如何在不配置浏览器的情况下构建本地 Web 代理
Netnanny 或 k9 Web Protection 如何在不配置浏览器的情况下设置 Web 代理？ 怎么办呢？
How does Netnanny or k9 Web Protection setup web proxy without configuring the browsers?
How can it be done?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（7）
直接使用 WinSock，或在 NDIS 或硬件驱动程序级别使用，以及
然后在这些级别进行过滤，就像任何防火墙软件一样。 NDIS 是最简单的方法。
下载此 ISO 映像： http://www .microsoft.com/downloads/en/confirmation.aspx?displaylang=en&FamilyID=36a2630f-5d56-43b5-b996-7633f2ec14ff
它有很多示例和工具来帮助您构建您想要的东西。
将其安装或刻录到 CD 上并安装后，请转到此文件夹：
c:\WinDDK\7600.16385.1\src\network\ndis\Using WinSock directly, or at the NDIS or hardware driver level, and
then filter at those levels, just like any firewalls soft does. NDIS being the easy way.
Download this ISO image: http://www.microsoft.com/downloads/en/confirmation.aspx?displaylang=en&FamilyID=36a2630f-5d56-43b5-b996-7633f2ec14ff
it has bunch of samples and tools to help you build what you want.
After you mount or burn it on CD and install it go to this folder:
c:\WinDDK\7600.16385.1\src\network\ndis\我认为你需要的是一个支持WCCP的透明代理。
查看 squid-cache 常见问题页面
以及 WCCP
通过该设置，您只需进行一些防火墙配置，所有 Web 流量都将由透明代理处理。并且无需在浏览器上进行任何设置。
I think what you need is a transparent proxy that support WCCP.
Take a look at squid-cache FAQ page
And the Wikipedia entry for WCCP
With that setup you just need to do some firewall configuration and all your web traffic will be handled by the transparent proxy. And no setup will be needed on your browser.
netnanny 不是代理。它与主机和浏览器（也可能还有其他应用程序）绑定。然后，它过滤来自机器/应用程序的所有传入和传出“内容”。
本质上，Netnanny 是一个内容控制系统，而不是目标控制系统（代理） 。
将所有流量转移到某个站点到其他地址的最简单方法是更改本地主机上的主机文件
netnanny is not a proxy. It is tied to the host machine and browser (and possibly other applications as well. It then filters all incoming and outgoing "content" from the machine/application.
Essentially Netnanny is a content-control system as against destination-control system (proxy).
Easiest way to divert all traffic to a certain site to some other address is by changing hosts file on local host
您可能想看看这里的解释： http://www.fiddlertool.com /fiddler/help/hookup.asp
这就是 Fiddler2 如何在大多数应用程序和互联网之间插入代理而无需修改应用程序（尽管有很多关于如何使默认设置失败的解释）。这并没有回答 NetNanny/K9 等如何工作的问题，如上所述，它们做得更多一些，并且可能更具侵入性。
You might want to have a look at the explanation here: http://www.fiddlertool.com/fiddler/help/hookup.asp
This is how Fiddler2 achieves inserting a proxy in between most apps and the internet without modifying the apps (although lots of explanation of how-to failing the default setup). This does not answer how NetNanny/K9 etc work though, as noted above they do a little more and may be a little more intrusive.
我相信您搜索 BrowserHelperObjects。这些小玩意儿捕获所有浏览器通信，因此可以从 HTML 远程广告（好的小玩意儿），或者将每秒的点击重定向到垃圾邮件网站（坏的小玩意儿），或者只捕获您输入的每个 URL 并将其发送回家WebToolBar 可以。
I believe you search for BrowserHelperObjects. These little gizmos capture ALL browser communication, and as such can either remote ads from the HTML (good gizmo), or redirect every second click to a spam site (bad gizmo), or just capture every URL you type and send it home like all the WebToolBars do.
您想要做的是通过反向代理（例如 squid）。这是透明网络代理的设置。
有不同的方法可以做到这一点，尽管我只在 OpenBSD 和 Linux 上设置过；并使用 Squid 作为反向代理。
在较高级别上，您有一个防火墙，其中包含将所有外部绑定的 http 流量发送到本地鱿鱼服务器的规则。 Squid 服务器配置为：
然后您可以在 Squid 中添加更细化的规则控制对网站的访问、过滤内容等。
我很确定您也可以在不同的网络设备中获得此功能。我打赌 F5 的某些产品可以实现我所描述的部分或全部功能，思科也可能如此。除了 Squid 之外，您还可以使用其他代理。
附言。我不知道这是否是 K9 Web Protection 或 NetNanny 的工作原理。
What you want to do is route all outgoing http(s) requests from your lan through a reverse proxy (like squid). This is the setup for a transparent web proxy.
There are different ways to do this, although I've only ever set it up OpenBSD and Linux; and using Squid as the reverse proxy.
At a high level you have a firewall with rules to send all externally bound http traffic to a local squid server. The Squid server is configured to:
You can then add more granular rules in Squid to control access to websites, filter content, etc.
I pretty sure you can also get this functionality in different networking gear. I bet F5 has some products that do some or all of what I described, and probably Cisco as well. There is probably other proxies out there besides Squid that you can use too.
PS. I have no idea if this is how K9 Web Protection or NetNanny works.
Squid 可以为 HTTP 和 HTTPs 端口提供拦截代理，无需配置浏览器，并且它还支持 WCCP。
Squid could provide an intercept proxy for HTTP and HTTPs ports, without configuring the browsers and it also supports WCCP.