How to restrict a service to use specified connection?

Oct 21 05 5:22 am

Hello,

I'm using WinGate 6.0.4 (1025). I have 2 Internet connections: adsl and dial-up modem. I have WWW Proxy Service and I want it use only dial-up modem connection, not both. What I did:

I set in Gateway tab for my service "Connection Sheme" to "Use specified connections in priority order (failover)" and added my modem connection (Gateways: Any gateway, Source IP Address: Any IP address). So, there is only this modem connection in the list.

The problem is that my service uses ADSL connection when server isn't connected to ISP through dial-up modem connection. But I want my service to not work when modem isn't connected.

The route table when modem connection is down.

Code:: C:\>route print =========================================================================== Interface List 0x1 ........................... MS TCP Loopback interface 0x2 ...00 e0 4d 02 20 99 ...... Compex RE100TX PCI Fast Ethernet Adapter 0x3 ...00 c1 28 00 96 d1 ...... Compex RE100TX PCI Fast Ethernet Adapter 0x4 ...00 00 00 00 00 00 ...... NdisWan Adapter 0x5 ...00 00 00 00 00 00 ...... NdisWan Adapter =========================================================================== =========================================================================== Active Routes: Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.2 1 127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1 192.168.0.0 255.255.255.0 192.168.0.1 192.168.0.1 1 192.168.0.1 255.255.255.255 127.0.0.1 127.0.0.1 1 192.168.1.0 255.255.255.0 192.168.1.2 192.168.1.2 1 192.168.1.2 255.255.255.255 127.0.0.1 127.0.0.1 1 192.168.1.255 255.255.255.255 192.168.1.2 192.168.1.2 1 224.0.0.0 224.0.0.0 192.168.0.1 192.168.0.1 1 224.0.0.0 224.0.0.0 192.168.1.2 192.168.1.2 1 255.255.255.255 255.255.255.255 192.168.1.2 192.168.1.2 1 ===========================================================================

Notes:
192.168.1.2 - is my ADSL router.
When I connect through dial-up modem ISP give me dynamic IP address.

P.S.

I've read some posts:
http://forums.qbik.com/viewtopic.php?t=1732
http://forums.qbik.com/viewtopic.php?t=2425

Oct 21 05 10:34 am

OK, couple more things to check.

1. that the gateway policy for that modem is configured to "dial this connection if it is not connected"

2. that in the dialer settings in GateKeeper, this dialer profile is enabled to be used by WinGate, and has the correct username and password set.

I'm not sure if WinGate will block connections though if the desired modem connection is not available - I think it tries anyway. We found most people just want to be able to connect.

Adrien

Oct 21 05 6:43 pm

1. that the gateway policy for that modem is configured to "dial this connection if it is not connected"

Yes. This options is set.

2. that in the dialer settings in GateKeeper, this dialer profile is enabled to be used by WinGate, and has the correct username and password set.

Yes. This is enabled, and the correct user/pass is set.

I'm not sure if WinGate will block connections though if the desired modem connection is not available - I think it tries anyway.

I think that it should not be available, because if I need some connection to be available, I can just add them to the list.

We found most people just want to be able to connect.

Again, if I need all connection I just add them all to the list.

Could you please tell me, is it possible to restrict a service to use ONLY specified connection, not other ones?

Oct 22 05 10:06 am

You can set policies per dialup connection in WinGate, so you could do something like restricting certain sessions by session description.

Oct 23 05 9:52 pm

Adrien, thanks for replies! Thanks for suggestion. But could you please clear, is it possible to restrict a service to use ONLY specified connection, not other ones? I'm asking because I would like to add 2 proxy services, where 1 proxy uses the first connection, and another proxy uses another one. So I can control access to both connections separately.

If I can't restrict proxy access to the specified, so if there is no connection attached to this proxy, users can access to another connection. That what I'm going to restrict.

Is it possible? If not, are you going to add this feature to WinGate in future versions? Or may be it's tecnnically impossible?

Oct 24 05 6:21 pm

Hi

If both proxies are the same type (i.e both WWW proxy), then the suggestion I made wouldn't work.

We would need to add support for it, which we can do.

Adrien

Oct 24 05 6:43 pm

If both proxies are the same type (i.e both WWW proxy), then the suggestion I made wouldn't work.

Yes. I have two WWW proxies one on 8080 and another on 8088.

Code:: We would need to add support for it, which we can do.

I tnink it's great! Could you please add support for such a feature? I think that modifing gateway tab mechanism, so WinGate doesn't use unspecified connection if there is no explicitly specified connection available is enough. Could you please tell are you going to insert such a feature in future releases. And if yes, so when approx. should I wait this feature.