Author: Information source: network hits: 1897
Click to download CCPOXY software (including registration machine) and click to download the client software SOCKCAPV2.
Basic concepts of account management
The account management of proxy server CCProxy is divided into three parts. They are the allowable range, authentication method and account settings.
There are three options for the allowable range: all allowed, some allowed and some not allowed.
Allow All is the default state, which means that all clients are allowed to access the Internet. This method is suitable for applications that do not need to manage clients to access the Internet.
The allowed part means that only users who have joined the user list can surf the Internet, and users can be managed in various ways.
The disallowed part means that only users who have joined the user list are disallowed, and all other users are allowed.
There are six options for authentication type. This option is used to set the default account management mode. Editing a single user can also adopt a special account management mode for a single user.
1) IP address means to verify the identity of users through IP address;
2) MAC address means to verify the identity of the user through the MAC address (the physical address of the network card);
3) User/password means to verify the user's identity by user name and password;
4) User/password +IP address means that the user's identity is verified by user name, password and IP address at the same time;
5) User/password +MAC address means that the user's identity is verified by user name, password and MAC address at the same time;
6) IP+MAC means that the user's identity is verified by both IP address and MAC address.
Account settings:
New: You can create a new account.
Edit: You can modify the account.
Delete: you can delete the selected account.
Select All: Select all accounts.
Automatic scanning: This function is convenient for administrators to initialize account information. When setting up an account for the first time, the administrator can open all client machines, enter the starting IP address and ending IP address, and then click Start to automatically obtain the IP addresses, MAC addresses and machine names of all client machines in the LAN.
New account description
Account number-> newly-built
User name/group name: used to identify different accounts.
Password: used to set the password required by the client to access the Internet.
IP address /IP segment: it can be a single IP address or an IP segment. Such as192.168.0.192.168.0.1-192.168. When it is set to an IP segment, it means that all users in the IP segment share the permissions of the account.
MAC address: refers to the physical address of the client network card.
Maximum number of connections: refers to the maximum number of simultaneous active connections allowed by the client. -1 means an unlimited number of client connections.
Bandwidth (bytes per second): refers to the maximum bandwidth allowed by the client, which can be used to limit the internet speed of the client. -1 means unlimited bandwidth.
Service: You can specify the service items allowed for this account.
Website Filtering: You can select the website filtering that has been defined in Website Filtering.
Plan: You can select a plan that has been defined in the plan.
User Name/Password Verification Method Description and Precautions
This management mode mainly verifies the user's identity between the browser and the SOCKS5 agent.
If the authentication type with user/password is selected, when the client accesses the Internet through the browser, the browser will pop up a dialog box asking for the user name and password. When you start the browser to visit the website for the first time, you only need to enter your user name and password. When you visit a new website and open a new window from an opened browser, you don't need to enter the user name and password again, but you will need to enter the user name and password when you start a new browser to visit the website. Software accessing the Internet through SOCKS5 protocol also needs to fill in the user name and password in the proxy settings. Such as QQ.
Note: If you want to open mail agent, FTP agent, SOCKS4 agent and other services to the client, you must combine authentication methods such as IP address and MAC address, or create a new account and use IP address or IP segment management to open other services.
How to control the internet speed of the client?
Controlling the Internet access speed of clients requires two parameters in account properties: the maximum number of connections and bandwidth.
Maximum number of connections refers to the maximum number of clients that the server responds to at the same time. The proxy server will automatically suspend the redundant connection of this client until the client releases the responded connection.
Bandwidth (bytes per second) refers to the maximum byte traffic per second of the client.
Usually, we can set the maximum number of clients as 10 and the bandwidth as 10240 (that is, 10K). If you want to strictly control the use of netants by clients, you can appropriately reduce the bandwidth or the maximum number of connections.
Website filtering description
Website filtering can effectively control the websites visited by clients.
Operation: account number-> Website filtering
You can define different filtering rules for your website. Website filtering name: enter different website filtering names to identify different website filtering rules.
Website filtering is divided into site filtering, forbidden connection and content filtering.
Note: This is only the definition of website filtering rules. If you want to apply this website filtering rule, you need to edit the corresponding account, select and apply this rule.
