Novell Documentation: Novell BorderManager 3.8 - Proxy Services Prerequisites

Proxy Services Prerequisites

Before you set up Proxy Services, ensure that you have the following information at hand:

The IP addresses of your server's IP interfaces, and which ones are considered private or public access
The port number (8080 by default) and the hostname or IP address of the Novell BorderManager 3.8 proxy server

To prepare the proxy server for Internet access, verify that the following prerequisites have been met:

DNS Resolver setup has been performed to provide a valid domain name for the DNS and an IP address of at least one DNS name server to resolve IP hostnames. You should have done this during the Novell BorderManager 3.8 product installation.
Packet filtering has been set up to allow DNS query and response packets.
The default installation sets packet filtering to block all incoming and outgoing traffic.

To modify the packet filtering setup, refer to Setting Up Packet Filters.
Corporate users who will use Proxy Services to access Internet Web sites have set up their Web browsers to use the Novell BorderManager 3.8 proxy server, as described in the following sections:
Proxy Services Prerequisites

You can also use the Novell BorderManager 3.8 HTTP Transparent proxy feature to set up background, automatic proxy services. With HTTP Transparent proxy, users are not required to configure their browsers to use a proxy; it is done invisibly for them.

For more information about using HTTP Transparent proxy, refer to Setting Up HTTP Transparent Proxy.
Novell Public Key Infrastructure (PKI) Services and Secure Authentication Service (SAS) should be installed on the server to support Secure Sockets Layer (SSL) authentication of SOCKS 5 clients.
PKI and SAS are installed automatically during Novell BorderManager 3.8 installation if the services have not been previously installed.

After SAS and PKI are installed, you must use the PKI snap-in to NetWare^® Administrator to perform following SSL-related administrative tasks:
- Importing certificates signed by an external Certificate Authority (CA)
- Creating and managing Key Material Objects (KMOs) used to store key pairs in NDS^® or Novell eDirectory^TM
- Creating an NDS or eDirectory tree CA to sign certificates used on a private network
Refer to the Novell PKI online help in NetWare Administrator for the procedures to create and manage NDS or eDirectory tree CAs and KMOs.

Setting Up the DNS Resolver

To set up the DNS Resolver, complete the following steps at the server console:

Enter LOAD INETCFG, then select Configure NIAS > Protocols and Routing > Protocols > TCP/IP and DNS Resolver Configuration.
Specify the DNS domain name for your corporation or organization.

Your Internet Service Provider (ISP) typically supplies this name. Domain names usually take the form company_name.com or organization.org, for example, novell.com or acme.org.
Specify the IP addresses of up to three DNS name servers in the Name Server fields.

ISPs often provide access to multiple DNS name servers.
Press Esc to select Yes to update the TCP/IP configuration.
Press Esc until you return to the Internetworking Configuration menu, then select Reinitialize System and exit INETCFG.

Setting Up Microsoft Internet Explorer to Use a Web Proxy

To specify the Novell BorderManager 3.8 proxy server on a Microsoft* Internet Explorer Web browser:

Launch Internet Explorer, then select the following menu paths, based on the software version.
- For Internet Explorer 5.5, select Tools > Internet Options > Connections > LAN Settings > Use a Proxy Server
Specify the port number (8080 by default) and hostname or IP address of the Novell BorderManager 3.8 proxy server in the proxy field.
Click Apply.

To use the advanced option where you can set the same proxy for all applications:

Launch Internet Explorer, then select the following menu paths, based on the software version.
- For Internet Explorer 5.5, select Tools > Internet Options > Connections > LAN Settings > Use a Proxy Server > click Advanced > select the check box Use the Same Proxy for All Protocols.
Specify the port number (8080 by default) and hostname or IP address of the Novell BorderManager 3.8 proxy server in the proxy field.
Click Apply.

Setting Up Netscape Navigator to Use a Web Proxy

To specify the Novell BorderManager 3.8 proxy server on a Netscape Navigator* 3.x Web browser:

Launch Netscape Navigator, then select Options > Network Preferences > Proxies > Manual Proxy Configuration.
Click View.
Specify the port number (8080 by default) and hostname or IP address of the Novell BorderManager 3.8 proxy server in the proxy field.
Click OK.

To specify the Novell BorderManager 3.8 proxy server on a Netscape Navigator 4.x Web browser:

Launch Netscape Navigator, then select Edit > Preferences > Advanced > Proxies > Manual Proxy Configuration > View.
Specify the URL of the Novell BorderManager 3.8 proxy server in the URL field.
Click OK.