How can I force Firefox to use a Proxy on the network?

Hi,

I think you need to make your Proxy transport. If it is squid then the below link explains how to make the proxy transparent:

www.cyberciti.biz/tips/linux-setup-transparent-proxy-squid-howto.html


For MS ISA Server:

www.eggheadcafe.com/aspnet_answers/isaconfiguration/May2006/post26977701.asp

I currently have a thirdparty proxy called CCProxy that is a very basic app.  What does it mean to make it transparent?

From Wikipedia:

Transparent and non-transparent proxy server
The term "transparent proxy" is most often used incorrectly to mean "intercepting proxy" (because the client does not need to configure a proxy and cannot directly detect that its requests are being proxied).
However, RFC 2616 (Hypertext Transfer Protocol -- HTTP/1.1) offers different definitions: "A 'transparent proxy' is a proxy that does not modify the request or response beyond what is required for proxy authentication and identification"."A 'non-transparent proxy' is a proxy that modifies the request or response in order to provide some added service to the user agent, such as group annotation services, media type transformation, protocol reduction, or anonymity filtering".

I meant this scenrio:


YourNetwork <--------->Switch <------------>ProxyServerMachine <-------------->Internet Gateway

I presume that you have your proxy server on one of the machines of your network so people are able to access Internet directly. If you make the above scenario then users can not access Internet without accessing the proxy server.

I understand the plann but I dont know what to do in order to force everyone to go through the proxy rather then direct to the router.

Here how the network is setup:

Router:  Draytek2800
Swtich:  Lots of them through the building.
IP Range:  192.168.0.x
Server 1:  AD, DC
Server 2:  Proxy, File Server, Mail Server
Proxy:  A small app called CCProxy on server 2003

Now, I need to force everyone to speak to the proxy first not to the internet gateway direct.  What do I need to do?

ohhh,,

its just hit me on what you are asking me to do uetian1707.

Connect the ProxyServer direct to the router and not the network switch.  This way, everyone is forced to talk to the ProxyMachine first before internet access is granted?

Yes. Exactly this is what I am trying to say and all your machines will have the gateway address of your proxy server. This way they do not need to have proxy server settings typed in their browsers and their is no chance to bypass the proxy server.

OK.. sounds good..  Now i need to investigate and ensure I set it up correctly before i end up dropping the network.

Question:
Do I connect the 'ProxyMachine' to the Draytek Router.
Then out of the ProxyMachine from the second network card to the switch?

So, it will be like this:
Internet/Router---------------ProxyMachine--------------Switch---------------NetworkPC's
Internet/Router---------------DHCP Server---------------Switch

Or, do i just change the default gateway to ProxyMachine in AD policy?

There is actually a very simple solution here. On your firewall block all HTTP/HTTPS outbound UNLESS the source IP is your proxy server.

In the past I've come across a tool called FFAdmin (I believe) where it allowed you to push Group Policy like settings down to Firefox. I did a quick search to find you a download link, but i could not locate it. I'm sure a thorough Google search will dig up something.

Hope that helps!