WinSock Proxy Service Properties

Use the WinSock Proxy Service property sheet to display the product ID, to add a comment about the server or the WinSock Proxy service, and to modify the Local Address Table (LAT). For more information, click one of the following:

 Product ID

 Comment

 Edit Local Address Table (LAT)

See Also

The Microsoft Proxy Server Installation and Administration Guide. To view this online book, from the Help menu click Microsoft Proxy Server Documentation.


Product ID

This is the product identification number (product ID) for this copy of Microsoft Proxy Server.

The product identification number is provided on the Certificate of Authenticity, included with each copy of Microsoft Proxy Server. During installation it must be typed into a dialog box of the Setup program.


Comment

To add or change a comment, in the Comment box type a remark about the server or the WinSock Proxy service. When Internet Service Manager is set to display Report view, the text entered here appears in the Comments column, next to the WinSock Proxy service for this server.


Edit Local Address Table (LAT)

Click the Edit Local Address Table (LAT) button to modify the Local Address Table on the server. This table defines the IP addresses of your network, and is used by WinSock Proxy clients to determine whether Windows Sockets connections should be established directly with a server on the private network, or should be redirected to the Internet through the WinSock Proxy service on the server.


WinSock Proxy Protocols Properties

Use the WinSock Proxy Protocols property sheet to determine which Windows Sockets applications can be used to access the Internet through the WinSock Proxy service on this server, and for each protocol configuration, which ports can be used for outbound and inbound connections. For more information, click one of the following:

 Protocol Definitions

 Add

 Edit

 Remove

See Also

The Microsoft Proxy Server Installation and Administration Guide. To view this online book, from the Help menu click Microsoft Proxy Server Documentation.


Protocol Definitions

This box lists the protocol configurations (supporting Windows Sockets applications) that can be used to access the Internet through the WinSock Proxy service on this server.

When Microsoft Proxy Server is installed, a default set of protocol configurations are created and will appear in this list. Use the Add, Edit, and Remove buttons to modify the list.


Add

To configure a protocol and add it to the list of protocols that can be used to access the Internet through the WinSock Proxy service on the server, click Add and complete the Protocol Definition dialog box that appears. The protocol is added to the Protocol Definitions list.


Edit

To modify the settings for a configured protocol, select a protocol from the Protocol Definitions list, click Edit, and complete the Protocol Definition dialog box that appears.


Remove

To delete a protocol configuration, select it from the Protocol Definitions list and click Remove.


Protocol Definition Dialog Box

Use this dialog box to configure protocols for use with the WinSock Proxy service on this computer. For more information, click one of the following.

 Protocol Name

 Initial Connection

 Port

 Type

 TCP

 UDP

 Direction

 Inbound

 Outbound

 Port Ranges for Subsequent Connections

 Add

 Edit

 Remove

See Also

The Microsoft Proxy Server Installation and Administration Guide. To view this online book, from the Help menu click Microsoft Proxy Server Documentation.


Protocol Name

Type the name of a protocol definition to be added to the WinSock Proxy service for this server.


Initial Connection

Use the Initial Connections options to define how each initial connection using this protocol definition will be handled.


Port

Type the port number that will be used for initial connections by this protocol definition.


Type

Specify the protocol type used for initial connections. Select TCP (for Transmission Control Protocol) or UDP (for User Datagram Protocol).


TCP

Select TCP when Transmission Control Protocol should be used for initial connections.


UDP

Select UDP when the User Datagram Protocol should be used for initial connections.


Direction

Specify whether the initial connection port will be configured for Outbound or Inbound.


Outbound

If you selected TCP, select Outbound to allow clients to initiate connections to external sites through the port.

If you selected UDP, select Outbound to allow the port to pass packets sent from a client to an external site.


Inbound

If you selected TCP, select Inbound to allow external sites to initiate connections to clients through the port.

If you selected UDP, select Inbound to allow the port to pass packets sent from an external site to a client.


Port Ranges for Subsequent Connections

Use the Port Ranges for Subsequent Connections options to define how to handle connections or packets that originate as a result of requests or packets sent on the initial connection's port number.

