NOt channelling local IE through wingate

[ngrayson]

Chaps,

having just bought kaspersky, I want it to protect IE sessions on the server I run wingate on.

I have tried setting the proxy in IE to this machine 192.168.0.1 and the necessary port but nothing appears in the history when I use IE and kasopersky failed (works great for LAN based machines)

Transparent redirect is on.

What did I miss.

[Nev]

Chaps,

having just bought kaspersky, I want it to protect IE sessions on the server I run wingate on.

I have tried setting the proxy in IE to this machine 192.168.0.1 and the necessary port but nothing appears in the history when I use IE and kasopersky failed (works great for LAN based machines)

Transparent redirect is on.

What did I miss.

Hi Neil,

On the server set the proxy to 127.0.0.1 / localhost should do.

Although the inbound NIC should also work as it does for me.

When I use it another session is shown as a Wingate user, in my case just assumed as a level of authentication.

Out of interest there wouldn't be a gateway entered for the internal NIC on your machine by any chance?

That is the 192.168.0.1 NIC should not have a gateway as Wingate will take care of that.

[ngrayson]

Hi Nev,

No, the internal NIC has no DG.

Oddly, I tried setting the IE proxy on the local machine to 127.0.0.1 and disabled the auto detect so it could not be over ridden. Gatekeeper history detected my first connection to the internet and nothing after that.

I agree with you that either should work. BTW forgot to mention that I am using assumed users by IP but there is an entry for 192.168.0.1 which maps to the administrator.

Now, intersting, VPOP is set to use the POP3 Proxy in wingate and that does authenticate as adminstrator every time.

If you have any other thoughts I'd welcome them. I'm not going to push right now though as the guys are trying to get a release out and from the past as a software engineer I know what that means.

Cheers,
Neil

[adrien]

Hi Neil

What version of IE is that?

We have seen IE6 do some odd things.

BTW Transparent Proxy only works for LAN clients, we don't re-intercept outbound ones from the WinGate machine.

Adrien

[ngrayson]

Hi Adrien,

It is indeed IE 6 from XP SP2.

do you have any suggestions as to cures for the strange things it does.

Also, if you dont intecept from the server, how can I protect this machine useing kaspersky?

In fact it should not be being intercepted as IE (if it worked) is explictly being told to go to the proxy port directly.

Cheers,
Neil

[adrien]

Weird things we have seen IE6 do are things like not loading winsock layered service providers if it thinks it has a default route.

You can't take the default route off that machine though.

What proxy settings have you got in there? Not SOCKS?

When you see any activity from this machine in gatekeeper/logs what is it? I'm just wondering if it's possible that WinGate is playing any part in this.

Otherwise... I'm not sure what to suggest... Firefox? If IE refuses to go through a proxy for some reason, there's not much we can do about it.

Surely that would cause all manner of problems with Satellite connections that enforce a local proxy though. Have you tried 127.0.0.1 instead of the NIC IP address? It's possible that IE will behave differently.

Adrien

[ngrayson]

Hi Adrien,

I have wingate proxy server set up on a specific port (dont want to publish that here).

In IE, I have tried setting the proxy server address to both the NIC and 127.0.0.1 and the specific port I set in wingate. I have the auto discover proxy setting turned off (because that sometimes overrides what you set). So, I'm stuck.

Firefox is a usefull suggestion. I'll give it a go and let you know.

Cheers,
Neil

[ngrayson]

hmmm,

Make you rather suspicious of what Microsoft are doing.

INstalled firefox and it routes through the proxy every time. History is logged and Kaspersky kicks in with the EICAR test.

If I ever find out why, I'll post for future reference but I may now switch everyone to firefox.

Many thanks for the help,
Neil

[ngrayson]

Hi Adrien,

Flushed with the success of things working with Firefox I checked the MS knowledge base.

In the advanced search, Searching specifically for Internet Explorer 6 as the product and "does not route through proxy"
produced Article Q317718 which describes whats happening.

The date of this is however 2003 & one would have expected a fix by now.

Again thanks for you help,
Neil

[Nev]

Hi Neil,

What happens if you use the Wingate server's netbios name instead of Localhost / 127.0.0.1?

In addition you could add all names to the 'hosts' file.

[ngrayson]

Hi Nev,

All of my machines are in the hosts file. It makes network connectivty checks much easier (i.e. pinging etc.)

I did try as the article said but even with the host name in the proxy, it still did not work. Firefox just worked no problems.

I may check for IE6 updates which may fix it but Firefox look attractive.

[Nev]

Hi Neil,

Yes Firefox is a nice little browser and 'always' does the right thing!

Personally I mainly use Mozilla, where the tabbed view is just amazing for boards such as this and actually am trialling Netscape 8.0.4 also with it's Firefox / IE rendering toggle, but still a few bugs to iron before this one is premier!

Good on the hosts file, yes I push these out to clients at logon so only require a central management when hosts change.