Hi,

after reviewing my log files, i've found a few people whose outbound socks
usage is close to 9Gig for a 45 day period. 90% of is through IE, i can't
understand what is sending this amount of data outbound

if i stop the socks service, are there going to be any issues with just
general web surfing and secure sites, and with this affect exchange server

thanks in advance
Peter

"Peter B" <bscinc@hotmail.com> wrote in message
news:uTyR1uZxDHA.3216@TK2MSFTNGP11.phx.gbl...
> after reviewing my log files, i've found a few people whose outbound
socks
> usage is close to 9Gig for a 45 day period. 90% of is through IE, i
can't
> understand what is sending this amount of data outbound

It would be inbound, not outbound. Browsers download, not upload. On
top of that I have never seen a browser actually use the Socks
Service. Even if it does use it, the Socks Proxy specs would have to
have been explicitly put in the browser's Advanced Connection settings
(<IP#>, port:1080). Normally the Socks settings are blank by
default. Are you sure you haven't confused it with the Winsock
Service?

> if i stop the socks service, are there going to be any issues with
just
> general web surfing and secure sites, and with this affect exchange
server

You don't need the Socks Service. It is primarily meant for
non-windows clients. You can either shut it down.... or leave it run
but don't give permissions to any IP#s.

As far as Exchenge, they aren't even on the same planet. Exchange has
nothing to do with Socks Proxy and Socks Proxy has nothing to do with
Exchange.

--

Phillip Windell [CCNA, MVP, MCP]
WAND-TV (ABC Affiliate)
[url]www.wandtv.com[/url]

Hi Phillip,

from the report generator, it says socks, and it is 9gb outbound total
between 5 or 6 users. i'm suspecting they have something installed for
possible chatting or web cam, i'll have to take a look at their systems to
see if they or an application has changed these settings. in the past 4
years, i've never seen the outbound mb be > the inbound mb.

"Phillip Windell" <none> wrote in message
news:%23yw$xWcxDHA.2676@tk2msftngp13.phx.gbl...
> "Peter B" <bscinc@hotmail.com> wrote in message
> news:uTyR1uZxDHA.3216@TK2MSFTNGP11.phx.gbl...
> > after reviewing my log files, i've found a few people whose outbound
> socks
> > usage is close to 9Gig for a 45 day period. 90% of is through IE, i
> can't
> > understand what is sending this amount of data outbound
>
> It would be inbound, not outbound. Browsers download, not upload. On
> top of that I have never seen a browser actually use the Socks
> Service. Even if it does use it, the Socks Proxy specs would have to
> have been explicitly put in the browser's Advanced Connection settings
> (<IP#>, port:1080). Normally the Socks settings are blank by
> default. Are you sure you haven't confused it with the Winsock
> Service?
>
> > if i stop the socks service, are there going to be any issues with
> just
> > general web surfing and secure sites, and with this affect exchange
> server
>
> You don't need the Socks Service. It is primarily meant for
> non-windows clients. You can either shut it down.... or leave it run
> but don't give permissions to any IP#s.
>
> As far as Exchenge, they aren't even on the same planet. Exchange has
> nothing to do with Socks Proxy and Socks Proxy has nothing to do with
> Exchange.
>
> --
>
> Phillip Windell [CCNA, MVP, MCP]
> WAND-TV (ABC Affiliate)
> [url]www.wandtv.com[/url]
>
>

Ok, well, removing all permissions from Socks Proxy or shutting it
down would prevent that.


--

Phillip Windell [CCNA, MVP, MCP]
WAND-TV (ABC Affiliate)
[url]www.wandtv.com[/url]