The list under Port Ranges for Subsequent Connections displays the port, packet type, and direction for each existing subsequent connection configuration.

Note: A port range setting of 0 for inbound connections indicates Port_Any, which allows the server to select the port from the range 1024-5000.


Add

To specify a port or port range that will be used for subsequent connections, click Add, and complete the Port Range Definition dialog box that appears.


Edit

To modify the settings for a port range for a subsequent connection, select the port range from the Port Ranges for Subsequent Connections list, click Edit, and complete the Port Range Definition dialog box that appears.


Remove

To remove a port or port range from the list of those that will be used for subsequent connections, select the port range from the Port Ranges for Subsequent Connections list and click Remove.


Port Range Definition Dialog Box

Use the Port Range Definition dialog box to set the parameters for subsequent connections. Subsequent connections are those that originate as a result of requests or packets sent on the initial connection's port number. The subsequent connection parameters include the port number or range, the protocol type, and the direction. For more information, click one of the following.

 Port or Range

 Type

 TCP

 UDP

 Direction

 Inbound

 Outbound

See Also

The Microsoft Proxy Server Installation and Administration Guide. To view this online book, from the Help menu click Microsoft Proxy Server Documentation.


Port or Range

In the Port or Range boxes, enter a single port or a range of port numbers to use for subsequent connections.


Type

Specify the protocol type that will be used for subsequent connections. Select TCP (for Transmission Control Protocol) or UDP (for User Datagram Protocol).


TCP

Select TCP when the Transmission Control Protocol should be used for subsequent connections.


UDP

Select UDP when the User Datagram Protocol should be used for subsequent connections.


Direction

Specify whether subsequent connection ports will be configured for Inbound or Outbound.


Inbound

If you selected TCP, select Inbound to allow external sites to initiate connections to clients through the port.

If you selected UDP, select Inbound to allow the ports to pass packets sent from an external site to a client.


Outbound

If you selected TCP, select Outbound to allow clients to initiate connections to external sites through the port.

If you selected UDP, select Outbound to allow the ports to pass packets sent from a client to an external site.


WinSock Proxy Permissions Properties

Use the WinSock Proxy Permissions property sheet to determine which users or groups of users can access the Internet using a particular protocol configuration through the WinSock Proxy service on this server. For more information, click one of the following:

 Enable Access Control

 Protocol

 Grant Access To

 Add

 Remove

 Copy To

 Remove From

See Also

The Microsoft Proxy Server Installation and Administration Guide. To view this online book, from the Help menu click Microsoft Proxy Server Documentation.


Enable Access Control

Select this check box to enable access control. With access control, only users who are granted WinSock Proxy permissions can use WinSock Proxy protocols to access the Internet through the WinSock Proxy service. By default this check box is selected.

Clear this check box to disable access control. Without access control, any WinSock client can access the Internet through the WinSock Proxy service (the WinSock Proxy equivalent of Anonymous access).


Protocol

This box lists the protocol configurations that have been created for this server and are available to users of the WinSock Proxy service.

A special selection in the this list, Unlimited Access, allows access to all protocols and all ports of this server. This includes ports not defined in any protocol configuration. Also, users granted Unlimited Access are not affected by WinSock Proxy domain filtering. Grant permission to Unlimited Access only to users who should have such access.

Note The protocol definitions that appear in the list are added, removed, and modified by using the Protocols property sheet.


Grant Access To

This box lists the users and groups permitted to use the protocol that is selected in the Protocol box.


Add

To grant a user or group permission to use a WinSock Proxy protocol to access the Internet, select the protocol from the list in the Protocol box, choose Add, and complete the Add Users and Groups dialog box that appears.


Remove

To revoke permission to use a protocol, select the protocol from the Protocol list, select one or more users and groups from the list in the box below, and choose Remove.


Copy To

This button allows you to grant permissions for more than one protocol at a time.

To grant users access permission for several protocols, select a protocol from the Protocol list, select one or more users and groups from the Grant Access To box, click Copy To, and complete the Protocol Selection dialog box that appears.


