Application Note
Using SiteManager as Web Proxy
And/or Mail Relay ServerThis guide explains how to configure a SiteManager, so devices on the Device side of it can use it to access as Web Proxy to access the Internet,
and/or use it as Mail Relay server for sending emails.

http://www.secomea.com
Version: 5.0, Jan.2014

Page 1 of 10

Table of Contents
1.

Introduction

3

2.

SiteManager Web Proxy and Mail Relay FAQ

3

3.

Setting up SiteManager as Web Proxy

4

3.1.

For uses on a Secomea hosted GateManager
3.1.1.
If you use equipment that cannot auto-detect web proxy settings
3.1.2.
If you are not using DHCP on the DEV interface

444

3.2.

If you are using your own GateManager

5

4.

Setup SiteManager as Mail Relay server

5

4.1.

For users on a Secomea hosted server
4.1.1.
Setup the mail client on your device or PC

5
6

4.2.

If you are using your own GateManager

6

Appendix A, Enable Web Proxy, own GateManager

7

Appendix B, Enable Mail Relay, Own GateManager

9Notices

10Using SiteManager as Web Proxy or Mail Relay server

Page 2 of 10

1.

Introduction
Prerequisites for this guide are: You have access to configure the Web GUI of the SiteManager.
 Devices that should access the Internet or a mail server, should be either
DHCP IP assigned from the Dev port of the SiteManager, or should bepossible to configure to use the SiteManager’s Dev port as Web Proxyand/or SMTP server.

 You are using a Secomea hosted GateManager server (If you are using
your own GateManager server, you should consult Appendix A and/or B toensure the GateManager server is configured to relay web and mail traffic,
and that your network is setup accordingly)

2.

SiteManager Web Proxy and Mail Relay FAQ
Q: Does the SiteManager function as a Web Proxy directly to the Internet?
A: No. It merely relays the traffic via the existing encrypted connection to theGateManager, and from there it is routed to the Internet.
_______________
Q: Does the SiteManager function as a SMTP server?
A: No. Just like the Web Proxy it relays the email back to the GateManager,
and relies on the GateManager to relay it further to a SMTP server.
_______________
Q: Does the SiteManager send traffic directly through the corporate firewall onthe Uplink side?
A: No. The SiteManager makes use only of the existing GateManager connection.
_______________
Q: Does the customer’s firewall risk being source for mail traffic or access toundesired web sites?
A: No. The source for emails and web traffic will be the GateManager itself.
Therefore it is also vital that it is not abused (refer to Secomea’s terms of use)_______________
Q: I am behind a SiteManager in China. Can I get access to my web applications in Europe?
A: Yes. If the GateManager is placed in Europe, this will be where the Internetrules are applied.
_______________
Q: Can I use the web proxy for video streaming and VoIP traffic.
A: Yes and No. Since the traffic is relayed back through the GateManager you
should not expect good performance. Note that Secomea holds the right toblock for abuse or continuous persistent traffic on the hosted GateManager
servers. If you have your own server it will depend on your own requirement for
telephone and/or video quality.
_______________
Q: Can I use it for accessing Internet sites with other protocols.
A: No. Only web traffic (http/https) and mail (port 25) are supported.
_______________
Q: Can I configure the SiteManager to require login to the Web Proxy or SMTP
server.

Using SiteManager as Web Proxy or Mail Relay server

Page 3 of 10

A: No. The implemented features do not support authentication.
_______________
Q: Can the SiteManager be configured for filtering of accessible web addresses.
A: No. Filtering could in principle be done on the Web Proxy that theGateManager forward the request to. Secomea’s hosted GateManagers are notconfigured to perform any filtering.
_______________
Q: Can the SiteManager operate as a “Transparent Web Proxy”.
A: No.

3.

Setting up SiteManager as Web Proxy

3.1. For uses on a Secomea hosted GateManager
By default a SiteManager is setup for Web Proxy via Secomea’s hosted
GateManager servers.
To verify the Web proxy settings enter menu GateManager  Web Proxy:

Refer to the Online Help for details on each of the settings.
Note, however, the following:
3.1.1. If you use equipment that cannot auto-detect web proxy settings
You may have devices that delivers or retrieves information from the Internet,
but do not support automatic extraction of Web Proxy settings that are distributed in the PAC file from the SiteManager’s DHCP IP assignment.
You will have to specify in your device the proxy port (8080) and the remote
Web Proxy server address (which is the IP address of the SiteManager’s DEVinterface,- see menu System  DEVx)
3.1.2. If you are not using DHCP on the DEV interface
You may have reasons for not enabling DHCP on the DEV interface. This
could be a security precaution to ensure that not just anyone can connect alaptop to the device network and get Internet access, or it could be that aDHCP server already exists in the device network.
In that case you must manually enter the proxy settings into your web
browser. Open e.g. MS Internet Explorer and enter menu Tools  InternetOptions  Connections LAN SettingsProxy ServerUsing SiteManager as Web Proxy or Mail Relay server

Page 4 of 10

3.2. If you are using your own GateManager
The default symbolic name “WEBPROXY” corresponds to configuration on
Secomea’s hosted servers and is the default value for an installed
GateManager.
You may choose another name ref. the procedure of Appendix A

4.

