Wingate blacklists work with IE, not with Chrome, Firefox

[steffan]

Hi all,

I swore I posted this earlier but I can't find the thread.

My problem is that we have Wingate 7 running in our network with a blacklist set for a specified IP range, and a couple of computers within that IP range are able to access YouTube - a site that is blacklisted. The two computers are running Windows 7 Pro 32-bit and Windows XP SP3 32-bit, but when I investigated it appeared that the site was accessible via Chrome and Firefox, but not Internet Explorer.

I don't know what is causing this as I have checked any extensions installed and I have searched for third-party programs but the computers appear clean. Is there a reason that this happens, and can it be rectified?

Thanks

Steffan

[adrien]

Hi

are FF and chrome even going through the proxy?

WinGate doesn't treat any browser any differently from any other.

Or are they maybe using SOCKS instead of the www proxy? Or no proxy setting at all?

Adrien

[steffan]

Thanks for the reply, Adrien.

I am not too familiar with SOCKS, and I'm only starting to learn Wingate on my own as I met it here - how can I check if the browsers are doing what you are asking?

[adrien]

Hi

do you have access to the browsers?

If so you can check their connection settings to see how they are configured.

If you're on an AD you can use a GPO to force Chrome and IE to use a proxy, not sure about FF.

You should also be able to see in WinGate's activity screen whether they are going through the proxy or not.

Regards

Adrien

[steffan]

The browsers are configured to automatically detect the connection settings.

Under Wingate's Activity Screen, I'm seeing the computers having NAT : TCP and NAT : UDP connections and I'm seeing the TCP connections to YouTube's ip address currently.

[adrien]

Hi

ok, so that means that Chrome and FF aren't using the proxy which I guess means proxy auto-detect for them isn't working.

FF uses a DNS lookup for "WPAD". What does that computer use for DNS? If WinGate's DNS server, then WinGate will respond with its own IP. But if using another DNS server, it may just fail.

Adrien

[steffan]

Wingate doesn't manage DNS as there is a DNS Server for that.

As of this post, I am using a computer within the restricted ip group for the blacklisted sites, and it has the same settings as the two computers and it cannot browse any sites that are blacklisted. So I'm really wondering what is causing those computers to get through to Youtube. Every computer in the network has the same connection settings, a few computers are not as restricted as the rest of the network but they have their own reserved IPs.

Still no idea why it only works for IE and not the other browsers.

[adrien]

if your DHCP server has option 252 set, that would explain why it's working for IE and not the others.

If you need to get proxy auto detect for the other browsers, you'll need to add some records to your DNS for WPAD.

Check out http://findproxyforurl.com

Adrien