packet filter disable internet access

[Mitch Lavender [MS]]

Hi Roger,

Verify that "Enable Dynamic Packet filtering of Microsoft Proxy Server
Packets" is enabled in Packet Filters.

Is the "external" adapter on the Proxy Server multihomed? If so, remove the
extra IP addresses from the adapter.

If you have not installed the Proxy Server Service Pack 1, I encourage you
to do so. It can be downloaded from the following link:

http://www.microsoft.com/proxy/Support/proxyupdate.asp

See the articles from the Microsoft Knowledge base for more details:

Q176922 - Multiple IP Addresses Cause Dynamic Packet Filter to Fail
http://support.microsoft.com/support/kb/articles/Q176/9/22.asp

Q238375 Proxy Server 2.0 Service Pack 1: List of Fixes
http://support.microsoft.com/support/kb/articles/Q238/3/75.asp

Thank you for using Microsoft products.

Respectfully,

Mitch Lavender, MCSE
Microsoft Professional Platforms Support

-------------------------------------------------------
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue. Please also include a copy of the
original message when replying.
-------------------------------------------------------

Search our online Knowledge Base
http://support.microsoft.com/support/c.asp?FR=0
Need more information? Check out our White paper vault.
ftp://ftp.microsoft.com/bussys/winnt/winnt-docs/papers/

--------------------
From: Roger Riggins <rig...@cpros.net>
Subject: packet filter disable internet access
Message-ID: <FCA5BE40AA1AD311A4F...@vap.microsoft.com>
Sender: Roger Riggins <rig...@cpros.net>
Date: Wed, 23 Feb 2000 18:23:47 -0800
Lines: 16
X-Newsreader: Microsoft (R) Exchange Internet News Service Version
5.5.2448.0
Newsgroups: microsoft.private.directaccess.iis-proxy-indexserver
NNTP-Posting-Host: 207.46.133.155
Path:
cpmsftngsa01.privatenews.microsoft.com!CPMSFTNGSA04.privatenews.microsoft.co
m!HTMLNews.MSCom.com
Xref: cpmsftngsa01.privatenews.microsoft.com
microsoft.private.directaccess.iis-proxy-indexserver:7985
X-Tomcat-NG: microsoft.private.directaccess.iis-proxy-indexserver

I've recently taken over a network setup by another consulting company.
They installed Proxy 2.0 on a server but didn't configure it correctly.
IP forwarding was enabled, packet filtering was disabled, and all
services were still bound to the external NIC. I reconfigured Proxy to
tighten security for them, however, when I enable packet filtering I
lose internet access on the server. Clients can access it fine after
updating WSP. I installed proxy client on the server, but it didn't make
a difference. If I disable packet filtering, I can access the internet
just fine. I checked the PF log, and sure enough, I was rejecting my
own packets. I set the filters to default (in case something was
changed) and tried again. It didn't work. I removed Proxy and
reinstalled it and got the exact same results. I installed SP1 and
still no results. How can I make this thing access the internet with
packet filtering enabled? I haven't run into this problem before.

Thanks
Roger Riggins