Remove From

This button allows you to revoke permissions for more than one protocol at a time.

To deny users permission for several protocols, select a protocol from the Protocol list, select one or more users and groups from the Grant Access To box, click Remove From, and complete the Protocol Selection dialog box that appears.


Add Users and Groups Dialog Box

Use the Add Users and Groups dialog box to grant a user or to a group permission to use the selected protocol configuration to access the Internet through the WinSock Proxy service on the server. You can grant access to users and groups from this server, from the local Windows NT domain, and from trusted Windows NT domains.

Note It is a good idea to grant permissions to groups, not users. Use the User Manager for Domains application to create groups and add users to those groups.

For more information, click one of the following:

 List Names From

 Names

 Add

 Show Users

 Members

 Search

 Add Names

See Also

The Microsoft Proxy Server Installation and Administration Guide. To view this online book, from the Help menu click Microsoft Proxy Server Documentation.


List Names From

Select a computer or domain. The groups that belong to that domain will be listed in the Names box.


Names

Lists the groups that belong to the selected computer or domain. If Show Users has been clicked, also lists user accounts.

Local groups (as distinct from global groups) are a special case. When an asterisk (*) appears next to a domain or computer name in the List Names From box, it indicates that the local groups of that domain or computer can be listed in Names. When the asterisk is absent, it indicates that local groups cannot be listed.


Add

After selecting users or groups in Names, click Add to move the names to the Add Names list.


Show Users

By default, only groups are listed in Names. Select Show Users to also display user accounts in Names.


Members

To view the members of a listed group, select the group in Names and then click Members. The Group Membership dialog box will appear.


Search

To search for a particular user or group, click Search and complete the Find Account dialog box that appears.


Add Names

When you click OK, the list of users and groups in Add Names is added to the list in the Permissions property sheet. You choose which users or groups to add to this list.

You can add users and groups to the Add Names list by any of these methods: by typing the account names (separated by colons); by selecting the names from the Names list and clicking Add; by clicking Search and completing the Find Account dialog box; or by selecting a group from Names, clicking Members, and completing the Group Membership dialog box.


Local Group Membership dialog box
Local Group Membership

Lists the user accounts and global groups that are members of the selected local group. For more information, click one of the following:

 Members of Local Group

 Add

 Members

See Also

The Microsoft Proxy Server Installation and Administration Guide. To view this online book, from the Help menu click Microsoft Proxy Server Documentation.


Members Of Local Group

Lists the members of the selected local group.


Add

Adds the user accounts or global groups selected in Members Of in the Local Group Membership dialog box to Add Names in the Add Users And Groups dialog box.


Members

Displays the members of the selected global group (that is itself a member of this local group) in the Members Of box.


Global Group Membership dialog box
Global Group Membership

Lists the user accounts that are members of the selected global group. For more information, click one of the following:

 Members of Global Group

 Add

See Also

The Microsoft Proxy Server Installation and Administration Guide. To view this online book, from the Help menu click Microsoft Proxy Server Documentation.


Members of Global Group

Lists the members of the selected global group.


Add

Adds the user accounts or global groups selected in Members Of in the Local Group Membership dialog box to Add Names in the Add Users And Groups dialog box.


Find Account dialog box
Find Account

Used to locate a user account or group. For more information, click one of the following:

 Find User or Group

 Search All

 Search Only In

 Search

 Search Results

 Add

See Also

The Microsoft Proxy Server Installation and Administration Guide. To view this online book, from the Help menu click Microsoft Proxy Server Documentation.


Find User or Group

Type the name for which you want to search.

The system will search only for user accounts or groups of that exact name.


Search All

Select this option to search for a matching user or group name in both the local domain or computer and in all domains trusted by the local domain.


Search Only In

Select this option to search for a matching user or group name in only the selected domains and computers.


Search

Begins a search based on the parameters specified in Find User Or Group and by Search All or Search Only In.


Search Results

Displays the user accounts and groups found by a search. This list is continuously filled as a search progresses.

One or more names can be selected from Search Results and added to Add Names in the Add Users And Groups dialog box by clicking Add in the Find Account dialog box.

