Windows Forum

Ask something
Discussion Locked

how to bypass firewall?

0 helpful
7 replies

by bhalchandra72

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

i have a lan connected to internet by using a router and MS proxy 2.0.the setup is as follows:
lan subnet:141.10.x.x/24
proxy server
nic1 141.171.10.5/24
nic2 192.168.10.8/24
router
near end ip: 192.168.10.1/24
far end ip: connected to internet,class c address ,static
now if i place my win98 m/c on the subnet 192.168.10.x and put default gateway as router, i am able to ping some outside ip addresses but not able to browse sites.
what could be the problem?
what shd be done on client side?

7 replies

by nicko

Are you sure that http is allowed to pass through to the outside? Ping uses icmp, which is on a different ip port, so that may be allowed through, but not http on port 80.

If you have set up your browser to use a proxy, what port have you specified? Some people specify a different port for http like 8080.

If you can browse from machines on your internal (141) network it may be that the web proxy service has been restricted to only allow machines on that subnet to browse and not from the 192 network.

Hope this helps.

by bhalchandra72

but i am able to browse when on 141.171 subnet.
what i am trying to do is i should not go throgh proxy, instead i waNT TO USE router as my internet server
i have kept proxy server setting blank on my browser( but i have tried the setting of 192.168.10.1 also)

by espen

If you are on subnet 192.168.10.8/24 and
the proxy is wired as a firewall, you cannot
use the router address as your default
gateway, as that IP won't be existing in
your subnet. You have to use a default
gateway on the same subnet as yourip.

Set the default gateway to be proxy, and
that should cure the problem. ICMP has a
tendency to find ways around stuff like
that - Don't ask me why - I got ping replies
from a unit that was wired with a
cross-over cable into a switch - But
couldn't access it in any other way.

Espen

by bhalchandra72

my dear friend, i have put my m/c on that second subnet 192.168.10.X but still was not able to browse, although i was able to ping my nameserver and some other servers. not only ping but tracert also works fine with some addresses but not for all.
give me a schematic daigram to design the situation

by espen

Do you run address translation on the
router?

First of all: the 141 subnet is not a private
address range - You cannot use that on
your LAN. Use 10.0.0.0 255.0.0.0 , or
192.168.0.0 255.255.0.0 on your entire
subnet.

After that - Don't run NAT on the router -
Run it on the proxy. So that you have the
router connected to the internet with a live
address on the inside interface.

Run NAT on the proxy, so that nic 1 -
Insecure gets an IP on the live network

Nic 2 Secure on the private network

All machines in the private network use IP
of Nic2 Secure as default gateway

That way all traffic will be routed to the
right place.

This discussion is closed to new replies.