Re: [Efw-user] NTLM Proxy Auth Issues 2.4

[Davide C. <dav...@ra...>]

To use content filtering with HTTP proxy you must use "Not Transparent" 
(this is by design).
The "auth required option" goal is achieved configuring an access policy 
row.
The access control list (access policies) is evaluated from top to 
bottom and the evaluation stops when a rule is matched.
In order to force use of HTTP proxy in "not transparent" mode you must 
disable at least TCP/80 (and TCP/443 and TCP/21) in 
Firewall->outgoing_traffic because outgoing traffic is not intercepted 
by the proxy service in this mode.

Davide.

On 21/06/2010 17:53, Scott Howell wrote:
> Hello Everyone,
> I am an Endian nuub and having some issues with my first installation.
> I am trying to get NTLM auth working on a new 2.4 installation.  I have
> configured everything in the Auth tab of the proxy, and I have
> sucessfully joined it to the domain.  Then I created 2 different content
> filter policies for testing.  I went into the access policy section and
> created two access policies one for each of two test users (I can see
> all of my AD Users & Groups fine) and applied the two different content
> filter rules to each of the access policies.
> Basically nothing seems to work.  Firstly, if I do not setup my browser
> to use a proxy I can get anywhere without it.  I have the proxy set to
> "Not Transparent", although when reading through some post (maybe older
> versions) people have suggested setting this to auth required, but I do
> not have that option.  I only have trans or not trans as options on the
> config tab.  Secondly, if I do config the browser to look for the proxy
> I get a login screen which I shouldn't with NTLM, but even if I try to
> use a valid AD username and pass it doesn't take it.
> Any suggestions are greatly appreciated.
>
>
>
> ------------------------------------------------------------------------------
> ThinkGeek and WIRED's GeekDad team up for the Ultimate
> GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the
> lucky parental unit.  See the prize list and enter to win:
> http://p.sf.net/sfu/thinkgeek-promo
>
>
>
> _______________________________________________
> Efw-user mailing list
> Efw...@li...
> https://lists.sourceforge.net/lists/listinfo/efw-user