M
M
myasnik83522017-02-03 11:33:31
Squid
myasnik8352, 2017-02-03 11:33:31

Exceptions do not work correctly in IE11, how to write them correctly?

There is a proxy server squid 3.3.8 clients with win7 and IE11. There was a need to let some sites by the proxy, it turned out that exceptions in IE are ignored, and the request goes through the proxy. The entries now look like this:

*.mydomain.ru;*.mydomain2.ru;e5.*;1c.ru;edi.*;comarch.*;ediweb.*;edisfera.*;*.7cont.*;

The checkbox "Do not use a proxy server for local addresses" is worth it.
IE settings are propagated by a logon script (registry edit) using a GPO.
Changes are applied, it is visible on the register.
At the same time, requests to both local sites and sites from exceptions are still visible in the squid logs.
I tried with the indication of the protocol ( http://site.ru;https://site.ru) , but in this case the line of exceptions becomes completely unreadable with a large number of characters. Above are just a few of the exceptions.
So what's the right way to write exceptions?

Answer the question

In order to leave comments, you need to log in

2 answer(s)
R
res2001, 2017-02-03
@myasnik8352

Use the automatic proxy configuration script. There you can filter everything very flexibly.
You can also configure "Automatic detection of parameters" - the meaning is the same, you just do not need to specify the path for the autoconfiguration script. Though with HELL and GPO it is possible not to bother with it.
Search keywords: WPAD and PAC file.

M
myasnik8352, 2017-02-08
@myasnik8352

on the advice of res2001 , it was decided to use wpad, the working wpad.dat is below:

function FindProxyForURL(url, host)
{
// Don't proxy local hostnames
if (isPlainHostName(host)) {return "DIRECT";}
// Don't proxy local addresses
if (isInNet(host, "192.168.0.0", "255.255.254.0")) {return "DIRECT";}
if (isInNet(host, "192.168.2.0", "255.255.255.0")) {return "DIRECT";}
if (isInNet(host, "192.168.10.0", "255.255.254.0")) {return "DIRECT";}
if (isInNet(host, "192.168.15.0", "255.255.255.0")) {return "DIRECT";}
if (isInNet(host, "192.168.51.0", "255.255.255.0")) {return "DIRECT";}
// Don't proxy local hosts
if (shExpMatch(host, "127.0.0.1" )) {return "DIRECT";}
if (shExpMatch(host, "*/localhost*" )) {return "DIRECT";}
// Don't proxy local domains 
if (dnsDomainIs(host, ".mydomain.ru")) {return "DIRECT";}
if (dnsDomainIs(host, ".mydomain2.ru")) {return "DIRECT";}
// proxy override
if (shExpMatch(url, "*.7cont.ru*")) {return "DIRECT";}
if (shExpMatch(url, "*.rbk.ru*")) {return "DIRECT";}
if (shExpMatch(url, "*.rbc.ru*")) {return "DIRECT";}
// other all go to proxy
return "PROXY proxy:3128; DIRECT";
}

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question