<html>
<head>
<title>Schools - Proxy </title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style>
<!--
#page {position:absolute; z-index:0; left:0px; top:0px}
a {text-decoration:none}
a:hover {color: blue;text-decoration:underline}
-->
</style>
</head>
<body bgcolor="#669999" text="#000000" topmargin="0" leftmargin="0" marginwidth="0" marginheight="0">
<table width="850" border="0" cellspacing="0" cellpadding="0">
<tr>
<td width="40"> </td>
<td valign="top">
<table width="810" border="1" cellspacing="0" cellpadding="0" bordercolor="#33CCFF">
<tr>
<td>
<table width="807" border="0" cellpadding="0" cellspacing="0" bgcolor="#FFFFFF">
<tr>
<td valign="top" height="25" width="797">
<div align="right"><a href="index.htm" target="_parent"><img src="../images/gotop.gif" width="30" height="25" border="0">
</a></div>
</td>
</tr>
<tr>
<td height="10" valign="top"><img src="../images/h_r_line.gif" width="800" height="1" align="top"></td>
</tr>
<tr>
<td valign="top">
<table width="806" border="0" cellspacing="0" cellpadding="8">
<tr>
<td valign="top">
<p><font face="Verdana, Arial, Helvetica, sans-serif"><a name="proxyconfig"></a><font color="#3366CC" size="+1"><b>Browser
Configuration for School Clients</b></font></font></p>
<ul>
<li>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">Browsers
at schools must be configured with PAC files .<br>
</font></p>
</li>
<li>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">Browsers
that cannot use PAC files should not be used.<br>
</font></p>
</li>
<li>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">The
PAC file configuration for each school is: </font></p>
</li>
<blockquote>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2"><b><font color="#993300">http://pac.schools.nsw.edu.au/schools/<school_id>.pac</font></b><font color="#3366CC">
</font>(as from 15/10/1999)</font></p>
</blockquote>
<li>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">Note:
The old URL <font color="#006699">http://proxy.schools.nsw.edu.au/schools/<school_id>.pac</font>
is now <b><font color="#990000">obsolete</font></b>
and should be changed to the new URL.</font><font face="Verdana, Arial, Helvetica, sans-serif" size="3"><br>
</font></p>
</li>
<li> <font face="Verdana, Arial, Helvetica, sans-serif" size="2">The
use of PAC files at schools with local proxies is
also required</font><font face="Verdana, Arial, Helvetica, sans-serif" size="3">.</font></li>
</ul>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2"><img src="../images/h_line.gif" width="750" height="1">
</font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="+2"><b><font size="+1" color="#3366CC"><a name="RAS"></a>RAS
Users</font></b></font></p>
<ul>
<li><font size="2" face="Verdana, Arial, Helvetica, sans-serif">Users
using <b>RAS</b> into school pops should set the proxy
settings for their <b>dial up configuration</b> to
be <br>
<font color="#3366CC"><b>http://pac.det.nsw.edu.au/det/itbproxy.pac</b></font></font><br>
</li>
</ul>
<img src="../images/h_line.gif" width="750" height="1">
<p><font face="Verdana, Arial, Helvetica, sans-serif"><a name="proxyserver"></a><font color="#3366CC" size="+1"><b>Proxy
Servers at Schools</b></font></font><br>
</p>
<ul type="disc">
<li>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">Schools
with local proxy servers are required to set up
the proxy server on this IP address: </font> </p>
</li>
<blockquote>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2" color="#990033"><b><font color="#990000">10.<School
Specific>.<School Specific>.20</font> </b></font>
</p>
</blockquote>
<li>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2" color="#000000">The
proxy must be configured to chain up to <b><font color="#990000">proxyds.schools.nsw.edu.au</font></b>
on port <b><font color="#990000">80</font></b>.
<br>
Set your proxy to answer client request on port
80. </font></p>
</li>
<li>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2" color="#000000">The
proxyds.schools.nsw.edu.au DNS entry should used
in the configuration of your local proxy server.