The list presents the matching users in the form domainname\username (full name) description, or computername\username (full name) description.

The list presents the matching groups in the form domainname\groupname description, or computername\groupname description.


Add

Closes the Find Account dialog box and adds the accounts selected in Search Results to Add Names in the Add Users And Groups dialog box.


Protocol Selection Dialog Box

Use the Protocol Selection dialog box to grant or remove user access permissions for one or more WinSock Proxy protocols.

In the Permissions property sheet (the window described in the preceding section) you selected one or more users and groups. If you clicked Copy To in Permissions, then the protocols you select in this dialog box are the protocols for which those users will have access permissions added. If you clicked Remove From in Permissions, then the protocols you select in this dialog box are the protocols for which those users will have their access permissions revoked.

 	To select one protocol, click it.

 	To select another protocol, hold Ctrl and click.

 	To select a range of protocols, click on the first protocol in the range, hold Shift and then click on the last protocol in the range.

See Also

The Microsoft Proxy Server Installation and Administration Guide. To view this online book, from the Help menu click Microsoft Proxy Server Documentation.


WinSock Proxy Logging Properties

Use the Logging property sheet to set the logging options for the WinSock Proxy service. For more information, click one of the following:

 Enable Logging

 Regular Logging

 Verbose Logging

 Log to File

 Automatically open new log

 Daily, Weekly, or Monthly

 When File Size Reaches

 MB

 Log file directory

 Browse

 Log file name

 Log to SQL/ODBC Database

 ODBC Data Source Name (DSN)

 Table

 User Name

 Password

See Also

The Microsoft Proxy Server Installation and Administration Guide. To view this online book, from the Help menu click Microsoft Proxy Server Documentation.


Enable Logging

Logs Internet accesses to a text file, or to a table in an SQL or ODBC-compliant database.


Regular Logging

Records only a subset of all available information for each Internet access. This option reduces the disk space needed for a log file.


Verbose Logging

Records all available information for each Internet access.


Log to File

Saves log information to a text file. This text file can be viewed with a text editor, such as Notepad.


Automatically open new log

When selected, periodically begins a new log file, using the interval specified by the Daily, Weekly, Monthly, or When File Size Reaches options. When a new log file is started, the old log file is closed (and can optionally be archived on other storage media).

When cleared, the same WinSock Proxy log file is used continuously.


Daily, Weekly, or Monthly

Selecting one of these options specifies that a new log file should be started at daily, weekly, or monthly intervals.


When File Size Reaches

Starts a new file each time the log file reaches the specified size. The log file will be closed when it reaches this size. Closed log files can then be stored on disk or other media.


MB

The value in this box determines the file size that, when reached in the current log files, causes a new log file to be started. To change this value, type a number or click the arrows.


Log file directory

Displays the path where WinSock Proxy log files are written and stored. To change this location, type a new path. Although it is possible to write a log file to another computer on your network, it is recommended that you write your WinSock Proxy log file to the local hard disk of the computer running Microsoft Proxy Server. Also, to help prevent the disk filling up, it is a good idea to store the logs and the Web Proxy cache on different volumes.

The default is to place WinSock Proxy log files under this path:
C:\Winnt\System32\Wsplogs


Browse

If you want to change the Log file directory but are not sure of the new path, you can click Browse and complete the Select Directory dialog box.


Log file name

Microsoft Proxy Server generates the WinSock Proxy log file name for you. When WinSock Proxy logs files are opened daily the file name takes the format WSyymmdd.log, where yy is a number representing the year, mm is a number representing the month, and dd is a number representing the day of the month. For weekly logs the format is WSWyymmw.log, where w is a number between 1 and 5. For monthly logs, the format is WSMyymm.log.

When the Automatically open new log option is selected and a new WinSock Proxy log file is opened each time the log file reaches a specified size, the file name takes the format WSBnnnn.log, where nnnn is a number that increments with each new log. For example, WSB0007.log.


