Push Forward Proxy info within DHCP

Hello,
Is it possible to "push" Forward proxy info to clients using DHCP (with some option)?
Regards
Kostas

Kostas B wrote:
Hello,
Is it possible to "push" Forward proxy info to clients using DHCP (with some option)?
Regards
Kostas
It is possible to use my DHCP Option Code Utility to create the required DHCP option codes for advertising a proxy server. See http://en.wikipedia.org/wiki/WebProxy_AutodiscoveryProtocol
As per the above article, there are two methods for a client to 'discover' a proxy server, one is via a DHCP option code, as per your query, the other is via a standard URL formed based on the clients domain name, e.g. http://wpad.example.com/wpad.dat
Unfortunately, it is my impression that while it is possible to set a Mac OS X Server to provide both the DHCP option code, and to host a suitable file at the address specified via the DNS method, I don't believe any version of Mac OS X as a client will use either of these methods.
You can manually configure a Mac OS X client to look for the DNS address and then the wpad file in System Preferences -> Network -> Advanced… -> Proxies -> Automatic Proxy Configuration , you could in theory use Managed Preferences via Workgroup Manager as well. However both these methods cause problems for laptops since when out of the office they are unlikely to be able to access your proxy server, or want to.
So, these two methods on a Mac OS X Server may work with Windows clients (if Windows still supports these methods), but as far as I am aware are useless for Mac OS X clients.
For the benefit of others, a typical reason for using a proxy server, is to monitor network traffic especially web-browsing. An alternate approach that should work for Macs, would be to have a device in-between the LAN and the Internet so all web-browsing has to go through it regardless. This should therefore not need the Macs to be specifically configured.
As we all know, historically Apple has not addressed the needs of the Enterprise market and this could be considered an example of that.
For the benefit of everyone, here is an example DHCP option code as you would add it to your bootpd.plist file at /etc/bootpd.plist
<code><key>dhcpoption252</key>
<data>
aHR0cDovL3dwYWQuZXhhbXBsZS5jb20vd3BhZC5kYXQ=
</data>
The above uses the example, URL of http://wpad.example.com/wpad.dat obviously you need to use my utility to create a value that matches your domain and to have a web-server on your LAN that can host that file. The file then tells the client how to access the proxy server, again see the above wiki article and also this one http://en.wikipedia.org/wiki/Proxy_auto-config which tells you how to write the wpad.dat (aka. proxy.pac) file.
Update: I notice Mac OS X 10.6 now has a "Auto Proxy Discover" option, as Apple do not provide any real documentation for this level of detail, only they know for sure what this does. However it does sound like it might implement the DHCP and DNS methods of auto-discovery. This option was not present in Mac OS X 10.5. If this is what it does you do not need to turn on and fill in the "Automatic Proxy Configuration" option.

Similar Messages

SharePoint Foundation Sandboxed Code Service - Unable to activate worker process proxy object within the worker process