The use of an IP address is discouraged as the actual
machine(s) that are referenced by this DNS entry
may change without notice due to failures, maintenance
etc. </font></p>
</li>
<li>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2" color="#000000">When
a proxy server is established at school ITB via
the HelpDesk must be contacted so that the PAC files
for the school can be modified to make them local
proxy aware. </font></p>
</li>
<li>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2" color="#000000">Do
not change the proxy setting in your local clients
to point to your proxy server. Leave the PAC file
as is. When you advise the HelpDesk about the addition
of your local proxy the PAC file for your school
will be amended. The modified PAC file will direct
requests to your proxy server. Should you suffer
a failure of your proxy (or even need to maintain
it) the PAC files will use the central proxy servers
automatically.</font><font face="Verdana, Arial, Helvetica, sans-serif" size="2" color="#000000"><br>
</font></p>
</li>
</ul>
<img src="../images/h_line.gif" width="750" height="1">
<p><font face="Verdana, Arial, Helvetica, sans-serif"><a name="proxytypes"></a><font color="#3366CC" size="+2"><b><font size="+1">Types
of School (Local) Proxy Servers</font> </b></font><b><font face="Verdana, Arial, Helvetica, sans-serif" size="+2" color="#3366CC"><br>
</font></b> </font> </p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">To
facilitate the most efficient creation of PAC files
for school browsers the local proxies have been divided
onto the following categories: </font></p>
<ol>
<ol>
<li>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2"><b>All
Requests</b> - All browser requests are sent to
the local proxy server. </font></p>
</li>
<li>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2"><b>Not
Local</b> - All browser requests except for the
local school 10 network to the local proxy. </font></p>
</li>
<li>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2"><b>Internet
Only</b> - Only request destined for Internet
sites are sent to the local proxy. </font></p>
</li>
</ol>
</ol>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2"><br>
The selection of the above categories is at the schools
discretion. Note there are restrictions on choice imposed
by the type of local proxy selected.</font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">The
'All Requests' and 'Not Local' selections can only be
used with a proxy server that allows and has been configured
to send requests to local school web servers and DET
servers directly. That is requests for DET intranet
servers are not passed to the central proxy servers.
</font></p>
<img src="../images/h_line.gif" width="750" height="1">
<p><font face="Verdana, Arial, Helvetica, sans-serif"><a name="squid"></a><font color="#3366CC" size="+1"><b>Configuration
of downstream SQUID proxy server for schools</b></font></font></p>
<p> </p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">The
default configuration of squid proxy as a downstream
proxy server causes it to try to go direct first then
try to use ICP and finally use CERN to communicate to
its parent. The result of this is EXTEMELY slow response
for any external internet sites but excellent response
from internal DET sites as these are accessible directly.<br>
To overcome this problem you need to edit the squid.conf
file in the following way.</font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">Firstly,
find the cache_peer tag and set it as follows: </font></p>
<blockquote>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2" color="#3366CC"><b>cache_peer
proxyds.schools.nsw.edu.au parent 80 3130 no-query
no-digest</b> </font></p>
</blockquote>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">This
will set the correct parent and proxy port and stop
the use of ICP which is not supported in our network.</font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">Secondly,
find the never_direct tag and set it as follows: </font></p>
<blockquote>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2" color="#3366CC"><b>#if
you want to go direct for any domains setup an access
control list like this <br>
acl local-servers dstdomain .tafensw.edu.au .det.nsw.edu.au
.schools.nsw.edu.au<br>
#then specify an acl for everything else<br>
acl all src 0.0.0.0/0.0.0.0</b></font></p>
<p><font size="2" color="#3366CC" face="Verdana, Arial, Helvetica, sans-serif"><b>#this
double negative makes the proxy go direct for the
sites in this acl<br>
never_direct deny local-servers<br>
#this makes everything else go via the parent<br>
never_direct allow all </b></font></p>
</blockquote>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">Now
restart squid and everthing should be working properly.</font></p>
<img src="../images/h_line.gif" width="750" height="1">
<p><a name="ipaddress"></a><font face="Verdana, Arial, Helvetica, sans-serif" color="#3366CC" size="+1"><b>IP
Address Allocation at Schools</b></font><br>
</p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">Each
school has been allocated a single C class address in
the 10 network range.<br>
This address range has been broken up into a number
of section for administrative ease.</font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">These
sections are the same for each school, due to the large
number of schools that need to be dealt with.</font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">The
address ranges are: </font></p>
<blockquote>
<blockquote>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">1
- 10 Reserved by ITB Networks Branch for Communications
Devices.</font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">11
- 30 Reserved for Servers</font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">31
- 254 Client PC's/Mac's</font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">In
the 1 - 10 Communications Range the allocation of
IP's are:</font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">1
- WAN Router</font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">2