Website filtering
In the edit box, you can enter multiple filtering sites, separated by semicolons. Site filtering supports wildcards (*,? )。
Such as: * .yahoo.com? . hotmail.comwww。 *. (same as organic) organic
If the site contains multi-level domain names, such as Sina, it includes www.sina.com.cn; Www.sina.com, you should use *. Sina. *; *.sina.* Not just *.sina.*.
Allow Sites, Prohibit Sites: Determines whether filtering is allowed or prohibited.
Note: Sites allowed in site filtering are only applicable to sites with simple structure (such as our company's site), not to sites such as 163 and Sina, because such sites have complex structures, and some information such as pictures on the page comes from other sites, which will cause problems such as incomplete page display.
throw out of gear
In the edit box, you can enter multiple prohibited contents, separated by semicolons. Here are some reference examples:
If you want to restrict clients from downloading files, you can use the. exe。 zip。 Rar to filter.
If you want to prevent clients from sending and receiving e-mail using webmail, you can use mail. To filter.
If you want to stop BBS chat on the client, you can use chat; Bbs to filter.
Content filtering
You can filter web pages that contain specific text. As long as the web page contains certain characters, it can be suppressed.
Content filtering: you can filter the content of this website, and you can filter multiple contents separated by semicolons. Such as: sex; Chat; travel
Note: Due to the use of full-text content filtering, this function will put some pressure on server resources.
How to realize the website filtering of accounts and matters needing attention?
I. Through account number-> Website filtering defines different website filtering rules.
Then select the account of the client that needs website filtering, edit the account, and select the previously defined website filtering rules in website filtering.
Note: Sites allowed in site filtering are only applicable to sites with simple structure, not to sites such as 163 and Sina, because the structure of such sites is complex, and some pictures and other information in the page come from other sites, which will cause problems such as incomplete page display.
Description of the schedule
The online time of the client is controlled through the time scheduling function.
Timetable is used to set the online time of the client.
Account number-> Plan: Define different plan rules.
Plan Name: You can enter different plan names to identify different plans. This logo name will be used for each user's account settings.
Sunday to Saturday: used to set online schedules for different working days.
If you need to control the time to minutes, you can set the time directly in the edit box. Time periods are represented by start time-end time, and different time periods are connected by+. For example, 07:30-11:30+13: 30-17: 30, that is, from 7: 30 am to 165438+ 0:30 pm and 65438+.
You can also click the button next to the edit box to pop up the timetable dialog box, which can be used to set the schedule of the corresponding working day.
There are 24 time choices in the timetable, representing different time periods. If you choose 0 1:00, you can surf the Internet at 00:00-0 1:00.
The time control used to indicate this time period is only valid for the selected service.
Note: The timetable is based on the server time, so be sure to pay attention to whether the server time is correct.
How to control account time?
I. Through account number-> Scheduling to define different scheduling rules.
Then select the account of the client that needs time control, edit the account, and select the previously defined schedule rule in the schedule.
How to manage accounts with multiple authentication methods?
First, the administrator manually adds an account:
1. account-create a new user and set the corresponding authentication method for the account (as shown in the figure: assuming user name+password +IP authentication method);
2.account— Create another user and set the corresponding authentication method for the account (as shown in the figure: assuming IP+MAC authentication method);
In this way, the mixed management of multiple verification methods is realized (see figure).
Note: At this time, the verification type displayed in the account is only the initial verification method of account management, which is not necessarily related to the actual verification method of the account.
Second, administrators use automatic scanning:
1. Select an authentication type (such as IP+MAC), run automatic scanning, and add all accounts (as shown);
2. Select the account whose authentication method needs to be changed for editing (as shown in the figure), and set the authentication method corresponding to the account (as shown in the figure: assuming user name+password+IP);
In this way, the mixed management of multiple verification methods is realized (see figure).
Note: At this time, the verification type displayed in the account is only the initial verification method of account management, which is not necessarily related to the actual verification method of the account.
How to use automatic scanning to get the computer name, IP address and MAC address of all clients?
Administrators can open all client machines, enter the starting IP address and ending IP address, and then click Start to automatically obtain the IP addresses, MAC addresses and machine names of all client machines in the LAN.
Why can't I get the MAC address of the client?
This situation generally has the following three reasons:
1) The server or client blocked port 137, and CCProxy needs to use port 137 to send UDP packets when scanning the MAC address of the client;
2) The LAN network environment is not good or the network is busy, and network congestion will also cause some MAC addresses to be unscannable;
3) NetBIOS protocol is not installed on the client.
