Re: Making XP Pro. SP2's IIS as a proxy server?
ma_khan
What you "define" and "call" proxy depends a lot upon your PAC script so I
wouldnt know much about that. However, coming to the second part of your
question on downloading the proxy settings on client computers (example
foo.pac) you will need to add the following Mime-Type in your IIS server:
extension: .pac
mime-type: application/x-ns-proxy-autoconfig
Hope this helps.
--
ma_khan (IIS MVP)
www.iisworkstation.com
"Phillip Pi" <phill...@symantec.comSYMC> wrote in message
news:usCvZoVu...@TK2MSFTNGP03.phx.gbl...
> Hello.
>
> Is it possible to can make XP Pro. SP2's IIS (installed/added from its XP
> CD) act like a proxy server for Web transfers to client PCs on the LAN? I
> want client Windows PCs connect to the proxy server to access the
> Internet.
>
> I am also trying to set up client PCs to download *.pac (proxy
> automatic configuration) scripts, from IIS server, to web browsers (e.g.,
> IE6) to transfers datas via IIS proxy server for external Web sites (e.g.,
> Google.com).
>
> I was able to make a PAC script to work, but going to Web sites like
> cnn.com show "Under construction..." error. :( I guess that means my
> client PC is going to the IIS server, but not going outside like a proxy
> (couldn't find a way to enable this in IIS).
>
> I did manage to make this proxy server setup to work with Apache v2.2 on
> another machine. I am still new at this area (not an administrator guy),
> so I might be missing something.
>
> Thank you in advance. :)
> --
> Phillip Pi
> Senior Software Quality Assurance Analyst
> Partner Engineering/Internet Service Provider/Symantec Online Services,
> Consumer Business Unit
> Symantec Corporation
> www.symantec.com
> -----------------------------------------------------
> Email: phill...@symantec.comSYMC (remove SYMC to reply by e-mail)
> -----------------------------------------------------
> Please do NOT e-mail me for technical support. DISCLAIMER: The views
> expressed in this posting are mine, and do not necessarily reflect the
> views of my employer. Thank you.
Phillip Pi
Phillip Pi
> What you "define" and "call" proxy depends a lot upon your PAC script so
Well, I also did it manually (enter values; no script) but that didn't
work either. Here's a sample script:
function FindProxyForURL(url,host)
{ if(isPlainHostName(host)||
isInNet(host,"192.168.0.0","255.255.0.0")) return "DIRECT";
else return "PROXY 10.147.27.242:8080";
}
> I wouldnt know much about that. However, coming to the second part of
> your question on downloading the proxy settings on client computers
> (example foo.pac) you will need to add the following Mime-Type in your
> IIS server:
>
> extension: .pac
> mime-type: application/x-ns-proxy-autoconfig
Yep, I have that already. Here's a screen shot:
http://img21.imageshack.us/img21/6389/screenshotlew.gif ... It works.
Just can't get the proxy to work via IIS to the Internet.
ma_khan
I am not into proxy so really wouldn't know much, as far as I can tell you
from IIS side if you have the MIME type set then you are good to go... rest
depends on your PAC script... However, I have seen people implement proxy on
the basis of ASP and an ISAPI filter. Following is a download available at
iis.net... Hope this helps...
http://www.iis.net/downloads/default.aspx?tabid=34&g=6&i=1493
--
ma_khan (IIS MVP)
www.iisworkstation.com
"Phillip Pi" <phill...@symantec.comSYMC> wrote in message
news:u2CuWxWu...@TK2MSFTNGP03.phx.gbl...
Phillip Pi
> Hi Philip,
>
> I am not into proxy so really wouldn't know much, as far as I can tell
> you from IIS side if you have the MIME type set then you are good to
> go... rest depends on your PAC script... However, I have seen people
> implement proxy on the basis of ASP and an ISAPI filter. Following is a
> download available at iis.net... Hope this helps...
