Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Our company has a website that is hosted online and can be access only through proxy. However, there are many web application servers which have the same domain suffix but are internal and needs to be bypassed to access them. For example, suppose our website address is -

and the internal web application servers might be

So, we have to manually add them all to the bypass rule. If we instead use * to bypass them all, then users can't access So, how can the bypass rule be set so that it works for all except when the domain starts with www.

share|improve this question
Is this a change you are looking to make on the client machines (for example in IE Internet Settings), or on the proxy side? If it is client side, what browser? If it is server side, what proxy? – Kirk Feb 7 '14 at 13:51
it's client side, internet explorer. – th1rdey3 Feb 7 '14 at 13:53
Been a long time since I've looked at IE proxy settings. Any chance that split horizon DNS is the better way to handle this? – Kirk Feb 7 '14 at 13:56
Nope, split horizon DNS is not a viable option right now. – th1rdey3 Feb 7 '14 at 14:01

Looks like you will probably need to use a PAC file for defining client behavior. You can find some decent documentation about it at, with a basic example. The nice part about using a PAC file is that you can update the rules without having to wait for a GPO to push out changes. The downside is that IE by default will attempt a direct connection is the PAC file isn't available, IIRC.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .