Proxy Services Prerequisites

Before you set up Proxy Services, ensure that you have the following information at hand:

• IP addresses of your server's IP interfaces, and which are considered private or public access
• Port number (8080 by default) and the hostname or IP address of the Novell BorderManager 3.7 proxy server

To prepare the proxy server for Internet access, verify that the following prerequisites have been met:

• DNS Resolver setup has been performed to provide a valid domain name for the DNS and an IP address of at least one DNS name server to resolve IP hostnames. This should have been done by you during the Novell BorderManager 3.7 product installation. If the DNS Resolver has not been set up, refer to Novell IP Gateway Prerequisites.
• Packet filtering has been set up to allow DNS query and response packets.

  Default installation sets packet filtering to block all incoming and outgoing traffic. To modify the packet filtering setup, refer to Setting Up Packet Filters.

• Corporate users who will use Proxy Services to access Internet Web sites have set up their Web browsers to use the Novell BorderManager 3.7 proxy server, as described in the following sections:
  • Proxy Services Prerequisites

  You can also use the Novell BorderManager 3.7 HTTP Transparent proxy feature to set up background, automatic proxy services. With HTTP Transparent proxy, users are not required to configure their browsers to use a proxy; it is done invisibly for them. For more information about using HTTP Transparent proxy, refer to Setting Up HTTP Transparent Proxy.

• The Novell IP Gateway client software should be set up on each Windows* client that will need to access Internet services and destinations through the Novell IP Gateway. For more information, refer to Setting Up the Novell IP Gateway.
• Novell Public Key Infrastructure (PKI) Services and Secure Authentication Service (SAS) should be installed on the server to support Secure Sockets Layer (SSL) authentication of SOCKS 5 clients.

  PKI and SAS are installed automatically during Novell BorderManager 3.7 installation if the services have not been previously installed.

  After SAS and PKI are installed, you must use the PKI snap-in to NetWare Administrator to perform following SSL-related administrative task:

  • Importing certificates signed by an external Certificate Authority (CA)
  • Creating and managing Key Material Objects (KMOs) used to store key pairs in NDS^® or Novell eDirectory^TM
  • Creating an NDS or eDirectory tree CA to sign certificates used on a private network

  Refer to the Novell PKI online help in NetWare Administrator for the procedures to create and manage NDS or eDirectory tree CAs and KMOs.

Setting Up the DNS Resolver

To set up the DNS Resolver, complete the following steps at the server console:

1. Enter LOAD NIASCFG, then select Configure NIAS > Protocols and Routing > Protocols > TCP/IP > DNS Resolver Configuration.

2. Enter the DNS domain name for your corporation or organization.

   Your Internet Service Provider (ISP) typically supplies this name. Domain names usually take the form company_name.com or organization.org, for example, novell.com or acme.org.

3. Enter the IP addresses of up to three DNS name servers in the Name Server fields.

   ISPs often provide access to multiple DNS name servers.

4. Press Esc to select Yes to update the TCP/IP configuration.

5. Press Esc until you return to the Internetworking Configuration menu, then select Reinitialize System and exit NIASCFG.

Setting Up Microsoft Internet Explorer to Use a Web Proxy

To specify the Novell BorderManager 3.7 proxy server on a Microsoft* Internet Explorer Web browser:

1. Launch Internet Explorer, then select one of the following menu paths, based on the software version.

   • For Internet Explorer 5.5, select Tools > Internet Options > Connections > LAN Settings > Use a Proxy Server

2. Enter the port number (8080 by default) and hostname---or IP address---of the Novell BorderManager 3.7 proxy server in the proxy field.

3. Click Apply.

To use the advanced option where you can set the same proxy for all applications:

1. Launch Internet Explorer, then select one of the following menu paths, based on the software version.

   • For Internet Explorer 5.5, select Tools > Internet Options > Connections > LAN Settings > Use a Proxy Server > click Advanced > check the check box Use the Same Proxy for All Protocols.

2. Enter the port number (8080 by default) and hostname---or IP address---of the Novell BorderManager 3.7 proxy server in the proxy field.

3. Click Apply.

Setting Up Netscape Navigator to Use a Web Proxy

To specify the Novell BorderManager 3.7 proxy server on a Netscape Navigator* 3.x Web browser, complete the following steps:

1. Launch Netscape Navigator, then select Options > Network Preferences > Proxies > Manual Proxy Configuration.

2. Click View.

3. Enter the hostname---or IP address---and port number (8080) of the Novell BorderManager 3.7 proxy server in the proxy field.

4. Click OK.

To specify the Novell BorderManager 3.7 proxy server on a Netscape Navigator 4.x Web browser, complete the following steps:

1. Launch Netscape Navigator, then select Edit > Preferences > Advanced > Proxies > Manual Proxy Configuration > View.

2. Enter the URL of the Novell BorderManager 3.7 proxy server in the URL field.

3. Click OK.