Solution:
1) Close the firewall or antivirus software of the server and client, and open the port137;
2) modify the value of TimeoutMAC= in cproxy.ini, which is 200 by default and can be changed to 1000, indicating that the scanning time is 1 second;
3) The client installs NetBIOS protocol.
How to send information to the client?
If the client is Win98, it is required that WINPOPUP.EXE under the windows directory has been run. If it is Win2000/NT, the system has its own message receiving function.
Right-click in account management, enter the name of the other party's machine in the edit box above, enter the text to be sent in the edit box below, and click OK to send the information to the client. If you enter the * sign in the above dialog box, it can be sent to any machine in the LAN.
How to support domains and domain accounts?
CCProxy supports using an account of a local or LAN domain server as a username/password authentication account.
Parameter NTDomain=. In CCProxy.ini, it defaults to the domain of the server where CCProxy software is located, and can be changed to other domain names in the local area network;
The parameter ntuuserauth = 0 in ccproxy.ini is changed to 1, which can support domain accounts.
note:
1) When the service is enabled, the guest account cannot be enabled in the domain account, otherwise all users will be able to access the Internet;
2) When the service is enabled, it is only applicable to WWW and SOCKS5 service authentication;
3) If you want to provide website filtering, scheduling and other services for an account, you must create an account with the same user name and password in the account, and then manage the newly created account.
How to let users visit different websites at different time periods?
Different accounts can be set for this user, and different time schedules and website filtering rules can be set for each account, which can realize time-sharing management of this user.
For example, if users are only allowed to visit Sina website from 8:00- 10:00, and Yahoo website from11:00-12: 00, you can do the following:
1) Establish two website filtering rules, which only allow access to Sina website and only allow access to Yahoo website;
2) Establish two scheduling rules, 8:00- 10:00 and1:00-12: 00 respectively, and apply them to WWW service;
3) Create two new accounts for this user, and set corresponding time schedule and website filtering for them to realize time-sharing management.
How to let users only send and receive emails during working hours, and can send and receive emails and browse the web after work?
Assume that only user NEC is allowed to send and receive mail between 7: 00-1:30 and 13:30- 17:30, and other times are 00:00-07:00 and1/kloc-.
Analyzing this demand, it is not difficult to find such a rule: the client is not limited by time to send and receive mail, which means that we only need to manage the time of other services except the mail agent. Then, you can do the following:
1) account number-time schedule, set a rule time 1, as shown in the figure, and then click the … button behind Sunday to Saturday to select the corresponding time period, which will be applied to email selection, as shown in the figure;
2) Edit the NEC account, tick before the schedule and select time 1 Rule (as shown in the figure).
Of course, we can also do this and set up two accounts for this user.
1) An account only opens the mail proxy service, and the time rule is set to run the Internet at any time (in fact, the time rule can be omitted);
2) The other account is only open to services other than mail services, and the time rules are set to: 00:00-7:00,1:30-13: 30, 17:30-24:00.
How to prevent users from sending attachments when sending mail through the web?
Add content filtering; ; File name =. (Note: there is a space after the semicolon. If you have other filtered content, such as chatting, you must put it in the first place (as shown)
How to restrict users from using QQ?
If you want to prevent a client from accessing QQ, you only need to establish a website filtering rule to prohibit the website from being the IP address of the client. For example, if you want to block QQ used by 192. 168.0.3, you only need to establish a website filtering rule: select website filtering, and enter192.168.0.3 in website filtering; 2 18. 18.95.*; *.tencent.com, save the URL filtering rule, edit the user account, and select this URL filtering rule.
If you want to block an IP segment, you can't go to QQ. For example, if you want to block the machine QQ of192.168.0.192.168.0.255, you only need to establish a URL filtering rule: select URL filtering and enter/kloc-0 in URL filtering. 2 18. 18.95.*; *.tencent.com, save the URL filtering rule, edit the user account, and select this URL filtering rule.
To block the machine QQ of 192.168.0.192.168.0.19, you only need to establish a URL filtering rule: select URL filtering and enter/in URL filtering. 2 18. 18.95.*; *.tencent.com, save the URL filtering rule, edit the user account, and select this URL filtering rule.
How to get the proxy server address?
