Hi,ChrisH come in Please! Socks Proxy problem yet!

[sandrain]

Hello, I 've read the article you recommended, then I drop a conclusion, that is : Wingate Socks Proxy Server can only use a Browser to authenticate first, then a client such as ICQ can use the Socks Proxy,
in other words, the username/passwd message in ICQ can't make authenticate directly,

Is that true? if so , how can a ICQ client make authenticatine directly?

[adrien]

The problem most SOCKS 5 clients have with WinGate's SOCKS server is that they aren't smart enough to know when the SOCKS server is not asking them to authenticate.

the SOCKS spec says that the server can specify that no authentication is required. WinGate will do this if there is already a user authenticated or assumed from the IP address of the client, so if there was already a previously authenticated session from a browser, or anything, then the SOCKS server doesn't request authentication. Many versions of ICQ if you configure them to use authentication really can't deal with being told by the server it isn't required.

What this means is that it would probably work with ICQ with authentication if there was no assumption for the IP, and no other connection that authenticated first.

Adrien

[ChrisH]

Hi,

Here's the way my setup is.

Client Machine -Win98se, ICQ ver. 2003a beta - Server TAB settings, Using Proxy and SOCKS5 - Firewall TAB settings, Host 192.168.0.1 Port 1080, Authentication is unchecked, external proxy IP 192.168.0.1, and check use proxy to resolve host names. This client connects to WG server using WGIC.

At WG server, SOCKS Proxy policy is set to must be authenticated, Session TAB -Timeout is unchecked and SOCKS Advanced TAB - use this servers access policy is checked.

When user clicks ICQ, the WGIC authenticates the user and ICQ then connects. I haven't been able to do what I think you want and that is to have ICQ do the authentication to SOCKS server. I believe Adrien's answer covers that. I did try using NAT to connect from Win98 machine and the JAVA login does come up and user was able to authenticate then ICQ connected. So, I don't see a browser having to be launched first if you are using Java log in.

Hope this helps.