Packet Filter Driver Blocks All Non-Proxy Requests

ID: Q174785

The information in this article applies to:

Microsoft Proxy Server version 2.0

SYMPTOMS

The packet filter driver in Proxy Server version 2.0 blocks all non-proxy requests to and from the Proxy Server.

CAUSE

This only occurs when packet filtering is selected (enabled). The packet filter driver will not block applications that use any of the proxy services. Instead, the dynamic packet filter feature will automatically open the requested ports for these applications.

RESOLUTION

If you run applications that access the Internet on the same computer that is running Proxy Server, you need to configure static filters.

To add a custom or pre-defined static filter:

Under Shared Services, click Security and select Add.

Select one of the pre-defined packet filters or use a sample from the list of packet filters below to create a custom packet filter.

The Local Host and Remote Host parameters can be adjusted to allow connections to or from selected IP addresses.

Common Packet Filters

FTP Server IN (Filter 1 of 2)
Protocol = TCP
Direction = IN
Local Port = 21
Remote Port = Any

FTP Server OUT (Filter 2 of 2)
Protocol = TCP
Direction = BOTH
Local Port = 20
Remote Port = Any

HTTP Server (Port 8080)
(Note, there is a pre-defined filter for port 80)
Protocol = TCP
Direction = IN
Local Port = 8080
Remote Port = Any

FTP Server Dynamic (Optional)
(This filter is optional, it is only required if you have Web-browser based FTP clients or passive mode FTP clients accessing the FTP server)
Protocol = TCP
Direction = BOTH
Local Port = Dynamic port (1025-5000)
Remote Port = Any

TZO Internet Naming Service Client (http://www.tzo.com)
(Filter 1 of 2)
Protocol = UDP
Direction = BOTH
Local Port = ANY
Remote Port = Fixed port 21331

TZO Internet Naming Service Client (http://www.tzo.com)
(Filter 2 of 2)
Protocol = UDP
Direction = BOTH
Local Port = ANY
Remote Port = Fixed port 21332

MORE INFORMATION

For additional information on packet filters, please see the "Setting Security Parameters" chapter in the Proxy Server 2.0 documentation. This article will be updated periodically with new packet filter examples.

Additional query words:


Keywords          : prx2faq kbfaq 
Version           : winnt:2.0
Platform          : winnt 
Issue type        : kbprb

Last Reviewed: June 10, 1999