The proxy server address is the local IP address of the machine where the proxy server is installed.
This address refers to the IP address of the server in the LAN. The local IP address can be obtained from the settings dialog box of CCProxy. Generally speaking, you can automatically detect the local IP address in the settings dialog box. If the server has multiple network cards installed, you need to manually select: cancel automatic detection and select from the list. If you cannot determine the IP address of the server (such as DHCP user), you can also use the machine name of the server as the proxy server address.
Set up IE browser proxy to surf the internet
IE browser-> Menu tools-> Internet options-> Connect-> Local area network settings-> Select to use proxy server-> Advanced-> Proxy server settings.
Cancel using the same proxy server for all protocols;
Fill in the proxy server address in HTTP with port 808;
Safely fill in the proxy server address with port 808;
Fill in the proxy server address in FTP, and the port is 808;
Fill in the proxy server address in Gopher, and the port is 808;
Fill in the proxy server address in Socks, and the port is 1080.
Set up an online movie media player agent.
If you play a MediaPlayer movie directly in ie browser, since MediaPlayer does not support proxy server in IE, you need to install SocksCap on the client, and the specific setting method is the same as language chat.
Establishing BBS site on Net $ TERM
Menu file->; Telephone directory. Select the forum you want to connect to in the list. Like bbs.execpc.com. Then the following information.
It shows that the host name is bbs.execpc.com, the host /IP is empty, and the Telnet port is 23. Fill in the proxy server address in the host /IP,
Do it. Click the Connect button, and the blue display will appear: CCProxy Telnet & gtCCProxy ... and other prompt information. Enter.
Open bbs.execpc.com, press enter, and you can log in to bbs.execpc.com.
If you don't want to enter the open bbs.execpc.com every time, you need to follow the following steps:
1. Edit text file with Notepad.
If you log in to bbs.execpc.com, the text reads:
Output open bbs.execpc.com m
If you log in to bbs.tsinghua.edu.cn, the text will display:
Output bbs.tsinghua.edu.cn m
2. Save the file to the installation directory of NetTerm.
3. Open the phone directory dialog box, select the corresponding login server, select login script, and then select the login script you just saved.
Documents, okay.
Set up Java-based chat rooms (such as 263 games), stock online, securities online and futures online website agents in IE browser.
Because these chat rooms are all written in java (e.g. Netease chat. 163.com, 263 games), it is necessary to set up SOCKS4 proxy for Java virtual machine. The specific setting method is as follows:
1. In the settings dialog box of proxy server CCProxy on the server, select DNS.
2. Confirm that DNS is set in the network properties of the client and the IP address of the proxy server is filled in the DNS address.
3. Set the SOCKS proxy in IE browser.
4. Visit /tools/setjavaproxy.html in the IE browser of the client, and set the socks proxy of the java virtual machine:
Select set SOCKS proxy server, fill in the IP address of proxy server behind SOCKS proxy host, fill in 1080 for port, and then click OK.
How do I set Outlook to send and receive Hotmail messages?
Starting DNS service requires proxy server CCProxy, and the DNS address is set in the network properties of the client.
As long as the client has set up IE proxy, it can use outlook to send and receive hotmail messages without special settings. Because outlook uses IE's proxy to send and receive hotmail.
How to log in to FTP site in IE?
Method 1: (applicable to file uploading and downloading)
1. enable DNS service in CCProxy and open SOCKS4 protocol;
2. In the network properties of the client, TCP/IP specifies the DNS address, points to the IP address of the proxy server, and sets the gateway (IP of the proxy server);
3. Client IE settings, Internet options-connection-LAN settings-proxy server, do not fill in FTP, fill in the rest.
Method 2: (only applicable to file download)
1. Open FTP (Web) in CCProxy: 808;
2. In the network properties of the client, TCP/IP specifies the DNS address, points to the IP address of the proxy server, and sets the gateway (IP of the proxy server);
3. Client IE settings, Internet options-connection-LAN settings-proxy server, all filled in completely.
Note: In the client win98 environment, when setting DNS, you should set the host name (that is, the computer name of the client).
Note: According to the Regulations on the Protection of Computer Software dated 1 month/day, 2002, in order to learn and study the design ideas and principles contained in the software, anyone who uses the software by means of installation, display, dissemination, storage, etc. can use the software without the permission of the software copyright owner and pay no remuneration to him!