Log to SQL/ODBC Database

Choose this option to write all Internet accesses to a table in an SQL or ODBC-compliant database. Writing log data to a database is slower than writing to a text file, but data querying and reporting are enhanced by using an SQL or ODBC-compliant database (such as Microsoft SQL Server or Microsoft Access).

Log files are stored in one table. Each Internet transaction generates one record in the table. The database can exist on the computer running Microsoft Proxy Server or on another computer on your private network.


ODBC Data Source Name (DSN)

Type the ODBC Data Source Name (DSN) for the database that the WinSock Proxy service will be logging to.


Table

Type the name of a table in the database. Microsoft Proxy Server will log WinSock Proxy service information to this table.


User Name

Type a valid user name for the database table.


Password

If the table is password protected, type the password.


Select Directory Dialog Box

Use the Select Directory dialog box to specify a directory. When selecting a directory for the log, you will usually specify a directory on one of the server's local drives. (Although logs can be maintained on network drives, that is not recommended.)

To select an existing directory, select the drive from the Drives box, select the directory from the Directories box, and click OK.

To create a new directory and select it for use, select the drive from the Drives box, select the parent directory from the Directories box, type the new directory name in the New Directory Name box, and click OK.

See Also

The Microsoft Proxy Server Installation and Administration Guide. To view this online book, from the Help menu click Microsoft Proxy Server Documentation.


WinSock Proxy Filters Properties

Use the Filters property sheet to restrict client access to Internet sites. The filtering set here is common to both services. It applies to all users who access the Internet using the Web Proxy or WinSock Proxy services on this server. For more information, click one of the following:

 Enable Filtering

 Granted

 Denied

 Except to those listed below

 Add

 Edit

 Remove

See Also

The Microsoft Proxy Server Installation and Administration Guide. To view this online book, from the Help menu click Microsoft Proxy Server Documentation.


Enable Filtering

Select this option to implement access filtering, which controls client access to Internet sites. You can use access filtering to prohibit access to specified sites or to allow access to only the sites specified. The filtering applies to all users who access the Internet through this server.


Granted

When this option is selected, users who access the Internet through this server are granted access to all Internet sites, except for those that are listed. (Access is denied only for the listed sites.)


Denied

When this option is selected, users who access the Internet through this server are denied access to all Internet sites, except for those that are listed. (Access is granted only for the listed sites.)


Except to those listed below

The list displays the exceptions to the selected option (Granted or Denied). To change the list, use the Add, Edit, or Remove buttons.


Add

To add an item to the list of exceptions, choose Add and complete the dialog box that appears.


Edit

To alter a listed item, select it, choose Edit, and complete the dialog box that appears.


Remove

To remove an item from the list of exceptions, select the item and click Remove.


Deny or Grant Access Dialog Box
Deny or Grant Access To Dialog Box

If the Granted option in the Filters property sheet is selected, use the Deny Access To dialog box to specify an Internet site that all users of this server will not be allowed to access. If the Denied option in the Filters property sheet is selected, use the Grant Access To dialog box to specify an Internet site that all users of this server will be allowed to access.

Note: When using the WinSock Proxy service, filtering by domain name does not affect Internet requests where the client application accesses a site using an IP address. To effectively filter a site you may find it useful to create filters both on the domain name and the IP address.

For more information, click one of the following:

 Single Computer

 Group of Computers

 Domain

 IP Address

 Subnet Mask

 Domain

See Also

The Microsoft Proxy Server Installation and Administration Guide. To view this online book, from the Help menu click Microsoft Proxy Server Documentation.


Single Computer

Select this option to grant or deny access to a single computer. If you select this option, you must also enter the computer's IP address.


Group of Computers

Select this option to grant or deny access to a group of computers. If you select this option you must enter an IP address and a subnet mask.


Domain

Select this option to grant or deny access  to a domain. If you select this option, you must enter a domain name in the Domain Name box.


IP Address

If you have selected Single Computer or Group of Computers, enter the appropriate IP address in this box.


Subnet Mask

If you selected the Group of Computers option, enter the appropriate subnet mask in this box.


Domain

If you selected the Domain option, enter the domain name in this box. You can include a path within the domain.