Issue:
On a vanilla installation, the sandboxed code service (e.g. SPUCHostService.exe) is started; however, SPUCWorkerProcessProxy.exe and subsequently SPUCWorkerProcess.exe fails to start.
Resolution/Workarounds attempted:
Attempted 2 different Load balancing settings – local and remote (i.e. affinity)
Ensured local computer policy on server for ‘RPC Endpoint Mapper Client Authentication’ and ‘Restrictions for Unauthenticated RPC clients’ is disabled.
Ensured following key in registry is set properly - HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\RPC
Attempted to bypass SharePoint’s check for certificate revocations at crl.microsoft.com
Ensured the service account is added to the respective groups (e.g. Performance Log Users, Performance Monitor Users, IIS_IUSRS, WSS_ADMIN_WPG, WSS_WPG)
Increased limit of ‘AbnormalProcessTerminationCount’ of SPUserCodeService via Powershell
We have tried all possible workarounds from the following MSDN reference:
http://blogs.msdn.com/b/sharepointdev/archive/2011/02/08/error-the-sandboxed-code-execution-request-was-refused-because-the-sandboxed-code-host-service-was-too-busy-to-handle-the-request.aspx
ULS:
02/21/2014 05:24:50.64 SPUCHostService.exe (0x0230) 0x0F74 SharePoint Foundation Sandboxed Code Service              fe8a
Medium               - - Unable to activate worker process proxy object within the worker process: ipc://38432b45-2f32-4926-ade2-ef53ae1cd501:7000
02/21/2014 05:24:50.64 SPUCHostService.exe (0x0230) 0x0F74 SharePoint Foundation Sandboxed Code Service              fe8c
Medium               - - Error activating the worker process manager instance within the worker process. - Inner Exception: System.InvalidOperationException: Unable to activate worker
process proxy object within the worker process: ipc://38432b45-2f32-4926-ade2-ef53ae1cd501:7000     at Microsoft.SharePoint.UserCode.SPUserCodeWorkerProcess.CreateWorkerProcessProxies()
02/21/2014 05:24:50.64 SPUCHostService.exe (0x0230) 0x0F74 SharePoint Foundation Sandboxed Code Service              ei0t
Medium               - Process creation/initialization threw an exception. Stopping this process. "ipc://38432b45-2f32-4926-ade2-ef53ae1cd501:7000"
02/21/2014 05:24:50.65 SPUCHostService.exe (0x0230) 0x0F74 SharePoint Foundation Sandboxed Code Service
fe87                Medium               - - Error activating the worker process manager instance within
the worker process. - Starting worker process threw - Inner Exception: System.InvalidOperationException: Unable to activate worker process proxy object within the worker process: ipc://38432b45-2f32-4926-ade2-ef53ae1cd501:7000     at Microsoft.SharePoint.UserCode.SPUserCodeWorkerProcess.CreateWorkerProcessProxies()
Any other insights on how I can troubleshoot the issue described?
Thanks in advance!

Hi ,
For resolving your issue , you can do as the followings:
1. Logged into the Web Server with the Timer Service Account.
2. Ran the powershell command to check the SID of the account running the spucworkerprocessproxy.exe:
$(Get-SPManagedAccount -Identity "THE SERVICE ACCOUNT").Sid.Value
3. Checked the registry :
HKEY_USERS\[SID OF THE SERVICE ACCOUNT]\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\State
4. Changed the value 0x00023c00 to 0x00023e00
In addition, here are some similar posts for you to take a look at:
http://social.technet.microsoft.com/Forums/en-US/aae497df-5f0d-4f86-a724-c7b805ccd07f/sharepoint-sandboxed-code-service-troubles?forum=sharepointgeneralprevious
http://blogs.technet.com/b/operationsguy/archive/2011/01/17/sharepoint-2010-sandboxed-code-solutions-and-web-proxy.aspx
http://social.msdn.microsoft.com/Forums/en-US/c21e2c3a-a259-4d5f-8071-eff52b7bddc3/issue-sandbox-solution-too-busy-to-handle-the-request?forum=sharepointgeneralprevious
I hope this helps.
Thanks,
Wendy
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Wendy Li
TechNet Community Support

Tthe flood filter is in my plugins folder along with the other plugins I have, but not in cc 2014. It's also in Adobe bridge associated with cc 2014, but not in cc 2014 Photoshop. i hope you get this because i forwarded your info to HCS and now I'm all m

the flood filter is in my plugins folder along with the other plugins I have, but not in cc 2014. It's also in Adobe bridge associated with cc 2014, but not in cc 2014 Photoshop. i hope you get this because i forwarded your info to HCS and now I'm all mixed up as to this gets forward.

Unfortunately, you are not addressing Adobe here in the user forums.
However, there are many highly experienced volunteer users here willing to help.
Can you please clarify: are you saying that your Flood filter (whatever that is) is in your Bridge folder but not in Photoshop?
UPDATE: I Googled your Flood Filter and discovered it's not an Adobe filter at all. Have you contacted its manufacturer, Flaming Pear? What do they say?

