Configure Cntlm to use no proxy if none are available

Question

I am behind a corporate firewall in the day, and on an open internet connection at night. I have configured cntlm to forward to my corporate proxy, but when I connect from an open connection, I must re-configure my proxy settings.

Is there a way to make cntlm fallback to using no proxy when there is none available?

# List of parent proxies to use. More proxies can be defined
# one per line in format <proxy_ip>:<proxy_port>
#
Proxy       10.73.55.44:80
# <~~ something here to fallback to a direct connection when no proxy is available

score 3 · Answer 1 · answered Dec 22 '13 at 18:12

3

cntlm has this on it's roadmap, but I think I solved this problem in a simple way using squid: 1. Install squid on the same machine as cntlm, on port 3129 (just change 3128 to 3129 in squid.conf) 2. Add "Proxy localhost:3129" to the cntlm proxy list

That's it.

Hope this helps.

answered Dec 22 '13 at 18:12

ferdez

41
4

This works flawlessly. – Kshitiz Sharma Jan 08 '16 at 18:45
Where is this on the roadmap? Or is it implemented by now? – Highmastdon Oct 28 '18 at 19:33

score 1 · Answer 2 · edited Oct 01 '13 at 11:49

This solution rewrites the relevant part of the cntlm.conf based on your current IP address: http://mirkoweber.blogspot.hu/2011/10/using-cntlm-in-changing-environment.html

#!/bin/sh
case "$2" in
    up|vpn-up)
          IP=`/sbin/ifconfig  | grep 'inet addr:'| grep -v '127.0.0.1' | cut -d: -f2 | awk '{ print $1}'`
          case $IP in
             172.*)
                logger "setNoProxy.sh -set NoProxy for enterprise net"
                NoProxy="NoProxy         localhost, 127.0.0.*, 10.*, 192.168.*,enterprise-intranet"
                ;;
               *)
                logger "setNoProxy.sh - set NoProxy for direct net"
                NoProxy="NoProxy *"
                ;;
            esac
         sudo sed "s/^NoProxy.*$/$NoProxy/g" -i /etc/cntlm.conf
         sudo service cntlm restart
         ;;
esac

Please edit your answer to describe or at least summarize the solution here. External pages can disappear at any time, and we prefer not to rely on them. — 200_success, Oct 01 '13 at 07:50

Configure Cntlm to use no proxy if none are available

2 Answers2