 WinGate
 Overview
Features
Comparison Chart
Sales FAQ
Pricing
Purchase
Download
Support
Licensing
Requirements
Documentation
WinGate VPN
WinGate Plugins
|
 |
- Setup/Configuration - Basic setup and configuration of WinGate Proxy Server questions.
-
- What are the system requirements
for WinGate?
-
Minimum Requirements
* Computer with a 486 or higher processor
* Microsoft Windows 95/98 or NT operating system
* 8 MB of memory
* Typical Hard disk space required: 50MB(100MB recommended), additional space for cache to be stored
* Winsock 2
* TWO (2) network adapter or NIC. One for the Internet, one for the Network
* Internet or Intranet communication capabilities and all required hardware for the connection (modem, NIC card, etc.)
- What do I need to install WinGate?
-
You need the WinGate Installer, a working TCP/IP network (all computers can PING one another), a working Internet connection, and Windows 95/98/NT/2000/ME or XP Operating Systems.
How do I upgrade to a newer version of WinGate?
-
You will need to download the latest version from the WinGate Download Site: http://www.ccsoftware.ca/wingate/download.cfm This can be installed right over your current installation. If your upgrade protection is current on your WinGate license you will have access to all new features. If your upgrade protection is not current you will only have access to the features which were available in the release you purchased.
- What username and password do I use to log in to Gatekeeper for the first time?
-
The first time you log in to Gatekeeper, you need to leave the username set to Administrator and the password blank. In fact, you should not add or remove any information from any of the fields there. You will get a warning that you are logging in without a password, click [OK}. You will then be notified that you will have no rights on the system until you change your password, that is ok too. As soon as you press [OK] you will be prompted to change your password. Leave the old password blank and type in your password in the [New] and [Confirm] fields. Press [OK] and you will be logged in to Gatekeeper for the first time.
- Can I use WinGate with a pre-existing TCP/IP Network?
-
Yes. To enable this, log into the GateKeeper and in EACH service, under both the System Tab and the Services tab, click on the bindings tab. Note: DO NOT change THE REMOTE CONTOL SERVICE.
From the bindings tab, under the heading Adapter check to see if the internal IP address is listed. If it is you are already set, if not, click Add in the bottom window under the heading Binding Policy, and choose your local adapters IP address. Click apply and you should see this interface show up in the top "Adapter" window.
How do I define my networks IP Address as private?
-
To define the adapters usage as private select the Network tab in GateKeeper. Double click the adapter, this will open a properties dialogue box. Change the setting from "Auto Detect" to the "An Internal Protected Network".
- How do I secure my WinGate installation against an attack from the Internet?
-
With WinGate version 4.x and up, there are a number of options that allow you to secure the network. One is by binding the individual proxy services to a specific interface. This tells WinGate not to accept connections from anywhere but that particular Interface. Another option is to setup your system policies to only accept connections coming from specific address ranges. By using the ENS (Extended Network Support) you will have a fully functioning firewall on the WinGate Server.
- How do I connect WinGate through a Cable Modem?
-
When connecting the WinGate machine to the Internet through a Cable Modem, you first need to be sure to have two Network Interface Card’s (NIC’s) installed in that computer. One connected directly to your Cable Mode and the other connected directly to your internal network. ( You should not try connecting the Cable Modem directly to your network hub as this will cause severe security issues.) Then configure the Cable Modem NIC per your ISP’s instructions, so you can browse and successfully access the Internet from that machine. Install TCP/IP on the internal NIC. Configure it per the instructions in the WinGate documentation. Be sure not to change the DNS or Gateway settings in this NIC’s configuration, only assign a static IP address and subnet mask. The rest of the WinGate configuration will be the same as if you were connecting to the Internet through a standard modem. You will not need to configure a dialer.
How do I import my NT users into WinGate?
-
During the installation of WinGate , the installation program will ask you if you want to use NT for User Authentication. Place a check in this box and then continue with the installation. This will automatically import the users and groups from NT/2000 into the GateKeeper user database.
Note: This is only available with the Pro version of WinGate 4.x and above
- How do I import new users from NT into WinGate?
-
Go into GateKeeper, and click on the Users Tab. Double click on the Database Options, then click on the Synchronize Now button. This will synchronize GateKeeper with the user database within NT and carry all users and groups into the GateKeeper user database.
- How do I remove the NT users from WinGate?
-
WinGate simply imports NT users from the Primary Domain Controller (PDC) or Backup Domain Controller (BDC). WinGate cannot administrate (add, delete or modify) current user accounts. All user maintenance must be accomplished in the actual NT or 2000 database itself. Once those changes are made, either stopping and restarting WinGate, or clicking on the "Synchronize now" button within the User Database Options window of WinGate will update WinGate accordingly.
- How can I disable the
caching in WinGate?
-
- Click on the WinGate icon in the program tray to open the GateKeeper.
- On the left side of the Dialog box, double click on Caching to open a Dialog box (although it should have opened to it, be sure that the systems tab is the highlighted tab on the bottom.)
- Under the heading Cache Options, set limit cache size to zero (0)
- Click OK
- Can I block file downloads through a browser using WinGate?
Yes, you can block file downloads by changing your configuration settings in the WWW Proxy Service Policies as follows:
Open Gatekeeper.
Click on the Services tab.
Double click on the WWW Proxy Service
Click on the policies tab.
Add a policy and enable the Ban List with the following entries:
This criterion is met if... HTTP URL or Server name ends with .exe"
"This criterion is met if... HTTP URL or Server name ends with .zip"
"This criterion is met if... HTTP URL or Server name ends with ."
- Can I configure WinGate to dial in to MSN?
-
Yes, WinGate can dial in to MSN through MS Dial Up Networking. Add [msn/] before your login name in WinGate's dialer (without the brackets of course). Without this addition, WinGate will not be able to login to MSN successfully.
- Can I connect WinGate through another proxy server?
-
Yes you can connect your WinGate network through another proxy. This is called Cascading proxies.
Open up Gatekeeper and click on the Services tab.
Right click on the WWW Proxy Service and choose Properties
Click on connection
Select "Through Cascaded Proxy Server"
Enter the Servers IP address and Port Number
This will cause the service to connect via the server on the specified computer and port. Many ISPs have HTTP Proxies (usually using port 8080).
- Can I block access to certain sites through WinGate?
-
Yes, you can block access to certain sites through WinGate using the policies in the WWW Proxy Service. You can also restrict users access through WinGate to only certain, pre-determined sites using the Ban list feature in the WWW Proxy Service.
How can I FTP from DOS through WinGate using Proxy settings?
-
Open up the command prompt and type in:
FTP < IP Address of the WinGate machine >
You will receive the response "220 WinGate Engine FTP Gateway Ready" *
User < IP of WinGate: >:
Type in < username@ftp.site.com >
You will receive the response: "301 Username Okay, need password"
Type in your password
You will receive the response: "230 User Logged in, proceed"
*if you do not receive a response from the WinGate FTP Service check in Gatekeeper under the Services tab to make sure that you have the FTP Service available.
- WinGate Email Server - Setup and configuration of WinGate's integrated Email Server.
-
-
How do I set WinGate's Mail Server to send mail to a third party email server for delivery?
-
Open WinGate and under the System Tab double click on the Email Option. Under the Delivery Tab, select from the How to deliver pull down menu ''Use Gateway'' and enter in the 3rd party mail server you wish the mail to be sent to. You can also select ''Use Gateway for Undeliverable Mail'' and all mail that can not be sent directly would use the 3rd party mail server to send the mail.
- How do I add my domain to WinGate's Mail Server?
-
Open WinGate and under the System Tab double click on the Email option. Under the Domains tab click the Add button at the bottom. In the pop up window enter in the domain name you want WinGate to use and then select the option you wish this domain to be associated with (This domain is hosted locally, This domain points to a local domain, or Relay for this domain)
- How do I configure Email aliases?
-
"Email Address Aliases" allow you to specify more than one Email address for a single user. They work for both incoming and outgoing mail to provide the following advantages. It is simple any Email directed at the "original recipient" is sent to the "Change to" recipient. The SMTP Proxy will actively change the TO: address before it reaches the actual SMTP server (so it will work for both incoming and outgoing Email).
For Example, if you have Email addresses info@test.com, postmaster@test.com, and webmaster@test.com and you want them all to be received by user@test.com. Under the Aliases tab, you would enter in each Email address in the ''''Mail Received for Address'''' field. Then in the ''''Change Address To'''' field you would enter in user@test.com.
NOTE: This can only be used when you have an internal mail server. Internal meaning that the mail server is located on a computer behind WinGate.
- What does the Number of Recipients field in the SMTP Service do?
-
This basic approach is effective in that it makes your SMTP server an unattractive option to a spammer. This is because "spammers" typically rely on open-relay mail servers to relay their message on to many thousands of recipients from a single send.
However, it does NOT prevent local users from sending an outbound message to as many recipients as they want. This way "spammers" are restricted but your local users are not.
You can tell when a message is dropped because it had too many recipients. Neither the sender, the intended recipient, nor the WinGate administrator is notified (there will be an error code 2 entry in the SMTP Proxy log file).
NOTE: This can only be used when you have an internal mail server. Internal meaning that the mail server is located on a computer behind WinGate.
- What does the Relaying section of the SMTP Service do?
-
You can specify a list of "Local Mail Domains" only users who are members of one (or more) of these domains will be able to send and receive through this proxy. WinGate verifies this by checking the Email address of both the sender and recipients (via the "MAIL FROM" and "RCPT TO" commands specified in the SMTP protocol).
If the mail sender / recipient is not a member of a "local mail domain", you can configure the proxy to:
- Allow Relaying Permits open relaying of Email (spamming)
- Reject Relay Attempts Rejects the message and notifies the sender
- Silently Discard Relay Attempt Rejects the message but does not notify the sender (annoying for the spammer since they think their message was successfully dispatched)
NOTE: This can only be used when you have an internal mail server. Internal meaning that the mail server is located on a computer behind WinGate.
- What does the Message Size Field in the SMTP Service do?
-
Many ISP’s charge for the amount of data sent through their servers. You may choose to restrict the maximum size for an incoming message! (WinGate will not restrict outgoing Emails). Note that the message header/control fields are normally 20k (so you should allow for this when configuring your policy on Email size).
You can tell if this worked when a large message is dropped and neither the sender, the intended recipient, nor the WinGate administrator is notified (there will be an error code 2 entry in the SMTP Proxy log file).
NOTE: This can only be used when you have an internal mail server. Internal meaning that the mail server is located on a computer behind WinGate.
- Why am I getting a “relaying denied” message when I try to send through WinGate?
-
The reason you are seeing this message is because the ISP is not accepting your account information. Most ISP’s, or Mail Servers, will not allow relaying, this is a setting within the Mail Server itself. If you do not have an account with the Mail Server for sending mail then you will get this message. If you get this message on a client computer then you will need to contact your ISP and ask them to add your account to the trusted domain for SMTP mail. If this is not possible, you maybe using the wrong SMTP server within your account.
If you are looking for a Mail Server, try MDaemon. MDaemon has an MX resolver that, when used with WinGate, corrects these errors.
- Troubleshooting - Answers for the most frequent troubleshooting questions.
-
- What are the numbers at the end of the service logs?
Bytes sent to Client
This is the total number of bytes WinGate has sent to the client machine. In the case of HTTP use, a lot of this will come from the cache.
Bytes received from Client
This is the data that the client has sent to WinGate.
Bytes sent for Client
This is the data that WinGate has sent to servers on behalf of the client. This is usually different than the number of bytes received from the client.
Bytes received for Client
This is the amount of data WinGate has downloaded from the Internet on behalf of the client. This will likely be lower than the number of bytes sent to client, due to caching.
Second on-line
This is the number of seconds that a client was registered with WinGate. Note that this is not a reliable way of telling how much time a user spends on the net if they are logged on. Being logged on does not imply Internet use. Seconds online is updated at the end of all user sessions, when a user logs out.
- After installing the WGIC on my PC, the system slows down, how can I fix it?
Edit the WinGate Internet Client by accessing it in the “control panel” (under “settings” in the “Start” menu). Double click the WinGate client icon in the control panel to open a dialog box. Click the applications tab, click the browse option and add the exe file that is using the CPU for local access.
You can find out which file is using the CPU by - hitting the ctrl / alt / delete button at the same time / choose task manager / click the processes tab and this will tell you what file is using the CPU.
- Why will the dialer not disconnect at the time set in WinGate?
Be sure you are using the latest version of WinGate and verify that there is no traffic in GateKeeper for the amount of time the auto-disconnect is set to. If there is traffic then there is something that is making a request and keeping the connection alive. Stop the application from making a request and that should solve the problem. Also, be sure no requests are being made on the server. The server activity will be tracked, although not seen, through GateKeeper.
- I install the WinGate Internet Client and I cannot browse, why?
