Setting up WPAD Autoconfigure for the Squid Package

Configuration guides, troubleshooting and practical advice for AZTCOFW.

Articles

6 results

Block Port 80 Out from LAN

Create a firewall rule at the TOP of the LAN tab (or appropriate interface) that blocks anything from <internal subnet> to * on port 80. Note: If the firewall is used to serve WPAD and the WebGUI anti-lockout rule has be

Configure DNS

Now to setup the DNS portion. WPAD will take the domain name given to the machine, likely assigned by DHCP, and prepend wpad. . If the domain is example.com , it will look for wpad.example.com . This task may be accompli

Create wpad.dat

Before starting, a wpad.dat file must be crafted. This is a single file with a JavaScript function which tells the browser how to find a proxy hostname and port. This function can be as simple or as complex as desired, t

Prerequisites

This recipe assumes squid is already operating in a non-transparent configuration.

Test Clients

Start a browser on a client behind the AZTCO-FW firewall, and see what happens. If squid is configured for authentication, the client will be greeted with a login prompt. Otherwise, check squid’s logs to ensure traffic i

Why would this be done?

To use squid authentication, squid cannot be used in transparent mode. HTTPS traffic also cannot be filtered using transparent mode. When squid is run in normal mode, a proxy IP and port must be configured on each client