Security

Ask something
Discussion Locked

MS Proxy Packet Filtering

0 helpful
5 replies

by rich

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I'm running Microsoft Proxy Server 2.0 and IIS 4.0 and am having a problem with the packet filtering. When I turn packet filtering on, everything works except the websites I am hosting on the proxy server machine itself. I am also running Exchange and was able to set up the filters to allow this traffic through. I have set up the standard HTTP filter but this does not seem to work. As soon as I turn the filtering on, the websites are inaccessible. Once I turn it off, they are again accessible. I'm sure that I'm missing something easy here like another custom filter that I need to configure but I can't seem to find anything in the documentation or in the Microsoft Knowledgebase which discusses this specific configuration setup.

5 replies

by mikel~t

Do you have "Enable Web Publishing" check marked in the Publishing Tab of the Web Proxy Service? Once you enable this, you can specify whether incoming "external" webserver requests are discarded, sent to the local web server (use this if the webserver is running on the proxy server), or sent to another webserver. Sending to another webserver is the most secure choice, but if you are hosting websites on your proxy server, select "sent to the local web server". This should resolve your packetfiltering problem.

Hope this helps.

Mike

by rich

Thanks for the response Mike. I do have the "Enable Web Publishing" box checked. Also, since posting this question, I've discovered that the websites are seen when accessing them through the Internet, however, they are not accessible when attemptingto view them through my internal network

by mikel~t

It would be an open door if your internal users could access the websites on the Proxy Server. Your best bet is to move the websites to another dedicated server, and redirect all incoming "external" website requests to the new dedicated webserver.
Mike

This discussion is closed to new replies.