WWW proxy server timeout on some websites...

[imasterxx]

I have Wingate 5.2 installed and have set up a WWW proxy server. My problem is I'm not able to log in to some websites. Examples include hotmail.com and ebay.com (when I try to sign in only). I'm able to get to the main page of hotmail and ebay - the problem is when I try logging in. Explorer/Firefox begin receiving information from the webpage and then it hangs about 70% of the way. I'm pretty sure it has something to do with authentication but I'm not sure how to fix the problem. Any help is appreciated.

[Pascal]

Is this on the setup where you are tunneling everything through port 21? (Office to Home as per http://forums.qbik.com/viewtopic.php?p= ... ght=#12338) or is a new setup?

Do you have authentication setup at all? (Any policies for the WWW Proxy OR for the System Policies)

[imasterxx]

It is the same setup but I'm not using VPN. I'm just using the WWW proxy server b/c my company runs Novell and installing a VPN connection might screw with the Novell login/mapped drives I have.

I must be doing something right and wrong b/c I'm able to browse normal websites - just not able to log into them b/c of the timeout error. I think I have the bindings/policies set up correctly b/c I'm able to browse around.

I do get a message regarding the Java authentication checkbox. It says I must ensure atlease 1 binding for the remote control service. I looked in the bindings tab and see 2 adapters. I'm not sure what the remote control service is exactly.

[Pascal]

The remote control service controls GateKeeper login. It is used to authenticate for the Java Client as well.

[Pascal]

I think you'll find that there is a port 443 component as well to those sites. When I logged into hotmail (With a packet capture running) I could see it doing something on port 443 as well.

Double check the HTTPS page on your WWW Proxy to ensure that it is setup correctly.

You might need to tweak your browser config as well.

[imasterxx]

I have 2 ports that are open at work and one of them is used for VNC, leaving me with 1 for internet browsing.

When I set up the proxy server, I made it so all ports could connect - not just 80. Maybe I set something up wrong when I configured it. I made sure to allow any port to be bound to the www proxy server. Is there anything else I'm missing?

[Pascal]

Would it be possible for you to export the WWW Proxy Service configuration for me, please?

[imasterxx]

Where do I go to export the configuration? I looked in all the tabs but didn't see an export feature.

[Pascal]

GateKeeper -> Options -> Advanced

There is a button to export the entire configuration. (Usually, that is ideal, as it allows us to see if anything else is set that might affect the situation). Alternatively, if you are comfortable using the registry you can export

HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\WWW Proxy server

for the WWW PRoxy Server OR

HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate

for the entire configuration using your standard registry editor. Note, before using any registry editor make sure you have a backup / system restore point set, etc.

[imasterxx]

I dont have a registry reader on my computer, but I was able to export that proxy service to a .reg file. I zipped the registry file and uploaded it here:
www.geocities.com/xmasterxx/export.zip
It's about 7kb.

Is that what you're looking for?

[Pascal]

Will check it now. In future though, you can just email it to me. (I've got the file now, in-case you want to remove it from the web)

[Pascal]

Okay. What you want to do is go to the HTTPs page and allow port 443 as well. (Not only 80 and 25). Either that or tick the "Any port may be used" option.

[imasterxx]

I checked the tab you're referring to and the checkbox for 'allow all connections' was checked. But I added port 443 anyway just to be sure.
I also saw another WWW proxy server running under port 443 and I disabled it because it might be conflicting with the proxy server I'm using.
Unfortunately, when I test it out, it still doesn't work.

[Pascal]

About the last thing I can suggest would be to try and get a traffic capture for yourself using something like ComView or so and to see if you can pick up from that where the point of failure is. Or to revert it back to a standard setup (As closely as possible) and to try eliminating bit by bit.

Your setup is fairly unique in that it uses port 25 as it's main proxy port, is tunneling out of a corporate environment and into a home gateway who then provides internet access. (Is that a correct summation of it?)

One possibility is that there is a problem on the version of WinGate you are using. For example:

5.2.2
3. Fixed the WWW proxy where downloads would occasionally be broken if scanning was disabled.

6.0
6. A major overhaul has been undertaken on the WWW Proxy. New features include:
- HTTP authentication by NTLM or HTTP Basic methods for proxy connections, TR intercepted connections, and server requests.
- Support for HTTP/1.1 including keep-alives and chunking (this results in a great improvement in performance) for proxy and server.
- Improved Support for server-parsed CGI (e.g. PHP) in readiness for our Webmail product.

With that in mind, you can use your 5.2 license key with 6.0. There is no upgrade required - you simply activate your earlier version's license key. It might pay to try that at some stage, to see if it could fix this problem for you.

If anything else springs to mind, I'll post back here.