> http://www.iis.net/downloads/default.aspx?tabid=34&g=6&i=1493
Thanks. I will check it out. I hope I don't have to program/code to make
it work since that is not my strong area. :)
Phillip Pi
>> I am not into proxy so really wouldn't know much, as far as I can tell
>> you from IIS side if you have the MIME type set then you are good to
>> go... rest depends on your PAC script... However, I have seen people
>> implement proxy on the basis of ASP and an ISAPI filter. Following is
>> a download available at iis.net... Hope this helps...
>> http://www.iis.net/downloads/default.aspx?tabid=34&g=6&i=1493
>
> Thanks. I will check it out. I hope I don't have to program/code to make
> it work since that is not my strong area. :)
Hmm, I can't seem to get the proxy sample path as shown in step #3 in
http://www.iisproxy.net/setup.html ... I tried to use the live samples
in http://www.iisproxy.net/live-samples.html but it said "I'm sorry,
live IIS proxy samples was removed, because they were working :-(.". I
tried without changing the "NotFoundScript=/redesign.asp?" line in
iisproxy.ini in the set Home Directory, but I am getting the same
results. Maybe I did it wrong. :(
Phillip Pi
>>> tell you from IIS side if you have the MIME type set then you are
>>> good to go... rest depends on your PAC script... However, I have seen
>>> people implement proxy on the basis of ASP and an ISAPI filter.
>>> Following is a download available at iis.net... Hope this helps...
>>> http://www.iis.net/downloads/default.aspx?tabid=34&g=6&i=1493
>>
>> Thanks. I will check it out. I hope I don't have to program/code to
>> make it work since that is not my strong area. :)
>
> Hmm, I can't seem to get the proxy sample path as shown in step #3 in
> http://www.iisproxy.net/setup.html ... I tried to use the live samples
> in http://www.iisproxy.net/live-samples.html but it said "I'm sorry,
> live IIS proxy samples was removed, because they were working :-(.". I
> tried without changing the "NotFoundScript=/redesign.asp?" line in
> iisproxy.ini in the set Home Directory, but I am getting the same
> results. Maybe I did it wrong. :(
Also, I tried _proxy.asp file (copied to IIS' home directory path
included in http://www.iisproxy.net/iisproxy.zip). That did not work as
well. :(
Grant Taylor
> XP CD) act like a proxy server for Web transfers to client PCs on the
> LAN? I want client Windows PCs connect to the proxy server to access the
> Internet.
(To the best of my knowledge.)
No it is not possible to get (stock) IIS from Microsoft to behave as a
proxy like Apache's mod_proxy. IIS simply does not have this
functionality. That being said I have heard of people writing a script
that behaves like a proxy.
> I am also trying to set up client PCs to download *.pac (proxy
> automatic configuration) scripts, from IIS server, to web browsers
> (e.g., IE6) to transfers datas via IIS proxy server for external Web
> sites (e.g., Google.com).
You have a couple of different options. You can configure DHCP to use a
vendor specific DHCP option that direct IE (and possibly others) to pull
a Proxy Auto Config (PAC) / Web Proxy Auto Discovery (WPAD) file from a
specific URL. You can also configure IE (and possibly others) to look
for a specific URL (usually "http://wpad.domain.tld/wpad.dat") to pull
the PAC / WPAD file from.
I have successfully set up the DHCP option to specify the URL to pull
the PAC / WPAD file from for multiple clients. I generally set the DHCP
option to the same URL that would be used by the WPAD option to make
things simpler and more compatible with as many things as possible. (I
believe non IE browsers like WPAD better.)
Word to the wise, Microsoft DNS server are by default configured to not
serve up a "wpad.<what ever>" resource record. You have to run a
command to have the DNS server serve up what Microsoft considers
""dangerous resource records. I believe the intent is to help thwart
hijacking of browsers by configuring them to access the wrong proxy.
> I was able to make a PAC script to work, but going to Web sites like
> cnn.com show "Under construction..." error. :( I guess that means my
> client PC is going to the IIS server, but not going outside like a proxy
> (couldn't find a way to enable this in IIS).
Most likely.
> I did manage to make this proxy server setup to work with Apache v2.2 on
> another machine. I am still new at this area (not an administrator guy),
> so I might be missing something.
See my comment above about IIS verses Apache's mod_proxy.
> Thank you in advance. :)
*nod*
Grant. . . .