Problem after 6.1 upgrade

[Suporte Casillo]

I´m using 6.0.4 with a transparent proxy on port 80 and port 110.

All machines are working ok, except the situation with the SSL connection which requires to check the "autodetect proxy settings" on IE for those who need to enter on banks or any other SSL connection.

Anyway, today I decided to update the version to 6.1 during the lunch break.

Right after doing the update all transparent proxy connections stopped working.

I did a lot of tests and if I set the browser to use the www proxy server on port 8080 the connection worked, but if I tried to go on port 80 which was being intercepted the browser couldn´t open the page.

I could see the machines doing DNS requests to the wingate machine, and those machine were able to resolve a ping to a site, like ping yahoo.com, but the IE was unable to open the page.

Really strange.

So after more than 1 hour trying to see what was wrong I decided to reinstall 6.0.4 over the 6.1, hoping that the backwards installation work.

It actually did. Right after putting 6.0.4 back online the transparent proxy system was working both on ports 110 and 80.

Now, I won´t try to do the upgrade again during working days and I´m wondering what went wrong.

Any ideas?

[adrien]

Hi

There are a couple of other clients with problems with intercepted connections after the upgrade as well. We are looking into this, we hope to have an answer soon. It is most likely some change that was made to the ENS driver.

I have a couple of questions however:

1. How is your gateway set up - does it have 2 LAN cards, one internal and one external (or more?)

2. Did you have "enable support for multiple default routes" under Extended Networking, Routing in GateKeeper enabled?

Regards

Adrien

[adrien]

One more thing.

If you run telnet, connect to a site say www.wingate.com on port 80 with telnet, do you get an indication of a successful connection? Or does the connection time out?

Also does it show up in GateKeeper as an HTTP session?

Adrien

[adrien]

Does your server have only one network card?

Adrien

[Suporte Casillo]

Hi

There are a couple of other clients with problems with intercepted connections after the upgrade as well. We are looking into this, we hope to have an answer soon. It is most likely some change that was made to the ENS driver.

I have a couple of questions however:

1. How is your gateway set up - does it have 2 LAN cards, one internal and one external (or more?)

2. Did you have "enable support for multiple default routes" under Extended Networking, Routing in GateKeeper enabled?

Regards

Adrien

Sorry for the delay on replying.

1 - Yes, 2 lan cards. 1st connects to the local networks and the 2nd goes to the DSL router.

2 - Yes, it has been always enabled.

[Suporte Casillo]

One more thing.

If you run telnet, connect to a site say www.wingate.com on port 80 with telnet, do you get an indication of a successful connection? Or does the connection time out?

Also does it show up in GateKeeper as an HTTP session?

Adrien

Should I do this test under 6.1 or 6.0.4?

Right now, with 6.0.4, I get connection time out on machines with or without the WGIC.

[Suporte Casillo]

Does your server have only one network card?

Adrien

The server does have 1 NIC, the Wingate server got 2 NICs.

The DHCP on the server uses the Wingate IP as the default gateway and one of the DNS servers.

[adrien]

OK, the next thing to check is the adapter usage of the NIC connected to the DSL router. This needs to be "external" for WinGate to perform NAT.

We have made some recent changes to our ENS driver in this regard which should also resolve this without requiring that configuration change. If you would like to try that instead, let us know.

Regards

Adrien