Agent software strong Medium strong--winroute use graphics and text tutorial _ Proxy Server

Due to the lack of IP resources and the security of the Internet, the school room or internet cafes are almost all using Proxy Server software, the current popular proxy server software has Microsoft proxy servers, Wingate and Sygate, etc., but these agent software have a variety of shortcomings, Microsoft Proxy Server requires a combination of Windows nt/2000 and IIS, and you need to install the Microsoft Proxy client program if you want to play the transparent and seamless connectivity of Winsock Proxy. This also makes the platform used by the client is limited; the Wingate function is quite complete, but when clients use software such as QQ, Outlook Express, the server and client settings are quite complex, and Wingate cannot use level two proxies The Sygate setting is very simple, and there is no complex setting with the client program, but its services are shared bandwidth-free and do not have caching capabilities, which makes the access rate much less. and WinRoute with its ease of use and function of the completeness of deeply attracted a large number of Internet café owners and computer room management staff.

　　complete function . WinRoute provides the firewall function, can guarantee the internal network security, has the NAT (Network address translation) function, may enable many machines to use the same IP address to access the Internet; The reverse proxy function can be implemented via port mapping, allowing external access to some services of the NAT-protected internal network The client can use the TCP/IP protocol without any other settings, and of course, there are many functions such as packet filtering, caching, level two proxy, authentication, mail server, domain name server and so on, so the powerful function is not to make you heartbeat! If so, you might want to install it right away to try it.

　　easy to install . WinRoute installation is very simple, basically only "Next" down, but the installation of the following two points to note:

1. When you select the installation directory, the installation directory should be placed on a hard disk or partition that is large enough to allow sufficient space for the cache.

2. If the operating system is NT, you need to do the following: Click the Control Panel/Network Properties/protocol and then press the Add button to add "WinRoute Kernel Drive" to the WinRoute after the installation of the directory to tell NT. So WinRoute is installed. You will be prompted to reboot the system, and the system can be used after reboot.

　　Basic settings for the service side . As a result of the broadband tariff reduction, now most of the Internet cafes and school room most of the use of broadband Internet access, so the proxy server uses dual network card, the following to the dual-card machine settings as an example to introduce.

For dual network card machine WinRoute need two IP address, an internal IP, an external IP, to ensure that the internal IP and LAN other IP repeat. Here you need to note that the external address is not set, use the automatic access to the address, and then unplug the network cable (because WinRoute has DHCP function, if not unplug the machine will automatically obtain IP address) then click the Setting menu, select Interface Table ( Interface table settings, appear as shown in figure (1) and then set the machine external address and subnet mask, of course, to ensure the uniqueness of each address. And then, as shown in figure (1),

500)this.width=500">

Figure 1

Select the external network card on the screen, click the "Properties" button, enable this network card NAT. As shown in figure (2):

500)this.width=500">

Figure 2

Next, set up the routing table, select Settings/advanced/routing table, in this setting, note that you only need to specify the default route to the external network card, (default Route), and click "Add" under the route table. Buttons destination and mask are 0.0.0.0 are the default routes. When setting, pay attention to the network card you choose. At this point the WinRoute server is basically ready to use. But the service efficiency is not very high at this time.

In order to improve the access speed of the client needs to set the WinRoute "Proxy", from the menu Settings/proxy server appears as shown in Figure (3), the settings for these labels is relatively simple, but the following points need special attention:

500)this.width=500">

Figure 3

1. The first is the proxy server's default listening port to get rid of, because now the online agent Hunter quite a lot, if not change this port, easy to leave security risks.

2. Cache-enabled (proxy server caching) must be enabled. Otherwise, the browsing speed slows down.

3. Continue aborted and Keep aborted to maintain a missing setting, that is, Continue aborted, this setting allows the server to still read the site content to the cache when the user interrupts a page, and can maintain a faster display speed when the user falls back to the page.

4. The time-to-live item is a setting that preserves the number of days for cached content. To 20 days more appropriate, if the time is too short, the server needs to frequent access to the page frequently read into the cache, the time is too long to make the cache become bloated, the server to retrieve the page will need a long time to improve the client's access speed.

5. Some Web sites may have a high frequency of access due to some kind of demand, such as chat sites or news sites, if we want to keep these sites in the cache longer, use the "TTL Advanced" option can be based on access to the object's address to set the number of days it can be saved in the cache, What's even more pleasing is that you can use the wildcard character "*".

6. If you use a level two agent to use the parent proxy, about the level two agent needs to indicate the IP and port number of the level two proxy server, all agent requests will be forwarded to the two Proxy server processing after the filming completes.

　　security Settings . Security issues are not negligible for WinRoute, because WinRoute Proxy server can use this proxy in the default state, and it leaves a security issue if you do not have permission settings. The consequences would be hard to predict if any embarrass were to be stared at. Therefore, it is necessary to WinRoute access permission settings, its permissions are set to the following three points.

500)this.width=500">

Figure 4

1. Set access to different user accounts or groups, click on the "Access" tab of Figure (3), show the picture shown in figure (4), and fill in the list of control rights. For example, for a specified site www.microsoft.com, allow the user group access, you can do this by clicking the Insert button, adding the [www.microsoft.com site, selecting the "User" group in the Avail list, click "Add" button to add the user group to the access to list, where members of the non-user group are not allowed to access the specified site. You can use the wildcard character at this URL address, and if you do not want the proxy server to work, no account will be set up and the wildcard "*" should be used to restrict access to any site.

2. You can set up places that local clients can access. Select Settings/advanced/security from the menu to start setting up security rules. Each of your network adapters can have a set of security rules. Select the network card you want to add a rule to, and then click the "Add" button, where the source and destination address can be host, address segment or fixed address, these addresses are based on IP, set the source and the destination address, then set the rules, permit or Deny. For the sake of insurance you can set up more than one rule, WinRoute generally check the security rules table, if you first encounter permit, then allow if you encounter the deny, if you do not have a rule about the address, allow.

　　Client Settings . By setting the gateway of the client machine to WinRoute internal IP, restarting the computer, you can connect to the Internet through a proxy server. Of course, this connection is restricted by the security rules set by WinRoute. The point to note here is that although IE browser can be browsed without any setting, but at this time the client browsing content will not be recorded to the server cache, in order to improve browsing speed, ie should be set to the following settings, point "Tools/Options/connection/LAN Settings" Check the use of Proxy server checkbox, Then fill in the server address and port number, and note that this port number is consistent with the server port. Because the server uses automatic address resolution, any TCP/IP protocol-based programs are available to clients.

WinRoute also has DNS and DHCP capabilities, so the machine installed WinRoute can also be DNS and DHCP server, the most gratifying is that the IP address within the LAN do not make any changes, so as to maintain the integrity of the original LAN.

At this point, do you feel the convenience of WinRoute, if you are interested in the http://www.winroute.com to download the trial.