In transparent mode, users will not authenticate.  If you need
authentication, then I think the best way would be to deny direct
outbound access from Green via outbound rules.  If users want to surf,
they must use (and authenticate to, if configured) the proxy.
 
Shaun


-----Original Message-----
From: [email protected] [mailto:[email protected]] 
Sent: Wednesday, April 01, 2009 6:05 PM
To: [email protected]
Subject: [Efw-user] Working with a 2wire adsl modem

I am having some problems to configure a 2wire adsl modem with an Endian
box.

I've installed Endian on a server for testing purposes. My local network
is a Windows Domain controlled one, I have 5 clients, one MS Windows
2003
Std Server acting as Domain Server, I have DHCp for my 5 clients, the
router that the provider is installing is a 2wire modem, 27x series (I
know about the security stuff about this modems, but the ISP (Prodigy)
only supplies this kind of hardware). So, local network, one Endian Box
with two network cards, GREEN + RED, GREEN interface is static ip, RED
interface is static ip. So basically I have:

 LOCAL                     ENDIAN                2WIRE
NETWORK       <---> GREEN    BOX   RED <--->     MODEM   <---> INTERNET
(192.168.10.0)                                (192.168.1.0)

I've enabled the Proxy service to server for my 5 clients with local
authentication option, the problem arises when I see that one of the
clients is accesing the internet without authenticating against the
proxy,
so I said, Damn! Transparent Proxy.

After some researching I found that the 2wire modem is a router, so it
is
doing its job routing traffic to internet from my local network :D.
Well,
I did some research and found that I could use my adls modem as just a
bridge and also found that I could configure Endian to do the
authentication job with PPPoE, so I made the configuration, but the
modem
just won't work with Endian, so I ended up going back to normal network
connection with the modem working as a router, but I really need to
authenticate all my traffic. So, after all this sad history :D, my
question is, Is there a way to avoid my users from accessing the
internet
without authenticating against my proxy and leave the 2wire modem acting
as router ?

Thanks in advance.


------------------------------------------------------------------------
------
_______________________________________________
Efw-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/efw-user

------------------------------------------------------------------------------
_______________________________________________
Efw-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/efw-user

Reply via email to