- 10 - Reserved for ITB Allocation</font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">In
the 11 - 30 Server Range the allocation of IP's
are suggested:</font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">11
- Free for Schools Use </font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">12
- Free for Schools Use</font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">13
- Free for Schools Use</font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">14
- Free for Schools Use</font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">15
- Free for Schools Use</font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">16
- OASIS Server 1</font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">17
- OASIS Server 2</font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">18
- Reserved for ITB Allocation</font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">19
- Reserved for ITB Allocation</font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">20
- Local Proxy Server</font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">21
- Reserved for Local Mail Server</font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">22
- Reserved for ITB (d) Allocation </font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">23
- Reserved for ITB (d) Allocation</font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">24
- Reserved for ITB Allocation</font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">25
- Free for Schools Use</font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">26
- Free for Schools Use</font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">27
- Free for Schools Use</font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">28
- School Web Server 3</font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">29
- School Web Server 2</font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">30
- School Web Server 1 </font></p>
</blockquote>
</blockquote>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">Where
there is no server used on the address (ie no local
Mail server) this address is reserved and shall not
be used for any other purpose.</font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">Where
a single server is used for more than 1 function is
it should be allocated multiple IP address' and each
service answer on the appropriate address. </font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2"><a href="http://detwww.det.nsw.edu.au/test/">Click
here</a> to test the download speed.</font></p>
<img src="../images/h_line.gif" width="750" height="1">
<p><a name="diagnostics"></a><font face="Verdana, Arial, Helvetica, sans-serif" color="#3366CC" size="+2"><b><font size="+1">Diagnostics
of School Problems<br>
</font> </b> </font> </p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">When
a school implements a proxy server it is important to
allow access from the ITB network to this device on
the following ports:</font></p>
<ul>
<li>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">Port
80 (or the port the proxy is running on) </font></p>
</li>
<li>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">ICMP
(ping type functions) </font></p>
</li>
</ul>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">If
access is not permitted then diagnosis of problems involving
your proxy cannot be done and extended service disruptions
may occur. </font></p>
<p></p>
<img src="../images/h_line.gif" width="750" height="1">
<p><a name="firewalls"></a><font face="Verdana, Arial, Helvetica, sans-serif" color="#3366CC" size="+1"><b>School
Firewalls</b></font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">Where
a school implements a firewall the access as specified
above is still required for the same reason.</font></p>
<img src="../images/h_line.gif" width="750" height="1">
<p><a name="webserver"></a><font face="Verdana, Arial, Helvetica, sans-serif" color="#3366CC" size="+1"><b>Schools
Web Server</b></font></p>
<font face="Verdana, Arial, Helvetica, sans-serif" size="3"><b><font size="2" color="#3366CC">FTP
Access</font></b><font size="2"><br>
Schools may use FTP to upload their web site to the schools
web server by connecting to <b><font color="#990000">ftp.schools.nsw.edu.au</font></b>
with their school user name (ie: ajuga-s)</font></font>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">For
full directions on publishing school web sites go to<br>
<a href="http://detwww.det.nsw.edu.au/webdev/learcent/welcome.htm">http://detwww.det.nsw.edu.au/webdev/learcent/welcome.htm</a></font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2"><br>
<b><font color="#3366CC">Ozemail Web Server</font></b><br>
Schools may upload content to their OzEmail FTP accounts
through two methods: </font></p>
<ol>
<li><font face="Verdana, Arial, Helvetica, sans-serif" size="2">Upload
through the Netscape Browser Publish facility</font><br>
<br>
</li>
<li><font face="Verdana, Arial, Helvetica, sans-serif" size="2">PUT
files to the OzEmail service through any client you
chose through direct FTP </font></li>
</ol>
<p>W<font face="Verdana, Arial, Helvetica, sans-serif" size="2">ith
the direct FTP service you may perform most standard
FTP functions with the exception of GETing files from
the site.</font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2"><b>Please
note that this direct Client FTP service is only available
to the OzEmail ftp server.</b><br>
</font></p>
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td height="100" valign="top">
<div align="center"><img src="../images/h_line.gif" width="750" height="1">
</div>
<div align="center"><font face="Arial, Helvetica, sans-serif" size="1" color="#3366CC"><a href="../index.htm">Home</a>
| <a href="index.htm">Services</a> | <a href="../schools/index.htm">Schools</a>
| <a href="../documents/index.htm">Documentation</a> | <a href="../contact/index.htm">Contact
Us</a></font> </div>
<div align="center"><font face="Arial, Helvetica, sans-serif" size="1" color="#3366CC">Last
Updated:
<!-- #BeginDate format:Sw1 -->6 February, 2002<!-- #EndDate -->
</font></div>
</td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
</table>
</body>
</html>