TP-Link TL-WR1043ND v1 proxy setting

[nworbnhoj]

We are clearly missing something! There must be something that I do not understand about the Uni proxy server, or about what you have said in your posts.

What do you mean by:

...the main "proxy address" which everyone uses which are all in alphabets.

What do you mean by:

the numbered proxy address (172.xx.x.xxx) which has frequent disconnection with the servers.

[humantorch]

I guess so.

We are clearly missing something! There must be something that I do not understand about the Uni proxy server, or about what you have said in your posts.

What do you mean by:

...the main "proxy address" which everyone uses which are all in alphabets.

the numbered proxy address (172.xx.x.xxx) which has frequent disconnection with the servers.

Most of our IP addresses which we all use are in numbers (exp 172.xxx.xxx.xxx), but in my uni, there is a "common proxy address" which everyone uses which is in alphabets (exp, tmg.xxx.xxx.xxx , where the xxx are in alphabets). The uni recommends all students and staffs to use this "main address" as it has less disconnections from the servers and this is the only proxy that allows you to connect to the uni's websites such as student info, class status, lectures notes. But the downside of it is that it is pretty slow during the night when everyone uses it.

Next, we have a few more proxies which are in numbers. These proxies are very much faster compared to the main one as not many students and staffs are aware of it but you are unable to access the uni's websites to check on classes, students info...

nworbnhoj, could you tell me what you understand from this because I am not sure how much of it you do understand or maybe I have to think of a different explanation.

I did some more digging, my uni uses Microsoft Forefront Threat Management Gateway 2010. I guess the main proxy uses this as it starts as "tmg.xxxxx.xxxx.xx" while the other proxies are just (172.xx.x.xxx). I am not sure if this helps.

[nworbnhoj]

I am definitely NOT a network engineer, but ....

When you connect a router (Gargoyle) to a network (ISP or Uni) and configure DHCP on the WAN of our router, then the ISP/Uni provides your router with an IP address, a Gateway address, and a DNS address. I am guessing that your Uni is running a DNS server to translate tmg.xxxxx.xxxx.xx into 172.xx.x.xxx and that there are multiple instances of MS Forefront Threat Management Gateway running on different servers. The DNS server will direct you to one of the many instances which are "up", but when you use a particular instance ie 172.xx.x.xxx this it might be "up", or might be "down", hence the disconnections.

I am also guessing, that your Uni runs a Proxy server and requires all student traffic to pass thru the Proxy server on it's way to & fro the public Internet. Hence you get blocked if you try to go direct to the Internet via the Uni Gateway address.

A DNS server on the public Internet will not know about the tmg.xxxxx.xxxx.xx because it is a private address internal to the Uni.

I am also guessing, that your device is attempting to use a public DNS to lookup the proxy server address tmg.xxxxx.xxxx.xx, and failing.

What I do not understand is why you device is not getting it's DNS from your Gargoyle router, which is getting it from the Uni, which should do the translation correctly.

I am confident that it is a problem with your configuration (rather than a Gargoyle bug or some such)

I wonder if you tick Gargoyle - Connection - Basic - Internet/WAN - ☑ Force Clients To Use Router DNS Servers

[humantorch]

Thank you for the explanation . But what I don't understand is that why gargoyle is having this problem while on stock firmware doesn't . On both are running on default settings. Currently in class, will check on it when I get back.

[nworbnhoj]

The defaults of the TP-Link firmware may simply be different to the Gargoyle defaults. I cannot remember if the TP-Link firmware even gives you this option!

[humantorch]

Since later I have time, I will re install stock firmware and get a few screen shots to compare. I tried adding the DNS manually, it accepts the IP with numbers but not for the one with alphabets?! I wonder if anyone else has any ideas why?
"Force Clients To Use Router DNS Servers" doesn't seem to do anything either.

[nworbnhoj]

Sorry - I was not clear

Did you try together Gargoyle - Connection - Basic - Internet/WAN

• DNS Servers - Default DNS Servers Specified by ISP
• ☑ Force Clients To Use Router DNS Servers

Be sure to "Save Changes" and possibly even reboot your router and device (desperation creeping in!).

[humantorch]

Sorry - I was not clear

Which part?

Did you try together Gargoyle - Connection - Basic - Internet/WAN

• DNS Servers - Default DNS Servers Specified by ISP
• ☑ Force Clients To Use Router DNS Servers

Be sure to "Save Changes" and possibly even reboot your router and device (desperation creeping in!).

Tried it already.... even rebooting all my devices . Nothing seems to work. When I connect to my neighbor's wifi (stock firmware for linksys), the tmg proxy works, so definitely it is up and running. But mine just seems not to work.

[tapper]

try Use Custom MTU: set it to 1492 and untick Drop Ping From WAN Side

[humantorch]

Hi guys. I am truly very sorry for not replying for a long time. I just came back from a long camp (phones were strictly not allowed). I will reply in a few days time, need to clear so stuff first. Haven't tried the custom MTU settings yet.