Kerio Tech Firewall6 Network Router User Manual


 
Chapter 23 Troubleshooting
372
Note: In this example, it is assumed that client hosts use the WinRoute DNS Forwarder or
local DNS server (traffic must be allowed for the DNS server). If client stations used a DNS
server in the Internet (this configuration is not recommended!), it would be necessary to
include the DNS service in the rule which allows unlimited Internet access.
23.6 FTP on WinRoute’s proxy server
Proxy server in WinRoute, version 6.0.2 and later (see chapter 5.5), supports FTP. When
using this method of accessing FTP servers, it is necessary to keep in mind specific issues
regarding usage of the proxy technology and parameters of WinRoute’s proxy server.
1. It is necessary that the FTP client allows configuration of the proxy server.
This condition is met for example by web browsers (Internet Explorer,
Firefox/Netscape/Mozilla/SeaMonkey, Opera, etc.), Total Commander (origi-
nally Windows Commander), CuteFTP, etc.
Terminal FTP clients (such as the ftp command in Windows or Linux) do not allow
configuration of the proxy server. For this reason, they cannot be used for our
purposes.
2. To connect to FTP servers, the proxy server uses the passive FTP mode. If FTP
server is protected by a firewall which does not support FTP (this is not a problem
of WinRoute), it is not possible to use proxy to connect to the server.
3. Setting of FTP mode in the client is irrelevant for usage of the proxy server. Only one
network connection used by the FTP protocol is always established between a client
and the proxy server.
Note: It is recommended to use FTP over proxy server only in cases where it is not
possible to connect directly to the Internet (see chapter 5.5).
Example of a client configuration: web browser
Web browsers allow to set the proxy server either globally or for individual protocols. In
our example, configuration of Microsoft Internet Explorer 6.0 focused (configuration of
any other browsers is almost identical).
1. In the browser’s main menu, select Tools Internet Options, open the Connections
tab and click on the LAN Settings option.
2. Enable the Use a proxy server for your LAN option and enter the IP address and port
of the proxy server. IP address of the proxy server is the address of the WinRoute’s
host interface which is connected to the local network; the default port of the proxy