Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I want to setup squid proxy server to be used without manually configuring the browser to use a proxy. For example I should be able to do this in the browser address bar: htttp://squidserverip:3128/www.serverfault.com. It did not work for me with my basic squid configuration.

What I want is a basic http proxy server with some authentication feature. When the users put the url of the proxy server in the browser address bar (e.g. www.proxyserver.net), on getting authenticated, it will display a list of urls that can be accessed through the proxy. Clicking on those urls will fetch those sites through the proxy.

share|improve this question
    
It seems that you need web server instead of proxy server. The web page will show you the allowed URLs and then fetch them for you when requested. The page can be protected with username/password (authenticated). –  Khaled Feb 14 '12 at 7:49
    
I'm pretty sure this is what you are looking for: en.wikipedia.org/wiki/Proxy_auto-config . Your DHCP server can then announce the presence of the PAC file via dhcp option 252. You should read up on how to configure your specific DHCP server to do that –  Cillier Oct 15 '13 at 16:07

3 Answers 3

  1. Write a PAC file that mimics your requirements
  2. Host that file on a server somewhere on your LAN
  3. Configure your DHCP server to announce the location of that PAC file
  4. Configure the broswers on your LAN to use "Automatic Proxy Configuration Settings" ( In your browser options )

Some relevant links:

http://www-archive.mozilla.org/catalog/end-user/customizing/enduserPAC.html

http://en.wikipedia.org/wiki/Proxy_auto-config

http://technet.microsoft.com/en-us/library/dd361887.aspx

share|improve this answer

You most likely want something along the lines of an HTTP/web-based proxy. Something like the discontinued PHProxy would do what you're after.

http://sourceforge.net/projects/poxy/

share|improve this answer
    
Hi @nixnotwin...did you ever find something that worked for you? Would appreciate some feedback. Cheers. –  Ashley Steel Apr 1 '12 at 10:34

The bit about not manually configuring the browser, can be achieved by setting up your network to transparently redirect all HTTP requests (note: not HTTPS) to your squid proxy. Search for "transparent proxy redirection iptables" on this forum for an example on how to do it with iptables.

Once your user is redirected to the proxy server, you can use ACLs in squid to block certain URLs, while allowing others. You should also be able to configure a custom error page is squid to achieve your "captive portal", where you would list URLs a user has permissions to access.

Alternatively, these sorts of features are baked into most entry-level Enterprise firewalls, such as FortiGate. You may want to look into that as well..

-- ab1

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.