标签：mic file 通过 tools 端口 creat 文件 security diff
(WPAD)Web Proxy Auto Discovery Protocol
基本概念:
Web Proxy Auto-Discovery (WPAD)
Proxy Auto-Config (PAC)
WPAD protocol is a method used by Web browsers to locate a Proxy Auto-Config (PAC) file automatically
协议的目的之 自动定位PAC文件
WPAD部署方法:
1.自动获取WPAD文件 DHCP/DNS
WPAD can use DNS or DHCP to locate a PAC file. DHCP detection involves the URL being pushed to the end-user in the DHCP assignment, while DNS detection is based on an educated guess using known information about the DNS system.
1.DHCP 服务器部署 WPAD方法
在 DHCP 服务器中添加一个用于查找 WPAD 主机的 252 项，252 项是一个字符串值，内容是部署在 WPAD 主机上 PAC 文件的 URL。因此 DHCP 客户机便可获得 PAC 文件的 URL，当客户机需要对浏览器或防火墙客户端进行自动配置时，就可以下载该 PAC 文件并得到代理服务器的地址.
Create an Option 252 Entry in DHCP
To automatically configure proxy settings:
Step 1 Open the DHCP control panel.
Step 2 In the console tree, right-click DHCP server, click Set Predefined Options, then click Add.
Step 3 In the Name box enter WPAD.
Step 4 In the Data type box enter String.
Step 5 Clear the Array check box.
Step 6 In the Code box enter 252.
Step 7 In the Description box enter http://<url>:<port>/wpad.dat, then click OK.
To confirm Option 252 is selected, right-click Server Options then click Configure Options.
Enable Option 252 for a DHCP Scope
To configure Option 252 for a DCHP scope:
Step 1 Open the DHCP control panel.
Step 2 Right-click Scope Options, click Configure Options, then click Advanced.
Step 3 In Vendor Class, click Standard Options.
Step 4 In Available Options, click 252 Proxy Autodiscovery, then click OK.
2.用 DNS 来实现 WPAD
WPAD 工作原理是客户机向 DNS 服务器发起 WPAD＋X 的查询。DNS 返回提供 WPAD 主机 IP 地址，客户机通过该 IP 的 80 端口去 WPAD 主机下载 WPAD.DAT（浏览器配置用文件）和 WSPAD.DAT（防火墙配置用文件）两个文件以实现自动配置。
The DNS method differs in that it guesses the location of a PAC file. On Windows, this is based on the domain the machine is joined to, while on Linux and Mac OS X this is based on the Search Domain(s) configured in the network settings.
When attempting the WPAD DNS method, the browser will prefix the domain with wpad and attempt to download the file wpad.dat, for example wpad.domain.com/wpad.dat.
In the following example, a Windows machine is joined to the domain uk.scansafe.com, and a PAC file with the file name wpad.dat is hosted on wpad.scansafe.com:
2.手动获取WPAD文件
Configuring Internet Explorer to Use a PAC File
In Internet Explorer, click on Tools > Internet Options > Connections > LAN Settings.
Select Use automatic configuration script.
Type the path and filename of your PAC file.
Example: http://your Barracuda Web Security Service Connector/proxy.pac
Click OK twice.
如果已经下载的WPAD文件 在没有DHCP再次通告option 252的情况下，会使用已有的WPAD文件吗?
Web Proxy Auto Discovery Protocol
Proxy Auto-Config Files
Insight WPAD proxy settings on IE
Automatically detect settings
To Enble ‘Automatically Detect Settings‘
REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v AutoDetect /t REG_DWORD /d 1 /f
To Disable ‘Automatically Detect Settings‘
REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v AutoDetect /t REG_DWORD /d 0 /f
WPAD
标签：mic file 通过 tools 端口 creat 文件 security diff
原文地址：http://www.cnblogs.com/zhaoyong631/p/7222896.html
