Greetings!
Brian Steele wrote:
> This is simply incorrect, as MSP2.0 DOES provide packet-filtering
> capabilities. Volker, it might be a good idea to download and run the trial
> version of MSP2.0, and actually familiarize yourself with its capabilities,
> before making such statement.
I always was told (by the official proxy experts of MS Germany) that one can
only restrict the access to the proxy server itself. But I checked back with MS
KB - and it seems that there is some "normal" packet filtering. Some questions
here:
* Has IP forwarding/routing to be anabled?
* Is that filtering standard packet filtering - using the machine only as
router?
Or does that work only as filter for the HTTP or Socks proxy?
* The filter is configured in HTTP proxy menus - but is dependant on which
part(s)
of the proxy running? IIS? Socks?
* How to configure more than 2 NICs? You only can configure the directions
"IN", "OUT" and "BOTH" which indicates, that not.
* What happens if the HTTP and/or socks proxy stops? Will the rules stop to
filter
(letting all through), stop to forward (blocking connection) or work on
normally?
Sorry, but I corrently do not have a MS machine available here to experiment
with...
Bye
Volker
Btw, I laboured (sic!) a few years with MSP2.0 and helped Microsoft
debugging/understanding their own CHARP proxy arraying (which only works
properly if WINS/DNS round robin is enabled).
> ----- Original Message -----
> From: "Volker Tanger" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Wednesday, May 24, 2000 5:27 AM
> Subject: Re: Microsoft Proxy
>
> > The MS Proxy only is a HTTP (and socks) proxy with quite limited URL
> > filtering options. It does _NOT_ have any firewall capabilities - not even
> > simplest packet filtering. Lacking even this elemental firewall
> > capabilities, noone can take Microsofts claim for the MS Proxy to be a
> > firewall for serious.
begin:vcard
n:Tanger;Volker
tel;fax:+49 - 69 - 92901-213
tel;work:+49 - 69 - 92901-570
x-mozilla-html:FALSE
url:http://www.res.globalone.net/
org:Global One;Global Project Engineering
version:2.1
email;internet:[EMAIL PROTECTED]
title:Sr. Security Engineer
adr;quoted-printable:;;Stiftstrasse 23=0D=0A;Frankfurt;;60313;Germany
note;quoted-printable:Room 608=0D=0A
fn:Volker Tanger
end:vcard
