That's really informative and ill try this one out. At least 75% of my network uses IE, so I have to manually edit 25% which uses firefox and safari (Mac users who are Spanish, better review my Spanish 101 hehe). Last night when in bed thinking over this, ive come up an idea. When a user try to browse directly (port 80), iptables should redirect those traffic to a specific part on your site where it magically configures the browsers to use PAC. So no user intervention or manual config will occur, I guess firefox can be configured automatically.. Just my two cents idea, who knows someone has already done this (not me, I only understand programming algo but not into coding). -----Original Message----- From: K K [mailto:kkadow@xxxxxxxxx] Sent: Saturday, May 12, 2007 2:04 AM To: squid-users@xxxxxxxxxxxxxxx Subject: Re: proxy.pac config On 5/11/07, Adrian Chadd <adrian@xxxxxxxxxxxxxxx> wrote: > You can turn that cache behaviour off. I'll hunt around for the instructions > to tell IE not to cache proxy.pac lookups and add it to the documentation. That'd be handy. > > (P.S. Have you heard about the magical PAC refresh option in Microsoft's > > IEAK?) > > Nope! Please tell. Inside Internet Explorer Administration Kit, you can build a custom installer for IE6 or IE7 and tune just about everything remotely related to IE. Great for a corporate deployment, or for the OP's question about forcing PAC settings to all desktops. One of the options you can control is "Connections Customization". When you check this in the first menu, after going through a dozen or so dialogs, deep in "Stage 4" you will reach "Connection Settings". This gives you the option to "Import the current connection settings from this machine", and a button for "Modify Settings". If you use this button, it will open the connections menu, just like under IE, but there are extra options visible which never normally appear, including an "Advanced" button next to the PAC url. This reveals new options for PAC, including refresh time; changes here are effective immediately on your local machine. Once you exit IEAK, the "Advanced" button vanishes from the control panel, but the settings remain in effect -- if you set a proxy URL and refresh time in the Brigadoon "Advanced" tab then choosing a new URL in the normal connection setting window is ineffective. There's probably a registry hack you could find to accomplish the same results, and then just push down a .REG file to all the clients. Kevin -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.
