How to Add a Large Number of Domain Filters in Proxy Server 2.0

ID: Q217200

The information in this article applies to:

Microsoft Proxy Server version 2.0

IMPORTANT: This article contains information about editing the registry. Before you edit the registry, make sure you understand how to restore it if a problem occurs. For information about how to do this, view the "Restoring the Registry" Help topic in Regedit.exe or the "Restoring a Registry Key" Help topic in Regedt32.exe.

SUMMARY

In the Proxy Server 2.0 user interface limits, you can enter domain filters one at a time. Larger numbers of filters can be added using the following two methods.

MORE INFORMATION

Method 1

On the Service Properties tab for Web Proxy, select Server Backup, and then choose a directory location for the backup file.

WARNING: Altering the server backup file may render your Proxy Server computer unusable. Be sure to make an extra copy of the server backup file in case you need to restore your original configuration.

Go to the backup directory and open the most recent backup file in Notepad.

If you are granting access to all domains, except those you want to deny access to, then find the heading labeled [@MSP_DenyDomainFilters] and enter the domains you want to filter using the following syntax:
NDDF0=domain1_name.com
NDDF1=domain2_name.com
ADDF2=10.10.10.10;255.255.255.255
ADDF3=10.10.10.11;255.255.255.255

If you are denying access to all domains, except those you want to grant access to, find the heading labeled [@MSP_GrantDomainFilters] and enter the domains you want to filter using the following syntax:
NGDF0=domain1_name.com
NGDF1=domain2_name.com
AGDF2=170.70.70.10;255.255.255.255
AGDF3=170.70.70.11;255.255.255.255

To confirm your correct use of the syntax, (before you begin) you may want to enter several entries manually from the user interface, and then perform a server backup and view the entries in the backup file.

When you finish entering the listing of desired domain filters, do the following:
1. Close the file and click Server Restore.
2. Choose Full Restore.
3. Browse and select the file that you just modified, then click Open.
4. Click OK, and then click Apply (if available).

To view your added domain filters, click Security, and choose Domain Filters.

Method 2

You can also enter large number of domain filters using the registry. To do this perform the following steps:

WARNING: Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.

For information about how to edit the registry, view the "Changing Keys And Values" Help topic in Registry Editor (Regedit.exe) or the "Add and Delete Information in the Registry" and "Edit Registry Data" Help topics in Regedt32.exe. Note that you should back up the registry before you edit it. If you are running Windows NT, you should also update your Emergency Repair Disk (ERD).

Click Start, click Run, enter Regedt32.exe, and then click OK.

Open the following registry key:
HKLM\System\CCS\Services\W3Proxy\Parameters\DoFilter

To confirm your correct use of the syntax, (before you begin) you may want to enter several entries manually from the user interface, and then open Registry Editor to view the values for the correct syntax.

If you are granting access to all domains, except those you want to deny access to, open the registry key labeled DenySites.

To deny certain domain names, double-click on the Domains value. In the Mult-String Editor, add the domain names sequentially on separate lines using the following syntax:
domain1_name.com
domain2_name.com
domain3_name.com
domain4_name.com

To deny certain IP addresses, add each address individually by doing the following:
1. In Registry Editor, choose Edit, select Add Value, and then enter IPSite# (incrementing each # for additional IP address).
2. Select a REG_SZ Data Type, and the click OK.
3. In the String Editor, add each address with the appropriate IP subnet and the address syntax as follows:
  255.255.255.255 10.15.10.15

If you are denying access to all domains, except those you want to grant access to, find the registry key labeled GrantSites.

To grant access to certain domain names, do the following:
1. Double-click on the Domains value.
2. In the Mult-String Editor, add the domain names sequentially on separate lines using the following syntax:
  domain1_name.com
  domain2_name.com
  domain3_name.com
  domain4_name.com

To grant access to certain IP addresses, add each address individually by doing the following:
1. In Registry Editor, choose Edit, select Add Value, and then enter IPSite# (incrementing each # for additional IP address).
2. Select a REG_SZ Data Type, and then click OK.
3. In the String Editor, add each address with the appropriate IP subnet and address syntax as follows:
  255.255.255.255 10.15.10.15

Before closing the Registry Editor, you must enter one additional value.

In the DoFilters key, if you are using the DenySites subkey, open the NumDenySites value, and enter the exact total number of both domain names and IP address entries in the DenySites key (for example, enter 8 in the NumDenySites value if you have entered five domain names and three IP sites).

If you are using the GrantSites subkey, then enter the corresponding total number in the NumGrantSites value in the DoFilters key.

Additional query words:

Keywords : prodprx2
Version : winnt:2.0
Platform : winnt
Issue type : kbhowto