Microsoft KB Archive/275284

= Server Proxy May Fail with Dynamic Packet Filtering =

Article ID: 275284

Article Last Modified on 1/18/2006

-

APPLIES TO


 * Microsoft Proxy Server 2.0 Standard Edition

-



This article was previously published under Q275284



SYMPTOMS
When you use Server Proxy for an internal service, Server Proxy may fail if you have multiple external Internet Protocol (IP) addresses and if you enable Dynamic Packet Filtering.



CAUSE
This issue can occur because when a remoted server that uses Server Proxy listens on 0.0.0.0 (INADDR_ANY), WinSock Proxy also listens on 0.0.0.0 on behalf of that server. The computer that is running the WinSock Proxy Service is listening on all addresses; however, a corresponding packet filter is only created for the default external IP address.



RESOLUTION
To resolve this issue, use the ProxyBindIp parameter in the Wspcfg.ini file that is configured on the internal server that you are using Server Proxy on. For example, if you are hosting Post Office Protocol 3 (POP3), use a Wspcfg.ini file that is similar to the following example:

[STORE]

ProxyBindIp=110:192.168.1.10

ServerBindTcpPorts=110

Persistent=1

KillOldSession=1

NOTE: The 192.168.1.10 IP address is an example of an address that does work in actual use because it is one of the IP addresses that is part of the assigned Private Ranges.

If you are hosting several services that use the same executable file that is described in the following example, install Proxy Service Pack 1 (SP1), and the fix that is available to resolve this issue (Wspwsp.dll):

[STORE]

ProxyBindIp=110:192.168.1.10,119:192.168.1.10

ServerBindTcpPorts=110,119

Persistent=1

KillOldSession=1

For additional information about the fix that is available to resolve this issue, click the article number below to view the article in the Microsoft Knowledge Base:

232588 WinSock Proxy Client Fails to Bind Remotely to Proxy Server Computer

You may also need the ForceCredentials parameter if Access Control is enabled on the WinSock Proxy server.



STATUS
Microsoft has confirmed that this is a problem in Proxy Server 2.0 and Microsoft Internet Security and Acceleration Server 2000.



MORE INFORMATION
For additional information, click the article number below to view the article in the Microsoft Knowledge Base:

176922 Multiple IP Addresses Cause Dynamic Packet Filter to Fail

Additional query words: wspcfg ini wspwsp dll

Keywords: kbbug kbfix KB275284

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.