skeep

Hi All, I’m skeep the creator of skeep VNC console. It’s been a few years since I have worked on that project and I know a lot of you have found it useful. The reason I’m back is I was wondering if there were any features people needed and whether there is interest in supporting me developing the changes or maybe a new app? Anyway feedback welcome let me know your thoughts. All the best Skeep

How about google apps for domain it is free for education?

*SOLVED* Sometimes, workstations that must be filtered are located behind a proxy that uses Microsoft ISA Server as a proxy (proxy chaining). Some proxies can be configured to expose the workstation's IP address in the HTTP header via the value of X-Forwarded-For:. Microsoft ISA integration with Websense software can be configured to do filtering lookups based on this value, rather than on the IP address of the downstream proxy. To filter workstations behind multiple proxies: Configure the downstream proxy to pass workstation IP addresses via X-Forwarded-For. See the proxy documentation for instructions. On the machine running Microsoft ISA Server, navigate to the WINDOWS\system32 directory. Open the file wsMSP.ini in a text editor. Add a new heading of: [configSection] Under the new heading add the following key: CheckXForwardedFor=1 NOTE If the X-Forwarded-For value is not found in the HTTP header when this feature is enabled, filtering lookups occur based on the IP address of the downstream proxy. Stop the ISA Server service via the Windows Services dialog box. The service is labeled as Microsoft Firewall. Start the ISA Server service via the Windows Services dialog box. Repeat steps 1-6 for each machine on which Websense ISAPI Filter is installed.

*SOLVED* Sometimes, workstations that must be filtered are located behind a proxy that uses Microsoft ISA Server as a proxy (proxy chaining). Some proxies can be configured to expose the workstation's IP address in the HTTP header via the value of X-Forwarded-For:. Microsoft ISA integration with Websense software can be configured to do filtering lookups based on this value, rather than on the IP address of the downstream proxy. To filter workstations behind multiple proxies: Configure the downstream proxy to pass workstation IP addresses via X-Forwarded-For. See the proxy documentation for instructions. On the machine running Microsoft ISA Server, navigate to the WINDOWS\system32 directory. Open the file wsMSP.ini in a text editor. Add a new heading of: [configSection] Under the new heading add the following key: CheckXForwardedFor=1 NOTE If the X-Forwarded-For value is not found in the HTTP header when this feature is enabled, filtering lookups occur based on the IP address of the downstream proxy. Stop the ISA Server service via the Windows Services dialog box. The service is labeled as Microsoft Firewall. Start the ISA Server service via the Windows Services dialog box. Repeat steps 1-6 for each machine on which Websense ISAPI Filter is installed.

Hi All, I had a thread going in the nix section but really the problem now lies with ISA so I thought I would start a new thread. We have a squid proxy ---> ISA 2006 with websense installed. All clients that connect to the squid server show their IP in websense as the squid server IP and not their own client IP. My question is does anyone know a way to make websense ignore the squid server IP and use the client IP. I have configured squid to forward on the x_forwarded_by attribute and I have a filter on ISA and can confirm that the client IP is being sent. However, this does not seem to affect the websense client IP address! Thanks

I have managed to swap the order of the ISAPI and this has made no difference. I take it that teh websense ISAPI is ignoring the previous ISAPI. I need a websense expert:confused:

OK ISA is seeing the correct IP but websense is not! I think it is the order of the ISAPI filters. I have the websense filter in position 9 and the x-forwarded-for in position 8. If i try to swap the positions I get The operation failed :A Web filter can be moved only into the positions of filters that have the same priority. Am i correct in thinking that the websense filter is running first and therefore, shows the wrong IP? Thanks

Installed and working could not have been easier!! Do you want to pop it on sourceforge Iain? I have some software on there called skeep VNC console so I could host it on Skeep VNC Console if you would like? Thanks again!!

I have pm'd you thanks

rapid iain! I'll wait and test yours

I found this but it is for IIS7 can this be adapted? X-Forwarded-For Log Filter for Windows Servers | .NET Developer's Journal

i think more McVities Chocolate Caramel Digestives! lol

Iain, If you can do that that would be great! Im sure i would not be the only one who would find it useful!!!

Unfortunately, it is for wired and wifi as we have staff who live on site

To explain why im using squid, I have created a capture page so that when someone access a web page they get redirected to a login page this page then after completing authentication adds the IP to a text file and then reconfigure squid. It works really well, not sure if i could do the same with iSA?

The squid server is on a guest network and this will be used by pupils and staff using their own equipment. We have websense installed on the ISA box and therefore need to monitor what pupils are looking at. This monitoring could be achieved at the squid end but it would be nice to have it all in one place. any ideas would be greatly received!

bugger! That is £1650 to forward on an IP address. Ok plan b!

according to the wiki it is supported in isa 2004/2006 X-Forwarded-For - Wikipedia, the free encyclopedia

are the two lines mentioned above correct?

I have added these two lines: acl localnet src 10.140.0.0/16 follow_x_forwarded_for allow localnet But the original IP is still not shown on iSA?

all working now i started again from scratch and its fine! Thanks

Does squid pass this on by default? Can ISA see this as the Client IP instead of the server?

Hi All, Can squid pass on the original IP address to a parent ISA server? At the moment in the isa logs it shows all traffic originating from the squid server. The reason I ask is that websense is on the ISA server and I want to be able to monitor traffic from a particular IP on the guest network. Thanks

It defiantly has permissions to view it. it is very strange that putting it directly in the config works but the txt doesn't! Not sure what to try next!

Thanks for the reply, When I point the conf at the txt file it does not work. If I enter the IP into the conf file directly it works. Is there anything special I need to do to get IP addresses working from an external file?