> Over the years, it's a pain as staff have to toggle proxy off when they take > devices like laptops > home, as well as modify multiple policies when adding a new bypass setting.
I mitigate this with isInNet(). The ruleset makes the distinction for the user. I distribute proxy settings via dhcp/dns and when a remote vpn user without their gateway redirected acquires an ip on their tunnel interface, their browser would otherwise redirect without this. > then the kids take it off on purpose and complain it doesn't work to get out > of classwork Lol, no matter what you do, someone will find a way, however a transparent proxy could help this. Kids... > We need two separate sets of settings for one DNS domain, so wpad publishing > just isn't > the best option for us. Well, obviously I don't know your environment as well you, however I would suggest revisiting the plethora of potential rulesets you can setup in the pac file, you may just be surprised at what you can automate which would greatly simplify things imho. When I am testing changes or complex rulesets, if the control flow isn't obvious I'll throw in alert() calls then as the browser is processing the ruleset, message boxes appear. jlc
