unknown users are using my wingate

[talal]

hello every one,
i'm a new user of wingate and im using it at my internet cafe.
the only problem im facing is i can see external users using my wingate (through activity screen).
i tried to specify my cafe users through reading the help file but it was to complecated for me.
my quistion is: how can i allow only my cafe users to use wingate?
i dont want to use a firewall, because i think it will make my connection slower, other wise its easyer to setup.
Kindly advise me

Regards,
Talal

[genie]

Are those unknown users internal or external? Make usre you do not have services bound to the external interfaces.

[talal]

hello, thanx 4replying,
they are external (outside my cafe)
i can see them browsing through wingate activity monitor

[n0ticer]

talal,

go to Options > Advanced > Network Interfaces. can u post ur settings?

ur settings should be similar to this:

192.168.0.1 Public: NO Trusted: YES
172.xxx.x.x Public: YES Trusted: NO
127.0.0.1 Public: NO Trusted: YES

(do not post ur actual IP xxx)

[adrien]

also, what sort of activity are these users doing?

If they are doing WWW access, edit the WWW Proxy, and go to the bindings tab, if the top option is selected ("Allow connections coming in on any interface") then you should select the bottom option, and choose only those interfaces that only your clients can access.

Adrien

[talal]

Hello all,

I think it's better to explain my network setup before discussing the problem and the solutions.

I have two connections: Satellite and Lease Line from two deferent ISPs.
The satellite is used and dedicated for browsing only (http) through Wingate.
The Lease Line is used for the other application such: messengers, Voice, Chatting…

The client's setup is:
Each client has real IP (static).
Gateway: Lease Line IP (router)
Proxy: Wingate machine IP

The Wingate setup is:
Two NIC:
Internal is to receive from the clients (same clients subnet).
External is connected to the satellite router (deferent subnet).

All my machines are connected to one switch.

As a conclusion, my network is open!!! But this is the best setup found according to my ISP recommendation and my entire clients are able to use all the voice applications because each has a real IP.

The problem:
Unknown users using my satellite connection through Wingate (internal NiC) and they are accessing my network through the Lease Line router.

What I did try after reading your reply's is:
Users> system policies> everyone> locations> specify locations> (my machines IPs).
And it WORKS ;) though I still see external users under the activity screen but I think they are not able to browse any more, they used to do that before doing the above and hopefully they will give-up.

In reply to all,
Thank you very much and I really appreciate your support for no reason except helping and supporting each others.
Thanks again and best regards

Talal