Bindings tab contents.gifprev1.gifnext1.gif

Bindings tab

wingate200000024.gif Back to services

wingate200000026.gif

The Bindings tab is central to the security of the WinGate firewall. Binding a service to an interface means that that service is only accessible if the connection comes in on that interface. With WinGate, bindings can be configured to allow access on one, several or all of the available interfaces. The Bindings tab lists all the available interfaces. LAN cards, Dialer profiles and the localhost address will be included. You can select the interfaces that are allowed access to the service.

For example

On most LANs, you want your WWW proxy to only be accessible to the people on you network. Simply select the Specify interfaces… option and ensure that your LAN card (probably 192.168.0.1) and localhost (127.0.0.1) are the only items in the Bound list.

In the picture above, we have bindings to the LAN card and 203.96.8.238, which is on the Internet. We specified this card so we can let people look at our web pages. We would enable this by selecting the Specify interfaces… option.

Note that with out a binding to 127.0.0.1, the local machine can not use that service.

Lite users:

Lite users will find that their remote control service can only bind to 127.0.0.7. This is a license restriction. Upgrading to Pro will allow the service to be accessed from machines other than the localhost. This demonstrates the working of bindings. Only machines connecting to 127.0.0.1 can connect, and because that has to be the machine that WinGate is on, then you can only connect to WinGate on the local machine.

Typical Binding suggestions:

Allow binding to only your LAN addresses for the telnet proxy.

Allow all bindings for a mapping to a SMTP server.

If you run a WWW server through WinGate, allow all interfaces.

In general you do not need bindings to your dialer profiles.

Security tips:

For the best security, only bind each service to your LAN card and localhost. If you have multiple segments, bind to each segment. Dont allow any bindings to dialer profiles.