Problem in creating a forward proxy

I want to create a forward proxy .
And the requirement is that whenever browser hits a URL then that request should first go to that proxy, I want to add a header to this request then the modified request should go back to browser through which it will reach the remote server.
I tried to implement this through running a port on which I will read the request coming from browser .But I do not know how will I send the modified request back to the browser.
I have written the following code:
Java Code:
import java.io.*;
import java.net.*;
public class ProxyApp {
    public static void main(String a[]) throws IOException , Exception
        ServerSocket proxySocket = new ServerSocket(7456);
        System.out.println("Socket created at port number.....7456.");
        System.out.println("waiting for browser to connect......");
        Socket browserSocket    = proxySocket.accept();
        System.out.println("request received from browser......");
        OutputStream browserOutputStream    = browserSocket.getOutputStream();
        InputStream browserInputStream      = browserSocket.getInputStream();
        byte[]       b = new byte[1];
        StringBuffer buf = new StringBuffer();
        String       s ;
        for ( ; ; ) {
            int len ;
            len = browserInputStream.read(b, 0, 1);
            if ( len == -1 ) {
                break ;
            s = new String( b );
            buf.append( s );
            if ( b[0] != '\n' ) {
                continue ;
            break ;
        String bufferedData = buf.toString();
        System.out.println("browser requested......"+bufferedData);
        int start, end ;
        start = bufferedData.indexOf( ' ' ) + 1;
        while ( bufferedData.charAt(start) == ' ' ) {
            start++ ;
        end   = bufferedData.indexOf( ' ', start );
        String urlString = bufferedData.substring( start, end );
        System.out.println("browser requested..urlString...."+urlString);
         /*******************reading from server********************************/
        URL url = new URL(urlString);
        URLConnection connection = url.openConnection();
        connection.setDoOutput(true);
        OutputStream remoteOutputStream = connection.getOutputStream();
        System.out.println("sent to remote......"+bufferedData);
        remoteOutputStream.write(bufferedData.getBytes());
        remoteOutputStream.flush();
        remoteOutputStream.close();
        System.out.println("Data written to remote server...");
        InputStream remoteInputStream   = connection.getInputStream();
        byte[]       b1 = new byte[1];
        StringBuffer buf1 = new StringBuffer();
        String       s1 ;
        for ( ; ; ) {
            int len ;
            len = remoteInputStream.read(b1, 0, 1);
            if ( len == -1 ) {
                break ;
            s1 = new String( b1 );
            buf1.append( s1 );
            if ( b1[0] != '\n' ) {
                continue ;
            break ;
        String bufferedData1 = buf1.toString();
        System.out.println("Data read from remote server...bufferedData1..."+bufferedData1);
        browserOutputStream.write(bufferedData1.getBytes());
        browserOutputStream.flush();
        browserOutputStream.close();
        System.out.println("Data written to browser...");
        System.out.println("**************END********************");
}But while getting the input stream from url connection I get Socket Exception.
Please tell me what is wrong...
Please help me out!
Edited by: 967629 on Oct 25, 2012 4:48 AM

