2 gateways

[patronu]

I have Kerio Winroute firewall 6.1 installed on my server.

The problem that i have is that in the network there are clients that have access to internet and some that do not have.

But I discovered that on a computer with access to internet there was WinGate installed and that computer gave access to internet to computers that normally don't have access to internet.

How can I see from kerio winroute if there is another gateway in my network without going to every client?

How can I block traffic to the clients behind the second gateway from kerio?

[egrath]

Hi,

if another computer on your network which has internet access has a proxy server installed you have two options:

1.) Connect to all machines on the net and issue a pslist and search for suspect processes (like wingate.exe, winroute.exe, etc....)

2.) Scan your network for known proxy ports (81, 8080, etc....) - or do a full scan of all ports and check for the one's who are not normally listening. nmap will do the job.

3.) Connect to all machines and inspect the routing table if someone has set up an illegal nat gateway (psexec and netstat)

Bye, Egon