www redirect

[doronli]

When I turn redirect option on in www proxy service it will not redirect nat.
No one could access the internet. It seems the redirect is not redirecting.

[adrien]

which port are you running the WWW Proxy on?

Unless it is on port 80, then the redirect will not be on port 80 either, in which case all the WWW traffic to port 80 will not be intercepted.

Adrien

[doronli]

I am using port 80. If I manualy configure the work stations to use the wingate server for browsing it will work correctly. The problem comes from workstations using NAT and guest connections.

[adrien]

OK

When the NAT sessions show up in GateKeeper, what do they look like?

We have never had a problem with Transparent Redirects before, but there are a couple of potential reasons why perhaps the sessions are not being intercepted.

1. The WWW Proxy is not bound to the same interface that these clients are connected on. Transparent redirection redirects only on the same port same interface. If you have multiple local NICs, then if the WWW proxy is not bound to one of these interfaces, then WWW traffic received on that interface will be redirected up, but there will be nothing there - that would break the connections, and block all browsing.

2. The clients are using some other sort of proxy - perhaps SOCKS, and connecting on port 1080 to a SOCKS server. MSIE supports SOCKS as well as normal proxy operation. I guess you would see this though.

Adrien

[doronli]

All nat communacation is loged in as guest. I have only 1 local network card.
Here is another funny thing, some clients who are set up for direct connection and the redirect is set off, are going through the www prox service. I check the log and when redirect is turned on, the only log I receive is 'HTTP://' with no location. I also see this in the activity window. Nat is using port 80.

I shut off socks and will try and see if this allows it to work. No it did not work.

[adrien]

Does your Network card support hardware checksums?

We just found a problem here which will affect TR in such cases.

If the NIC has hardware checksums turned on, turn it back off.

Adrien

[neil]

Its also worth checking your port security table in the ENS properties. With some older versions of WinGate TR's could get their knickers in a twist so that when you turned them on under the sessions tab in www (or another service) the port security redirect wasn't added, and vice versa; when you UNticed the 'use transparent redirection' in the www proxy the port security action would stay, thus stopping the TR functionality from working correctly.

Regards,

Neil

[doronli]

I noticed that. If I change the port on the www proxy before un checking the redirect the firewall does not change setting. I not sure was is going on it seems that it might be something with the server itself. I will try reinstalling the whole system from scratch.


Thanks

[doronli]

OK, Here is the story, I started from scratch with a new computer and a new dsl line. Still www redirect does not work. I see the request but it only has 'http://' no address of were to go. I tried everything now, please let me know if there is some other way of redirecting the NAT communacations through the www proxy. I need this working so I could get Gatefilter working.

[adrien]

You say there is only one NIC on that machine?

Does that mean you are trying to bounce off WinGate and then out through a DSL connection?

It should work, although NAT will not work if you only have one NIC.

You may need to check your interface settings, under Options->Advanced->Network Interfaces.... the NIC will have to be marked as internal for TR to work.

Adrien

[doronli]

No, there are two nics in the computer. Somr thing is stripping the sddress when it gets to the wingate server.

[ccsoft]

Hi,

Did you guys figure this one out? I have run into the same issue with a client. WinGate v5.06. The clients will work if set to use proxies or if set for NAT. But when he turns on the TR on the WWW Proxy all access is blocked. We've gone through all settings and everything looks fine. This is a fresh install of WinGate.
Any help would be greatly appreciated.

Joan
C&C