Welcome to ISAserver.org

Web Chaining

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> General >> Web Chaining

Page: [1]

Message

<< Older Topic Newer Topic >>

Web Chaining - 23.Mar.2008 4:07:49 AM

podexperfectussum

Posts: 7
Joined: 12.Dec.2005
Status: offline

When creating web chaining rules, there's a place to make a destination exception (i.e. "this rule applies to all traffic sent to these destinations...Except...), but I can't seem to find a way to make a source exception.

I'm running the web proxy transparently, so all http requests get forwarded to another proxy server that does content filtering. Unfortunately, this is a seperate physical server that has it's own public IP and faces the internet and isn't protected by ISA. The reason for this is because the web chaining rules apply to the ISA host as well. If I install the content filter (privoxy) on the ISA host, then go to my workstation and request a page, my browser makes the request, ISA intercepts it, forwards it to the privoxy, which then makes the request, isa intercepts it, forwards it to privoxy, ad infinitum.

What I'd like to happen, is when I request a page, ISA's transparent proxy intercepts the request, forwards it to privoxy which then retrieves the content from the internet, strips the ads then returns the content to ISA. ISA, being configured to cache retrieved content, caches the page (sans ads), then returns the content to my browser.

Any thoughts/ideas would be greatly appreciated. I've attached a (simplified) diagram of my network to help illustrate my configuration.