How to get the wpad return proxy?

[Jose]

I have a wpad script in Internet Option (Windows 7) that returns DIRECT for local IPs and addresses and returns one of two different proxy address depending on the destination.

This is my wpad.dat:

function FindProxyForURL(url, host) {

var direct = "DIRECT";
var proxy1 = "PROXY pfsense:3128";
var proxy2 = "PROXY e2guardian:8080";

if (isPlainHostName(host) ||
    shExpMatch(host, "*.local") ||    
    isInNet(dnsResolve(host), "192.168.1.0",  "255.255.255.0") ||
    isInNet(dnsResolve(host), "192.168.0.0",  "255.255.255.0") ||    
    isInNet(dnsResolve(host), "127.0.0.0", "255.255.255.0") ||
    isInNet(dnsResolve(host), "184.168.27.41", "255.255.255.0"))
    return direct;

if (dnsDomainIs(host, "logmeinrescue.com") || dnsDomainIs(host, "logmeinrescue-enterprise.com"))
    return proxy1;

if (dnsDomainIs(host, "microsoft.com") || dnsDomainIs(host, "windowsupdate.com"))
    return proxy1;

return proxy2;

}

I need to find which value it returns during each session/connection.  How do I do that with Fiddler 4?

I suspect that Windows is doing some caching or the application (Logmein Rescue) requesting access is using a unknown address.

 

Just for information:  e2guardian proxy is a content filtering server with SSL MITM protocol, which is not compatible with Logmein. pfsense proxy is a regular squid server.  When I set the proxy static to pfsense the application works correctly while using e2guardian fails.  So something during the application session is going to the wrong proxy. 

[Tsviatko Yovtchev]

Hi,

Rather unfortunately, Fiddler does not expose this information at present.

Caching of returned proxies does take place, though. You might want to look at https://support.microsoft.com/en-nz/help/271361/how-to-disable-automatic-proxy-caching-in-internet-explorer for more inf on disabling that.

Regards,
Tsviatko Yovtchev
Telerik by Progress