Setup SiteManager as Mail Relay server

4.1. For users on a Secomea hosted server
In order to use the SiteManager as Mail Relay server in conjunction with
Secomea’s hosted GateManager servers you must enter the SiteManager
menu GateManager  Server Relay and create the following Server Relay:

The server address (MAIL), corresponds to a symbolic name on theGateManager server that directs the mails to a SMTP server.
The Server Virtual address should just specify the SMTP port DEV1:25 (assuming DEV1 on the SiteManager is used). No other port than 25 can be specified.

Using SiteManager as Web Proxy or Mail Relay server

Page 5 of 10

4.1.1. Setup the mail client on your device or PC
The device or PC that should send emails via the SiteManager must be located on the DEV side of the SiteManager.
Just specify the SiteManager’s DEV1 IP address as SMTP server in youremail client.
NOTE: the mail relay feature does not support encryption or connection toSMTP servers that require login credentials.

4.2. If you are using your own GateManager
When using your own GateManager you can follow the same procedure asin section 4.1 but you need to enture that the GateManager is setup to support the MAIL relay alias.
Refer to Appendix B for or configuring the GateManager settings.

Using SiteManager as Web Proxy or Mail Relay server

Page 6 of 10

Appendix A, Enable Web Proxy, own GateManager
You will need to be logged into the server with a Server Administrator account.
1. Select the ROOT domain and the Relays tab, and checkmark the Domain
Relay Settings as follows:

2. Under Web Proxy Target Names, add the following entry:
WEBPROXY=127.0.0.1:3128"WEBPROXY" is the logical name that is used in the SiteManager (Seescreenshot in section 3"3128" is the default port number of the GateManager’s local Web proxy.
Note: Since the connection is port mapped the port does not have to be
the same as the default web proxy port configured in the SiteManager,
namely port 8080. This port is the web proxy port most commonly used byconnected devices and applications, such as web browsers.

Using SiteManager as Web Proxy or Mail Relay serverPage 7 of 10

Note: If using a Web Proxy external to the GateManager just change theIP address for the WEBPROXY alias(e.g. WEBPROXY=192.168.100.254:8080)

Using SiteManager as Web Proxy or Mail Relay server

Page 8 of 10

Appendix B, Enable Mail Relay, Own GateManager
Under Server Relay Target Names, add the following entry:
MAIL=x.x.x.x:25"MAIL" is the symbolic name that is used in the SiteManager (See screenshot in section 4.1“x.x.x.x” denotes the IP address of your mail server or mail relay. This is typically the same as the one configured under Server  Config  Mail Settings.
"25" is the default SMTP port of the relay server. Note that the GateManager
will not support relaying of encrypted mails or relaying to mail servers that
require login credentials.

Note: In the example above the corporate server 172.16.14.12 is Mail Relay
server for this GateManager. The mail server must be configured to accept
relaying of mail from the GateManager.

Using SiteManager as Web Proxy or Mail Relay server

Page 9 of 10

Notices
Publication and Copyright© Copyright Secomea A/S 2011-2014. All rights reserved. You may downloadand print a copy for your own use. As a high-level administrator, you may use
whatever you like from contents of this document to create your own instructions for deploying our products. Otherwise, no part of this document may becopied or reproduced in any way, without the written consent of Secomea A/S.
We would appreciate getting a copy of the material you produce in order tomake our own material better and – if you give us permission – to inspire otherusers.

Trademarks
LinkManager™, GateManager™ and SiteManager™ are trademarks ofSecomea A/S. Other trademarks are the property of their respective owners.

Disclaimer
Secomea A/S reserves the right to make changes to this publication and to theproducts described herein without notice. The publication of this document does
not represent a commitment on the part of Secomea A/S. Considerable effort
has been made to ensure that this publication is free of inaccuracies and omissions but we cannot guarantee that there are none.
The following paragraph does not apply to any country or state where such provisions are inconsistent with local law:
SECOMEA A/S PROVIDES THIS PUBLICATION "AS IS" WITHOUTWARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING,BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITYOR FITNESS FOR A PARTICULAR PURPOSESECOMEA A/S SHALL NOT BE LIABLE FOR ANY DIRECT, INDIRECT,INCIDENTAL, CONSEQUENTIAL, OR OTHER DAMAGE ALLEGED INCONNECTION WITH THE FURNISHING OR USE OF THIS INFORMATION.

Using SiteManager as Web Proxy or Mail Relay serverPage 10 of 10