I want to create a forward proxy .
And the requirement is that whenever browser hits a URL then that request should first go to that proxy, I want to add a header to this request then the modified request should go back to browser through which it will reach the remote server.
I tried to implement this through running a port on which I will read the request coming from browser .But I do not know how will I send the modified request back to the browser.
I have written the following code:
Java Code:
import java.io.*;
import java.net.*;
public class ProxyApp {
    public static void main(String a[]) throws IOException , Exception
        ServerSocket proxySocket = new ServerSocket(7456);
        System.out.println("Socket created at port number.....7456.");
        System.out.println("waiting for browser to connect......");
        Socket browserSocket    = proxySocket.accept();
        System.out.println("request received from browser......");
        OutputStream browserOutputStream    = browserSocket.getOutputStream();
        InputStream browserInputStream      = browserSocket.getInputStream();
        byte[]       b = new byte[1];
        StringBuffer buf = new StringBuffer();
        String       s ;
        for ( ; ; ) {
            int len ;
            len = browserInputStream.read(b, 0, 1);
            if ( len == -1 ) {
                break ;
            s = new String( b );
            buf.append( s );
            if ( b[0] != '\n' ) {
                continue ;
            break ;
        String bufferedData = buf.toString();
        System.out.println("browser requested......"+bufferedData);
        int start, end ;
        start = bufferedData.indexOf( ' ' ) + 1;
        while ( bufferedData.charAt(start) == ' ' ) {
            start++ ;
        end   = bufferedData.indexOf( ' ', start );
        String urlString = bufferedData.substring( start, end );
        System.out.println("browser requested..urlString...."+urlString);
         /*******************reading from server********************************/
        URL url = new URL(urlString);
        URLConnection connection = url.openConnection();
        connection.setDoOutput(true);
        OutputStream remoteOutputStream = connection.getOutputStream();
        System.out.println("sent to remote......"+bufferedData);
        remoteOutputStream.write(bufferedData.getBytes());
        remoteOutputStream.flush();
        remoteOutputStream.close();
        System.out.println("Data written to remote server...");
        InputStream remoteInputStream   = connection.getInputStream();
        byte[]       b1 = new byte[1];
        StringBuffer buf1 = new StringBuffer();
        String       s1 ;
        for ( ; ; ) {
            int len ;
            len = remoteInputStream.read(b1, 0, 1);
            if ( len == -1 ) {
                break ;
            s1 = new String( b1 );
            buf1.append( s1 );
            if ( b1[0] != '\n' ) {
                continue ;
            break ;
        String bufferedData1 = buf1.toString();
        System.out.println("Data read from remote server...bufferedData1..."+bufferedData1);
        browserOutputStream.write(bufferedData1.getBytes());
        browserOutputStream.flush();
        browserOutputStream.close();
        System.out.println("Data written to browser...");
        System.out.println("**************END********************");
}But while getting the input stream from url connection I get Socket Exception.
Please tell me what is wrong...
Please help me out!
Edited by: 967629 on Oct 25, 2012 4:48 AM

Mac OS X Server Forward Proxy(Web Caching)...setup a website for the proxy???

My office is a Mac environment with a couple of windows pcs. To save on bandwidth i would like to setup a Mac OS X Snow leopard server with a web caching proxy, forward proxy. I read this link from apple
Server Admin 10.6 Help: Configuring Web Service Proxy Settings
i understand that to set this up i must enable it on my Mac Server and also on the clients(end user) web browser. What i don't understand is this part:
"When setting up a forward proxy, make sure you create and enable a website for the proxy. You might want to disable logging on the proxy site or configure the site to record its access log in a separate file from your other sites’ access logs. The site does not need to be on port 80 but setting up web clients is easier if its browsers use port 80 by default."
Create and enable a website for the proxy??? I don't understand, why do i need a website for web caching? Shouldn't the settings in the web browser direct the http requests to the mac server and it does the rest, what has a website got to do with it and what type of website?How?
Please help, thank you in advance

SL Server

ASA 5512-X - VPN & local clients DHCP relaying (DHCP Proxy vs. DHCP Relay conflict)

Hey all,
I have ASA-5512-X serving as general firewall/router. It also serves as AnyConnect SSL VPN gateway (webvpn).
It has ~10 VLANs connected over 1 trunk port. One of the VLANs has DHCP server that shall serve all the VLANs (192.168.16.2).
I'm trying to have the ASA relay DHCP requests from all VLANs to the DHCP server and to also serve VPN clients.
However, according to bug https://tools.cisco.com/bugsearch/bug/CSCsd22469 both DHCP Proxy (webvpn) and DHCP Relay (local interfaces) can't be enabled at the same time.
As VPN clients connect to the same VLANs as local users (eg. VLAN 2 - 192.168.2.0/24) I want to have the very same DHCP server serving both, otherwise it's gonna become a mess.
Note: if I configure DHCP Relay functionality and disable DHCP Proxy - local clients are served fine. If I configure DHCP Proxy (webvpn) and disable DHCP Relay VPN clients are served fine. I therefore consider setup to be correct, just the ASA limitation won't allow me to make it serve both.
Can DHCP Relay also serve VPN clients (no DHCP Proxy enabled)? did I miss something?
Thanks!

