IE7 proxy
From BNL Physics Computing
Once you have a tunnel to the internal BNL HTTP proxy configured, you need to configure Internet Explorer to use the tunnel. There are a number of different way you can do this and a couple will be discussed.
Contents |
Simplest Method - Emulating the Behavior of a VPN
The simplest way to use the ssh tunnel to the internal proxy is to send all web traffic through it. To set this up, open the "Internet Options" GUI from the "Tools" menu of IE and then select the "Connections" tab. Click on the "LAN Settings" button near the bottom of this page and the following page should appear:
Make sure that only the "Use a proxy server for your LAN..." box is checked and then enter "localhost" in the "Address:" box and the port used for the tunnel (3128) in the "Port:" box (see above image). Click on the "OK" button and then exit the "Internet Options" GUI. Setting the proxy in this way in IE will direct all web traffic through the tunnel to the internal BNL proxy. You can use this proxy setting anywhere (on-site, on Corus or off-site) without changing any setting, you just have to remember to start the tunnel before trying to access the web.
Location Dependant Method
Modifying the proxy setting depending on where you are can be a little more efficient, but it requires changing the Internet Options preference settings in addition to knowing when to start the ssh tunnel.
Outside BNL
You can use the BNL proxy for everything, but, if you are outside of BNL, it may be more efficient to only send .bnl.gov addresses through the tunnel. The Windows Internet Options proxy interface was not designed for this type of usage so you will have to list all domains that you want to directly access. So, if you go back to the preferences page where you set up the proxy and click on the "Advanced" button, you will see a box where you can list the domains you do not want to go through the proxy tunnel (see image below). If you put ".com; .edu; .net" etc. in the "No proxy for:" box and IE will go directly to the Internet for these domains. You will have to remove these entries from the "No proxy for:" box when you go onto the Corus network.
Corus Network
Since all web traffic except that to BNL servers with conduits has to go through a proxy on Corus, and since you can only have a single proxy within IE, you need to send everything through the tunnel when you are on the Corus network.
Inside BNL
Inside BNL you can check the "Automatically detect settings" checkbox on the Local Area Network Settings page and bnl.gov traffic will go directly to the servers and all other traffic will go through the BNL proxy.