"Peter B" <bscinc@hotmail.com> wrote in message
news:epnmxjmxDHA.2676@tk2msftngp13.phx.gbl...
> Hi Phillip,
>
> from the report generator, it says socks, and it is 9gb outbound
total
> between 5 or 6 users. i'm suspecting they have something installed
for
> possible chatting or web cam, i'll have to take a look at their
systems to
> see if they or an application has changed these settings. in the
past 4
> years, i've never seen the outbound mb be > the inbound mb.
>
> "Phillip Windell" <none> wrote in message
> news:%23yw$xWcxDHA.2676@tk2msftngp13.phx.gbl...
> > "Peter B" <bscinc@hotmail.com> wrote in message
> > news:uTyR1uZxDHA.3216@TK2MSFTNGP11.phx.gbl...
> > > after reviewing my log files, i've found a few people whose
outbound
> > socks
> > > usage is close to 9Gig for a 45 day period. 90% of is through
IE, i
> > can't
> > > understand what is sending this amount of data outbound
> >
> > It would be inbound, not outbound. Browsers download, not upload.
On
> > top of that I have never seen a browser actually use the Socks
> > Service. Even if it does use it, the Socks Proxy specs would have
to
> > have been explicitly put in the browser's Advanced Connection
settings
> > (<IP#>, port:1080). Normally the Socks settings are blank by
> > default. Are you sure you haven't confused it with the Winsock
> > Service?
> >
> > > if i stop the socks service, are there going to be any issues
with
> > just
> > > general web surfing and secure sites, and with this affect
exchange
> > server
> >
> > You don't need the Socks Service. It is primarily meant for
> > non-windows clients. You can either shut it down.... or leave it
run
> > but don't give permissions to any IP#s.
> >
> > As far as Exchenge, they aren't even on the same planet. Exchange
has
> > nothing to do with Socks Proxy and Socks Proxy has nothing to do
with
> > Exchange.
> >
> > --
> >
> > Phillip Windell [CCNA, MVP, MCP]
> > WAND-TV (ABC Affiliate)
> > [url]www.wandtv.com[/url]
> >
> >
>
>

thanks for the info Phillip

happy holidays
Peter

"Phillip Windell" <none> wrote in message
news:eyk4TGKyDHA.384@TK2MSFTNGP12.phx.gbl...
> Ok, well, removing all permissions from Socks Proxy or shutting it
> down would prevent that.
>
>
> --
>
> Phillip Windell [CCNA, MVP, MCP]
> WAND-TV (ABC Affiliate)
> [url]www.wandtv.com[/url]
>
> "Peter B" <bscinc@hotmail.com> wrote in message
> news:epnmxjmxDHA.2676@tk2msftngp13.phx.gbl...
> > Hi Phillip,
> >
> > from the report generator, it says socks, and it is 9gb outbound
> total
> > between 5 or 6 users. i'm suspecting they have something installed
> for
> > possible chatting or web cam, i'll have to take a look at their
> systems to
> > see if they or an application has changed these settings. in the
> past 4
> > years, i've never seen the outbound mb be > the inbound mb.
> >
> > "Phillip Windell" <none> wrote in message
> > news:%23yw$xWcxDHA.2676@tk2msftngp13.phx.gbl...
> > > "Peter B" <bscinc@hotmail.com> wrote in message
> > > news:uTyR1uZxDHA.3216@TK2MSFTNGP11.phx.gbl...
> > > > after reviewing my log files, i've found a few people whose
> outbound
> > > socks
> > > > usage is close to 9Gig for a 45 day period. 90% of is through
> IE, i
> > > can't
> > > > understand what is sending this amount of data outbound
> > >
> > > It would be inbound, not outbound. Browsers download, not upload.
> On
> > > top of that I have never seen a browser actually use the Socks
> > > Service. Even if it does use it, the Socks Proxy specs would have
> to
> > > have been explicitly put in the browser's Advanced Connection
> settings
> > > (<IP#>, port:1080). Normally the Socks settings are blank by
> > > default. Are you sure you haven't confused it with the Winsock
> > > Service?
> > >
> > > > if i stop the socks service, are there going to be any issues
> with
> > > just
> > > > general web surfing and secure sites, and with this affect
> exchange
> > > server
> > >
> > > You don't need the Socks Service. It is primarily meant for
> > > non-windows clients. You can either shut it down.... or leave it
> run
> > > but don't give permissions to any IP#s.
> > >
> > > As far as Exchenge, they aren't even on the same planet. Exchange
> has
> > > nothing to do with Socks Proxy and Socks Proxy has nothing to do
> with
> > > Exchange.
> > >
> > > --
> > >
> > > Phillip Windell [CCNA, MVP, MCP]
> > > WAND-TV (ABC Affiliate)
> > > [url]www.wandtv.com[/url]
> > >
> > >
> >
> >
>
>