Hi,
The only workaround for this issue is to configure the ASA itself to act as DHCP server for vpn clients. You also have the flexibility of using local pool and AAA server. Why exactly do you want to use the same DHCP server for both?
AM

Apache 2.2 21 forward Proxy 2 way SSL for weblogic server as a client

Hi All,
Currently, i am trying to implement a forward SSL proxy. The client will hit my apache server which in return will hit a IIS Server.
scenarios 1
client(weblogic)--*2 way SSL*Apache(forward proxy)*2 way SSL*-- IIS
If i were to implement 1 way ssl, i am able to see the content of the website.
client(weblogic) --- Apache(forward proxy) --- IIS
If i were to launch the web browser from the client machine (with the client certificate imported in the browser), i am able to view the content in the IIS. But if i were to simulate the connection from weblogic server, it just give me end of file exception (response contain no data) on the logs.
Below is my configuration
Listen 8080
<VirtualHost default:8080>
ServerName serverA
ErrorLog "logs/ssl_error_log"
CustomLog "logs/ssl_access_log" common
SSLProxyEngine On
SSLProxyMachineCertificateFile /certificate/servercert.cer
SSLProxyCACertificateFile /certificate/rootCA.cer
SSLProxyVerify require
SSLProxyVerifyDepth 10
ProxyRequests On
ProxyVia On
AllowConnect 12345
<Proxy *>
Order allow,deny
Allow from all
</Proxy>
</VirtualHost>
For 2 way SSL, will the client forward their client certificate to my apache proxy server and apache will on the client behalf forward the client certificate to the IIS server for authenication?
Or the SSL authenication still happen between the client (weblogic) and the end server (IIS) bypassing the proxy server.
Please help.

It is a domain wide setting. Can you not create a new domain? I do not think that you can handle it from web.xml. I have never seen such thing in web.xml.

Web forward proxy cache authentication

Greetings
just doing some testing. I enabled forward proxy on my web server. Clients can access the cache and can use proxy services.
How do I setup User based Authentication to access this proxy ? does some magic find my local LDAP or do I need to set something up in httpd.conf ?
insight and flames welcome

It's common for people to use the Apache Commons HttpClient library for these kinds of connections. It provides for both proxy and basic auth.

Say subject A is on top of page 1 and subject B is on top of page 2. As more text is added subject 2 will be pushed to page 3 eventually is there a way to always keep all Subjects on top of the page even it is pushed forward to a new page?

Say subject A is on top of page 1 and subject B is on top of page 2.
As more text is added subject 2 will be pushed to page 3 eventually is there a way to always keep all Subjects always on top of the page even if they are pushed forward to new pages?

Hi ameryfromny;
We can place a pagebreak before the Heading or Sub-Heading manually prior to or even after creating a Table of Contents. So that the Heading or Sub-Heading is placed always on top of a page.
To create a Table of Contents:
Under Format panel, define paragraph text as Title, Subtitle, Heading, Heading2 ..... and so on for displaying in TOC.
After completion of document writing, place cursor where a TOC is to be displayed.
Insert > Table of Contents > Document
A table of contents generates automatically.
Regards,

Forward Proxy Authentication SAP Webservice Framework HELP!

Hi,
i have built as WS Client using the SAP Standalone Proxy. The client will utilize a forward proxy to access my Webservice. Unfortunately the documentation does only give information how to set the proxy address and port:
port._setProperty"javax.xml.rpc.http.proxyhost","proxy");
port._setProperty("javax.xml.rpc.http.proxyport","8080");
The is no hint how to set a proxy user and password? Does anybody know the answer to my question here?
Cheers,
Heiko

Hi Heiko,
Get SecurityProtocol as described <a href="http://help.sap.com/saphelp_nw04/helpdata/en/ab/c955e2e2d24a888127f211f2d5043f/frameset.htm">here</a> .
Use methid <i>public void addHeader(String key, String value)</i> to add HTTP header:
String authString = "username" + ":" + "password";
String auth = "Basic " + new sun.misc.BASE64Encoder().encode(authString.getBytes());
securityProtocol.addHeader("Proxy-Authorization", auth);
Best regards, Maksim Rashchynski.

