HTTP Anti-Virus Proxy
http://havp.hege.li/forum/

HOW TO USE WINDOWS AUTHENTICATION WITH WEB PROXY
http://havp.hege.li/forum/viewtopic.php?f=3&t=532
Page 1 of 1

Author:  harryknuckles69 [ 11 May 2010 02:20 ]
Post subject:  HOW TO USE WINDOWS AUTHENTICATION WITH WEB PROXY

widows authentication only working if proxy is turned off. if I turn on web proxy and transparent proxy on green (anti-virus scan enabled) i can no longer authenticate. i tried advproxy but that also disables the network virus scan. need a workaround or setting fix for a client. THANK YOU

Author:  karesmakro [ 11 May 2010 08:24 ]
Post subject:  Re: HOW TO USE WINDOWS AUTHENTICATION WITH WEB PROXY

Hi harryknuckles69!
You are using copfilter on an ipcop system?
You can find some information and the solution on this page:
http://www.copfilter.org/wiki/doku.php? ... gs-problem
The workaround is only in german this time, but it should be self complained. Let me know, if you have some problems.

You can find find a forum for copfilter related questions on http://www.copfilter.org/forum

regards

Author:  harryknuckles69 [ 12 May 2010 05:45 ]
Post subject:  Re: HOW TO USE WINDOWS AUTHENTICATION WITH WEB PROXY

I found a workaround, in ipcop: leave "enabled on green" proxy checked, but uncheck "transparent on green" proxy.
Then setup web browser to use proxy in manual configuration to use ipcop ip address and use port 800 for all entries (tested in firefox).
Then put in address to force authentication in No Proxy for at the bottom.

This forced authentication for the website I wanted and antivirus is still working in copfilter - eicar test.

Firefox -> tools -> options-> advanced -> network -> settings ->

my ipcop ip is 192.168.1.252
web address that needs authentication admin.spatechadmin.com
*** need to clear cache in ipcop and firefox to test after you make changes.

Firefox setting looked like this:

Attachment:
setting.jpg
setting.jpg [ 142.97 KiB | Viewed 3134 times ]

Author:  karesmakro [ 12 May 2010 09:59 ]
Post subject:  Re: HOW TO USE WINDOWS AUTHENTICATION WITH WEB PROXY

This is the same way to make a proxy exception, as my described way! The only difference is, that you are loosing the transparent proxy conduct.
So I'm glad to hear, that this works for you!

Author:  harryknuckles69 [ 12 May 2010 21:09 ]
Post subject:  Re: HOW TO USE WINDOWS AUTHENTICATION WITH WEB PROXY

website I needed to authenticate was admin.spatechadmin.com and keep green transparent proxy on to enable network anti-virus.

Here is the fix in English:

Windows Authentication with transparent proxy on. Part I


Putty to ipcop, logon as root, enter password

cd /var/log/copfilter/default/opt/havp/etc/init.d

vi copfilter_havp

# COPFILTER START - havp - do not modify
acl copfilter_all src 0.0.0.0/0.0.0.0
acl Scan_HTTP proto HTTP
acl Scan_FTP proto FTP

cache_peer 127.0.0.1 parent 10080 0 no-query no-digest no-netdb-exchange default
cache_peer_access 127.0.0.1 allow copfilter_all

acl NOSCAN dstdomain admin.spatechadmin.com
always_direct allow NOSCAN

always_direct allow Scan_FTP
never_direct allow Scan_HTTP
# COPFILTER END - havp - do not modify

*** Need to enter this for it to work in the correct location***

acl NOSCAN dstdomain admin.spatechadmin.com
always_direct allow NOSCAN


Windows Authentication with transparent proxy on. Part II


Linux Commands:

The most important commands in vi are these:
Press i to enter the Insert mode. Now you can type in your text.
To leave the Insert mode press ESC.
To delete the character that is currently under the cursor you must press x (and you must not be in Insert mode because if you are you will insert the character x instead of deleting the character under the cursor). So if you have just opened the file with vi, you can immediately use x to delete characters. If you are in Insert mode you have to leave it first with ESC.
If you have made changes and want to save the file, press :x (again you must not be in Insert mode. If you are, press ESC to leave it).
If you haven't made any changes, press :q to leave the file (but you must not be in Insert mode).
If you have made changes, but want to leave the file without saving the changes, press :q! (but you must not be in Insert mode).
Please note that during all these operations you can use your keyboard's arrow keys to navigate the cursor through the text.
*** Clear proxy cache then reboot ipcop, also clear browser cache

thank you! karesmakro

Author:  karesmakro [ 12 May 2010 21:25 ]
Post subject:  Re: HOW TO USE WINDOWS AUTHENTICATION WITH WEB PROXY

I would prefer this way! Especially in a big network area this way is saving much time :D
Nice howto!

Page 1 of 1 All times are UTC + 2 hours [ DST ]
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/