Arch Linux

feng-fr

Member

Registered: 2011-02-27

Posts: 15

Transparent -corporate- proxy

Hello,

I've an ArchLinux desktop connected my company's network.
Every http(s) connection must go through a proxy.

I'm a web dev and I use a large set of very small tools who likely doesn't support proxy. And honestly even if they'd all support a proxy, it's so lame to set it for everything...

I would like a be able to set this corporate proxy transparent for my entire system.
I've read a lot of things on the internet about this but nothing is really clear to me about what is possible (for real, since nobody agrees with each others) and what this implies.

Can you help me on this please ?

ewaller

Administrator

From: Pasadena, CA

Registered: 2009-07-13

Posts: 20,601

Re: Transparent -corporate- proxy

If I read that correctly, you are asking us how to defeat your employer's requirement that all connections go through their network?
Circumventing that could provide a security issue (in their mind) whereby your computer provides a bridge around their firewall.  Something could connect to your computer without going through the firewall and could then get behind their firwall through your VPN tunnel.

If that is their policy, we are not going to be able to help you.

Never mind.

Last edited by ewaller (2015-10-15 17:56:25)

---

Nothing is too wonderful to be true, if it be consistent with the laws of nature -- Michael Faraday
The shortest way to ruin a country is to give power to demagogues.— Dionysius of Halicarnassus
---
How to Ask Questions the Smart Way

byte

Member

From: Düsseldorf (DE)

Registered: 2006-05-01

Posts: 2,046

Re: Transparent -corporate- proxy

No, he's asking for a transparent proxy howto, not a proxy tunnel howto.

---

1000

feng-fr

Member

Registered: 2011-02-27

Posts: 15

Re: Transparent -corporate- proxy

That's exactly the opposite. The company requires us to go through their proxy, to access internet. I simply need a way to apply this proxy system wide so I don't have to set it for each application. For example, software plugin download, from the software itself often doesn't support proxy setting. By setting a proxy system wide, the plugin downloader can access the internet and download the plugin, using the company's proxy's policies & firewall.

It's corporate proxy, not a personal VPN. We already have a corporate VPN for edge cases which grant a full access to the internet, but I don't want to use it all the time since, as you say it may be a security breach.

@byte : absolutely, a RELIABLE howto ^^ . I've tried some, resulting in a perfect failure I'm not a network guy, I have no clue about iptables and stuff like that.

Last edited by feng-fr (2015-10-15 17:11:25)

ewaller

Administrator

From: Pasadena, CA

Registered: 2009-07-13

Posts: 20,601

Re: Transparent -corporate- proxy

Got it.  Sorry for the noise.

---

Nothing is too wonderful to be true, if it be consistent with the laws of nature -- Michael Faraday
The shortest way to ruin a country is to give power to demagogues.— Dionysius of Halicarnassus
---
How to Ask Questions the Smart Way

feng-fr

Member

Registered: 2011-02-27

Posts: 15

Re: Transparent -corporate- proxy

Anyone has a good process for this ?

satanselbow

Member

Registered: 2011-06-15

Posts: 538

Re: Transparent -corporate- proxy

How do you currently connect to the internet? Wifi? Ethernet? Internet enabled cheese grater? What network stack do you use / are you familiar with?

If you are happy for all home network traffic to travel via your work network - it should be trivial to configure your (wifi?) router... if you have one...

feng-fr

Member

Registered: 2011-02-27

Posts: 15

Re: Transparent -corporate- proxy

I'm connected to the ethernet.Network stack ??
It's a desktop in the company's office. So all my traffic has to go through the proxy, but I have no access to the company's router.

feng-fr

Member

Registered: 2011-02-27

Posts: 15

Re: Transparent -corporate- proxy

Can someone help me please ?