Adding Forward Proxy Blocked Hosts

We're using a 2008 XServe with OS X Server 10.5.2 running Apache 2.2.8.
Running DNS, wiki, blogs, groups all working fine.
We're trying to add a lot of Blocked Hosts to our Forward Proxy service with no luck. We have tried to add using comma separated and carriage return text files by dragging onto the Blocked Host Windows and manually copy/paste into the /etc/apache2/httpd.conf file after setting the correct permissions.
In all cases restarting the Web Service results in an error 100002 cannot start Web Service. We can restore functionality by deleting the entries in httpd.conf and killing the httpd processes before restarting the Web Service.
When we add a few manually the service works fine.
How can we add large numbers of blocked hosts without manually entering one at a time? Is there a size limit on httpd for apache?

Hi Antonio,
You brought up a good point, I neglected to mention the firewall. We are currently using a PIX 501 as the firewall/router but we would prefer not to use that as the traffic we are trying to block is internal (e.g.: discourage people from browsing sites they shouldn't be).
Also we may want to add hundreds of domains/IPs; right now were trying to do this using catchall keywords (mostly adult sites) but this is a cat-and-mouse game. I'd much rather be able to drag and drop a text file unless there is some limitation.

Caching forwarding proxy

Dear reader,
Since Forefront TMG is eol. What must I use as a forwarding proxy to maintain website blocklists etc on windows 2012r2?
best regards,
Ruud Boersma
MCITP Enterprise administrator

Hi,
I don't know why and IMHO the Web Application Proxy in WS 2012 R2 has only very limited functionalities compared with Forefront TMG and UAG!
regards Marc Grote aka Jens Baier - www.it-training-grote.de - www.forefront-tmg.de - www.galileocomputing.de/3276?GPP=MarcGrote

Lion server forward proxy

Hi,
is there an easy way to setup Lion server on a mac mini with the internal Apache web server as forward proxy? Bearing in mind that mac mini only has one ethernet port (I guess virtual ethernet port can be used if two interfaces are necessary)?
looking further ahaed - is there any benefit in running a proxy setup with enhanced content filtering capabilities or is the parental control through profile manager sufficient to fulfill that task?
best
-H

Apache's forward proxy doesn't require multiple interfaces, so that's not an issue, but IIRC you can't do this via the GUI. That means you're down to editing Apache's configuration files directly, in which case you can do anything that Apache can normally do.
As for the filtering, that's up to you - you'll need to decide on the amount of filtering paranoia you want to implement, and whether Parental Control provides sufficient coverage, whether you want to roll your own, or subscribe to a commercial solution.

Long time until Forward Proxy shows new content

Dear all,
I have a BorderManager server setup with version 3.9 SP2 and on the server we have HTTP Proxy server / Forward Proxy setup for a webserver somewhere in out network.
When we refresh the content on the webserver (flash content) it takes a very long time before this new content is show on the client side of the HTTP Proxy Server / Forward Proxy.
How can I tune the performance for this proxy?
Your suggestions are very much appreciated.
Rgds,
Zeger

On 12/09/2009 10:36 PM, zegerw wrote:
>
> Dear all,
>
> I have a BorderManager server setup with version 3.9 SP2 and on the
> server we have HTTP Proxy server / Forward Proxy setup for a webserver
> somewhere in out network.
>
> When we refresh the content on the webserver (flash content) it takes a
> very long time before this new content is show on the client side of the
> HTTP Proxy Server / Forward Proxy.
>
> How can I tune the performance for this proxy?
>
> Your suggestions are very much appreciated.
>
> Rgds,
> Zeger
>
>
What you have to do is to properly configure your webserver and use the
appropriate http headers. BM just will follow whatever the webserver
tells him to do.

Lost info within apps after syncy

I was having a wifi issue with the phone so i unsyncd all my pics, music, and apps. When i synced the apps back all the info within the apps was gone. Example 1password was missing all logins and passwords. i thought the backup kept all info within the app, i mean if you get a new phone do u have to start over, doesnt seem logical.
Any ideas how to get back info?

App data is backed up, yes. But, it's backed up as part of the backup process the iPhone goes through, and the data are saved with the iPhone's backup, not to the original app file. By unsyncing then resyncing the app, you re-installed it. The backup is only used if you perform a Restore via iTunes. You did not Restore, so the backup was not used.

Push Forward Proxy info within DHCP

Similar Messages

Maybe you are looking for