How to Use Proxy Server with Content Replication System

ID: Q189746

The information in this article applies to:

Microsoft Proxy Server version 2.0

SUMMARY

This article describes how to set up the Microsoft Content Replication System with Proxy Server. Content Replication System and Microsoft Content Deployment are referred to as CRS in this document.

There are two methods of using CRS with Proxy Server version 2.0:

Co-locate the CRS service on the Proxy Server 2.0 computer.
Install CRS on a separate computer located on the internal network behind the Proxy Server 2.0 computer. Use the Server Proxy feature of Proxy Server 2.0 to redirect the listen() call of the Microsoft CRS service. For more information about Server Proxy, please refer to the Microsoft Proxy Server documentation.

MORE INFORMATION

Co-locating CRS with Proxy Server 2.0

If CRS is installed on the Proxy Server computer, it can listen for connections from any network interface. For example, CRS servers on the Internet or an intranet can replicate data between themselves and the CRS service on the Proxy Server computer.

If the Proxy Server 2.0 packet-filtering feature has been selected (enabled), all connections from CRS servers on the Internet are blocked. All communications except Internet Control Message Protocol (ICMP) requests to and from the Proxy Server computer are blocked. However, Proxy clients that use any of the Proxy services still can communicate with the Internet through the use of the Proxy Server dynamic packet-filtering feature.

The instructions below outline how to create the necessary packet filter for a CRS server installed on the Proxy Server computer.

Adding the custom packet filters:

On the Packet Filters tab, click Security. In the Security dialog box, click Add.

Add the following custom filter:


    Direction - both
    Local port: fixed port - 507
    Remote port - ANY
    local host - default proxy external IP addr.
    Remote host - any

By default, the custom filters allow communication to and from any host on the Internet. If needed, modify the Local Host and Remote Host settings before you click OK.

Click OK.

Using Server Proxy of CRS with Proxy Server 2.0

These instructions must be followed exactly as stated; otherwise CRS does not function with the Server Proxy feature.

Install and configure the Microsoft Proxy Server computer.

Install the Winsock Proxy client on the CRS Server computer. If the Winsock Proxy client is already installed, REINSTALL IT. This can be done by connecting to the MSPCLNT share on the Proxy Server computer and executing Setup.exe from the root directory.

Test the Winsock Proxy client on the CRS Server computer. Open an MS- DOS prompt and type:
FTP FTP.MICROSOFT.COM
You should see a response similar to the following if the Winsock Proxy client is functioning:

Connected to ftp.microsoft.com.
220 ftp Microsoft FTP Service (Version 3.0).
User (ftp.microsoft.com:(none)):

After the Winsock Proxy client is working, additional settings are required for Server Proxy on the CRS Server computer. You must create *one* Wspcfg.ini file for the CRS Server computer.

Create the Wspcfg.ini file for use with the CRS service.
Copy and paste the four lines of information below to NotePad. DO NOT MANUALLY TYPE THE INFORMATION. Save this file as Wspcfg.ini in the directory where Crssrv.exe is located.

NOTE: Do not save the file in Unicode format.
```
      [crssrv]
      ServerBindTcpPorts=507
      Persistent=1
      KillOldSession=1 
```
NOTE: The CRS port (507) on the CRS Server computer will then be bound to the Proxy Server computer's port 507.

Verify that the Wspcfg.ini file does NOT have a .txt extension appended. This will occur if your Internet Explorer interface settings are set to default values. The file may appear as Wspcfg.ini.txt. Rename the file if needed.

If you are not using Access Control on the Winsock Proxy service, go to step 8. If Access Control is enabled on the Winsock Proxy service, you must grant the user account that starts the CRS service access to the Proxy Server computer.

This must be a domain user account, not a local account on the CRS Server computer. If it is a local account, create a new user account on the domain. Go to Start, point to Settings, click Control Panel, and double-click Services. Grant the new domain user account logon rights to all of the CRS services.

Give the new domain user account access to the Proxy Server computer. In the Winsock Proxy properties, select Permissions and give the new account the Unlimited Access right.

Restart the CRS Server computer.

After the CRS Server computer has restarted, it should automatically be listening on the external interface of the Proxy Server computer.

To test connectivity to the CRS services from a computer that is directly connected to the Internet, do the following:
1. On the test computer, point to Start, point to Run, and open Telnet.exe.
2. Choose CONNECT/REMOTE SYSTEM.
```
        HOST NAME: External IP address of the proxy server
        PORT:        507
        TERM TYPE: vt100 
```
3. After you are connected, you see a blank screen with a cursor in the top left corner. If not, re-check your settings.

Additional query words:

Keywords :
Version : WINNT:2.0
Platform : winnt
Issue type : kbhowto