my config wingate with 2 adsl modem for cybercoffe

[luisnina]

hello, first excuse me for my really lousy English. but I'd like to share some of what I did
This is my config which i did for a cybercofe with wingate 6.6.4.1338

1.- all client machines using tcp/ip config as:
IP addres: 192.168.0.2-254
subnet: 255.255.255.0
gateway: 192.168.0.1
dns: 192.168.0.1
alt DNS: n/a
No aditional settings to broswers,

2.- wingate machine hardware specs
celeron 1.80Ghz - Ram 1Gb- hdd 160gb sata seagate - MB asrock g31
network adapters: onboard Realteck RTL8102e (facing LAN, tcp config see atach LAN)
Dlink DFE-520TX (facing internet on adsl modem1 )
realtek RTL8139 (facing internet on adsl modem2 )
2.1 O.S. windows xp Unatended Edition 7, clean install, no aditional software, no antivirus,
tcp half open conections set default 5000
firewall services disabled (no ALG.EXE in the background)
Windows Performace options set up to "background services" and "system cache" see attatch system performance.jpg

3.- wingate install deafult settings (clicking next, next)
network conections properly indetified internals and externals
wwwproxy Config:
service port 80 -
- binding: any ip on internal adapter
- Gateways: set for in rotation
- Sessions: timeout after 60 seconds and intercept port 80
- the rest leave as deafault
first TCP Mapping for MSN messenger on port 1863 as this guide here for avoid msn disconnect an reconect
second Tcp Mapping for port 443, so this request go for gateway rotation
also i deleted other wingate services see atach "wingate_services.jpg"

Attachments

final look of wingate working

wingate_services.JPG (92.8 KiB) Viewed 25653 times

system performance setup

system_performance.JPG (100.06 KiB) Viewed 25653 times

lan facing network card

lan_tcp_config.JPG (95.76 KiB) Viewed 25653 times

[MattP]

Hi,

Thanks for posting your setup, do you need any assistance or is everything working properly?

[luisnina]

hello, thanks for asking, and actually in the firewall tab, I see many "checksum failures", should I be worried?, please, you could see the attachment.

Attachments

cheksum failures

cheksum failure.JPG (172.27 KiB) Viewed 25607 times

[adrien]

Hi

checksum failures aren't that uncommon, so unless you get a lot of these, associated with connections being dropped or performance that is a lot worse than you expect, I wouldn't worry about them.

Regards

Adrien

[luisnina]

Hi, recently made a fresh install of "wingate7" using the same settings as above, but now I look frequently "socket errors" on the activity panel, and on the client browser, could you please see the attach file

Attachments

client browser

Dibujo2.JPG (100.55 KiB) Viewed 25551 times

activity panel

Dibujo.JPG (157.56 KiB) Viewed 25551 times

[adrien]

Hi

is 192.168.2.2 your WinGate external IP, or internal?

Do you have some setting or policy that is causing WinGate to bind to that interface before connecting? That includes

* Gateway settings
* certain types of policy script that assign to Session.Gateway

Regards

Adrien

[luisnina]

adrien hello, thanks for quick reply, 192.168.2.2 is the ip of the second network card, which is connected to the second modem.
on the question if I have a "setting", I have two "Tcp mappings" on port 443 and port 1863 for "gateway rotation", as this in this post viewtopic.php?f=12&t=39409

[adrien]

Hi

that failed web session is using just HTTP, so on port 80. Do you have gateway settings in the WWW proxy?

Do your settings work ok for port 443 and 1863?

I'm just wondering if the gateway selection is working - it doesn't work if you have windows firewall / alg.exe running since that changes port numbers for outbound connections so our ENS driver can't tell which connection should go through which gateway.

Regards

Adrien

[luisnina]

hi, adrien, thanks for replying, and "socket errors" are happening more frequently

Do you have gateway settings in the WWW proxy?

only the rotation of "gateways", as you can see in the attachment

it doesn't work if you have windows firewall / alg.exe

I disable the "firewall" from "services.msc, then the process is not activated" alg.exe "Besides, I restart the machine to be sure.

Do your settings work ok for port 443 and 1863?

yes, for example if the page is https://www.facebook.com, this page loads fine, but if it is simply http, this page will not load occasionally

and, being an xp unattended, the limit for connections "tcp" is set to 5000

Attachments

wwwproxy.JPG (136.69 KiB) Viewed 25543 times

[adrien]

did you check your OS event log for system events from TCP/IP?

There's a limit of half-open connections with XP of 10 (hard-coded into TCPIP.sys) from XP SP2 onwards. There's a patch for it, but not supported by MS.

If you have more than 10 connections in process of being set up (in the 3-way handshake) then new connections are blocked by the OS.

This can happen a lot for a proxy.

[luisnina]

Adrian, thanks for all the help, I attach a file where the events are, but I can not see what could be the tcp error with respect to the half-open connections limit, I'm sure this set in 5000.

Attachments

system log

system_log.JPG (227.22 KiB) Viewed 25536 times