Go into the Control Panel, Double click the WinGate Internet Client, click the applications tab. If iexplore.exe is listed here, remove it. The same would hold true if you are using Netscape and netscape.exe is listed here, remove it. Click apply, then OK at the bottom. Now open the browser and you should have no problems.
- I lost the services in GateKeeper, what now?
-
If the services in GateKeeper no longer appear, they can be manually restored. This may happen if you have installed something on the server that had a major effect on the TCP/IP settings.
You can add the services back into the server to allow client machines to access the Internet using proxy settings.
Open up Gatekeeper and click on the Services tab.
Right click anywhere in this window and choose new service.
One by one add the services that you need.
- Do I need to use manual proxy settings to connect through WinGate?
-
The instructions in the Application Specific setup articles are for connecting through WinGate’s manual proxy settings. If you are running WinGate 3.x or later, with the WinGate Internet Client (WGIC) Software installed on your workstations, or have installed the ENS plugin with WinGate 4.x and above, configure your applications per your ISP’s instructions. In most cases, this will be to simply leave the applications configured per default installation.
- Why is it I can not access FTP sites through WinGate?
If you have manual proxy settings in your browser it needs to be configured to use the WinGate WWW proxy server for FTP. You need to change your browsers FTP port number from port 21, to port 80 (or the same port number as the WinGate WWW proxy server in Gatekeeper). The WinGate FTP proxy is designed for stand alone FTP clients, such as FTP Voyager.
- Can I use AOL Instant Messenger?
Yes you can use AOL Instant Messenger through WinGate. In the WinGate 2.x versions you will need to manually point the application through the Socks 5 proxy. WinGate 3.x with the WinGate Internet Client (WGIC), or WinGate 4.x and up with WGIC or ENS, will allow you to simply configure IM to connect via a LAN, with NO proxy settings needed.
- Why do I see an IP address of 127.0.0.1 in Gatekeeper when I assigned my WinGate machine an address of 192.168.0.1?
-
For WinGate to function correctly it must determine whether an IP address/Network Interface is deemed to be Private or Public, Trusted versus Untrusted. By default it will assume that if the IP address is in one of the three sets of private class IP address ranges that it will be trusted. If you use a non-standard IP range on your network then WinGate will assume that it is public and untrusted.
You can check the usage of the Network Interfaces found on the WinGate Server by selecting the Network tab in GateKeeper. The adapter usage will be shown as Internal (trusted) or External (untrusted).
These settings can be overwritten, so that a Public (external) IP address can be trusted or considered local, however administrators should be aware of the possible security and configuration problems that may arise from this type of use.
To change the adapter usage double click the adapter, this will open a properties dialogue box. Change the setting from "Auto Detect" to the appropriate setting.
- Is the Winsock Redirect Service vulnerable to Perl-Script Attacks?
-
For normal use, this is not a serious vulnerability. The Winsock Redirector Service is, by default, only bound to the local network adaptors. Additionally, there is no need to bind the Winsock Redirector Service to public (Internet) adaptors because such attacks originate from within the LAN (i.e. from a local user). GateKeeper will warn the operator if an attempt is made to bind the Winsock Redirector Service to a public adaptor.
The developers of WinGate have addressed this issue. If this is a concern in your network, be sure you are running a version of WinGate higher than 4.1.0. Download the latest version of WinGate here:
http://www.ccsoftware.ca/wingate/download.cfm
- Glossary -
-
- What is Extended Network Support (ENS)?
Extended Network Support is the module in WinGate that includes Network Address Translation (NAT), Internet Firewall, and multiple network routing. All three features rely on the NAT engine being installed, but are all individually configurable
- What is NAT?
NAT stands for Network Address Translation (hereafter NAT) and provides WinGate with more power and flexibility for Internet sharing. NAT enables you to share an Internet connection among networked computers running virtually any application on any platform (including Windows, MacOS, Unix and Linux).
- What is a Network?
A network is simply two or more computers connected together so they can exchange information. Networking makes it possible for one computer to use a device (such as a color printer) that is connected to a different computer. In the home, a network can be used to share a single Internet connection among several computers.
Home networking technology enables two or more PCs, located throughout your home or small office, to communicate. With home networking, your computers can:
- Share your fastest Internet connection
- Share printers and other peripheral devices
- Access and transfer files on any hard drive of any computer
- Play Multi-Player games
|
|
