[KLUG Advocacy] re: OT:uPNP

[Adam Tauno Williams]

> >This is simplified by using a proxy;  simply setup a squid proxy on the
> >edge-device.  If the squid server requires authentication than all this
> >automatic gunk is automatically broken, which is beautiful.  And you get
> >a performance kick for free.  HTTP requests blocked by the proxy won't
> >invoke demand-dial since they will never reach the external facing
> >interface.
> Squid being the reccommended package?  

Pretty close to the only package,  Squid has more or less scorched the
entire proxy/cache space.\

> One more thing for me to figure 
> out for this little project.  Is there a way to make browsers properly 
> autodetect that they need a proxy?  

Yep,  create awpad.dat/proxy.pac works in Netscape, IE, and Mozilla.
This has been discussed on this list, so search the archives.

> I've seen stuff like that on the 
> client side but have no idea how to set up a server that way.  Also, how 
> many obscure protocols work through a proxy, and what will have to be 
> routed through using regular NAT?

FTP & HTTP go via the proxy,  most other things are nat'd.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://www.kalamazoolinux.org/pipermail/advocacy/attachments/20050421/0dd9f931/attachment.bin