proxy server question

Our department sets up new computers for clients. We open the box,
install software, apply updates, update virus software, etc. Our
department lan uses a proxy server, which is off-limits to us, so we
are not allowed to change it at all. Our problem is that we much
manually enter the proxy into each XP machine, and sometimes we forget
to take it out. Many of these computers are going to other networks,
or homes, and we are taking a lot of calls from angry clients about
removing the proxy.

Is there a way to put a windows 2000 server machine or a linux machine
between our switch and the lan connecton that will allow us to skip
the step of entering the proxy url? To put it another way, can we
make the proxy server transparent? I've heard of transparent
proxying, but as I understand it is a different thing. Any help would
be appreciated.
-Jeff

Jeff <(E-Mail Removed)> wrote:
> Is there a way to put a windows 2000 server machine or a linux machine
> between our switch and the lan connecton that will allow us to skip
> the step of entering the proxy url?

Presumably these boxes get their IP address using DHCP. (If not, why
not?) Take a look at wpad (DHCP option 252) as a means of specifying
the proxy as part of "automatic configuration".

> To put it another way, can we
> make the proxy server transparent? I've heard of transparent
> proxying, but as I understand it is a different thing.

Nope, they're the same thing.

You can do this if you prefer. Take a look at squid (caching proxy)
and its associated FAQ, which gives examples of how to implement
transparent proxying using iptables.

Chris