DaveHope.co.uk

Implementing PBR and Squid3 as a transparent proxy

There are various methods of implementing URL filtering in an organisation, my preferred approach is to silently route traffic through a proxy server. This has a few distinct advantages: No end user configuration is required (via wpad.dat or Group Policy etc); If something breaks, it’s extremely simple to remove; Most people wouldn’t even know it [...]

 

Automatic backup of Netscreen configuration

I spent some time earlier automating the backups of our appliance configuration to a restricted network share and thought I’d share a simple batch script to backup the configuration from multiple Juniper Netscreen (ScreenOS) firewalls. @echo off REM ================================================================ REM CONFIGURATION INFO REM ================================================================ set USERNAME=backupAccount set PASSWORD=superSecretPassword set CFGFILE=BackupList.txt set DESTDIR=C:\Backups\ REM ================================================================ REM [...]

 

Juniper SSG140 PPTP Routing

At work I’ve just replaced a custom Linux box I’ve been running as our firewall and proxy with a Juniper Netscreen SSG140. I had a few problems forwarding PPTP traffic so thought I’d document the problems I came across and the solutions. PPTP Forwarding Firstly, I was having problems even forwarding the PPTP traffic. I’d [...]