SBC Yahoo - Online Protection software

[nuanda]

Hello

I'm currently accessing the interent via a DSL conection from SBC Yahoo! which is a major provider for the southern and mid US. Like many large broadband providers, they provide FREE anti-virus/anti-spyware/popup blocking/etc.

I just added a 98SE client to my network and I decided to try the SBC Yahoo "Online Protection" software on it. However, after installing this software, WinGate (6.0.3) would no longer authenticate the client, even after I added it to the Assumed users list.

Any ideas?

[jamesc]

Find the log file for the program, and see what / why it is blocking?

[nuanda]

I assume that you are refferring to the Wingate server logs...(there are no others from what I can tell). At the point where the client attempts to login to wingate...

Wingate NAT log
Requested: NAT: ICMP 192.168.50.9 <-> 204.71.200.33
Failed authorisation: NAT: ICMP 192.168.50.9 <-> 204.71.200.33
Requested: NAT: ICMP 192.168.50.9 <-> 66.218.71.63
Failed authorisation: NAT: ICMP 192.168.50.9 <-> 66.218.71.63
Authorisation failure: NAT STATUS: firewall block: ICMP src 66.163.169.170:0 dst 192.168.100.100:0

Simultaneously the System Log says
Authentication failed - user fuzzy on 192.168.50.9 requested NAT: ICMP 192.168.50.9 <-> 204.71.200.33
Authentication failed - user fuzzy on 192.168.50.9 requested NAT: ICMP 192.168.50.9 <-> 66.218.71.63
(and then some big ugly stream of charactors)

the 66.218 address is a Yahoo name server
the 204.71 address is a mystery

Thanks

[nuanda]

If you were reffering to the "Online Protection" software, then the answer is I Don't Know.

However, the software does NOT include a Firewall. Nor does it provide any sort of logging. Turning off the anti-virus, and pop-up blocking features does not help.


Thanks Again

[MattP]

It looks like you have set some policies that are restricting access for Fuzzy, what policies have you set? How are your clients authenticating and which service are you requiring authentication in?

Can you check the IP blackhole list in the Extended Networking menu and see if 192.168.50.9 is listed there?

[MattP]

Also, you should probably upgrade to the latest version of WinGate (6.1) as it fixes a few problems that we had in earlier versions of 6, and there were quite a few improvements made.

[kgoodknecht]

Hello

I'm currently accessing the interent via a DSL conection from SBC Yahoo! which is a major provider for the southern and mid US. Like many large broadband providers, they provide FREE anti-virus/anti-spyware/popup blocking/etc.

I just added a 98SE client to my network and I decided to try the SBC Yahoo "Online Protection" software on it. However, after installing this software, WinGate (6.0.3) would no longer authenticate the client, even after I added it to the Assumed users list.

Any ideas?

Did you install/enable the parental controls with the software?

Kevin


-Just a note-
I don't run the parental controls authentication is not a problem. However some systems, like mine, have a huge memory leak with the AV Realtime protection enabled. (Watch the nonpage Kernal memory in Task manager)

[nuanda]

Hello and Happy Thanksgiving

I should have pointed out that Fuzzy gets authenticated just fine PROIR to installing the "Online Protection" software.

My Policies are quite simple, I set the System Policies to include the Domain Users group which includes ALL users on the network. Everything else is set to use the System Policies (WinGate is set to use the NT4 user DB for authentication). There is nothing in the IP blackhole list.

regarding kevin's question - I did not install the parental controls. What OS are you using?

Thanks

P.S. I may try the upgrade this weekend. I hate fixing something that isn't broke (well, mostly not broke)

[nuanda]

OK, I upgrades to version 6.1 and all the backups and testing required to do that :|

The problem remains

The only way I can get internet access, with the Online Protection installed, is to add the Everyone group to the System Policy. But in either/any case, the client is ASSUMED, and NOT Authenticated.

So I'm back to my original questions which is...
Why would installing an anitvirus program prevent Authentication!?!

Thank you

[nuanda]

After working with this at length, I'm out of ideas. I used Norton Clean Sweep to monitor the install and but found nothing unusual.

I tried using the Proxy setting in Yahoo's Online Pretection software and was not able to fix the problem this way. Anyone have experience with these settings?

I still don't understand how this program can prevent wingate authentication, when it does not affect network connections.

Thanks