) is starting up.

Please I need help

Thanks in advance

[dda]

You have to disable ports 80 and 443 in the firewall/ outgoing traffic area.

[towly]

Hi DDA

Yes I have disabled port 80 and 443 on the firewall's outgoing
traffic.
It still passing through. Any hints that I can do.

Thanks in advance

[dda]

What are you using for authentication and have your verified it is working?

[towly]

Hi DDA

I figured it out.
I don't use authetication. I use the manual connection in internet options -> connections -> proxy settings.
I removed the DNS in DHCP services. So that the DNS proxy takes over.

Thank you for your assistance

[towly]

I've verified that the proxy is working.
Firefox and Chrome it works 100%
Though IE still passes through

If I delete the following: proxy.pac and wpad.dat
Will it function correctly

Can't ping websites eg. google
ICMP is enabled in firewall

Any Ideas everyone?

Thanks in advance

[dda]

Where are you deleting it from?(proxy.pac).  Did you allow ICMP out from green to red?  Mine works great but I use authentication.

[towly]

Hi DDA

I deleted proxy.pac and wpad.dat from the console
/home/httpd/html/proxy.pac and wpad.dat
I've tested the manual proxy from client, works like a charm

ICMP is enabled (green to red) in firewall.
What about the allowed port(s) in the proxy
I've tried adding ICMP in there.
But no avail.

Thank for the help DDA

[dda]

I dont think there was much point in deleting the proxy.pac file to be honest.  I found these files to be helpful especially with users who use laptops...but nevertheless.  The only thing I can imagine as i remember ICMP being enabled by default in the outgoing firewall is that it requires authentication somehow.  I will see if I can find anything in my config.

[towly]

Hi DDA

That will be very helpful of you.
Otherwise I'll just reinstall efw and reconfigure from scratch.
And go with the authentication route.
But yes ICMP is enabled in the firewall by default.

Thank very much

[dda]

Hi Towly are you using EFW on a LAN or just in a home type envoirment?

[towly]

Hi DDA

I'm using efw on a lan in a home enviroment yes.
The reason why I wanted the proxy is that.
Only the pc's in my flat gets internet access.
The others that connect on the wifi can only access my files and not
abuse my internet connection. Wifi is also password protected.
But the place where I live is a plot with 3 houses.
So they all connect to my network via wifi.

[towly]

Hi DDA

I found out something interesting in regarding pinging a website eg google.
If i ping the domains' ip it pings, but not the domains' name.
Any idea why

Thanks in advance