Re: [Efw-user] Proxy and Windows Update

[Mark Clarke]

Just edit the squid.conf file to have no authentication for the MS web 
site. It can't be done from the front end.

http://wiki.squid-cache.org/SquidFaq/WindowsUpdate

http://wiki.squid-cache.org/SquidFaq/WindowsUpdate?highlight=%28Window%29|%28Update%29|%28authentication%29#How_do_I_stop_Squid_popping_up_the_Authentication_box_for_Windows_Update.3F
 



On 07/09/2011 17:08, Giovanni Vecchi wrote:
>> Just to isolate the issue if you can try once to remove authentication
>> and try...
> I'm really in trouble because proxy is still in action, if I disable
> authentication, company users will not be able to surf the internet.
> what other tests can I do?
>
> Il contenuto di questa comunicazione ha natura riservata ed è destinato 
> esclusivamente alla persona o ente cui essa è indirizzata. Qualsiasi forma di 
> utilizzo non autorizzato del contenuto di questo messaggio non è consentito. 
> Se non siete il destinatario designato di questo messaggio e del suo 
> contenuto Vi preghiamo di comunicarlo immediatamente al mittente e di 
> distruggere il messaggio ed i suoi eventuali allegati.
> This comunication is confidential and intended for the addressee(s) only. Any 
> form of unauthorized use of the content of this e-mail is not permitted.If 
> you are not the intended recipent of this message and its contents, please 
> notify the sender immediately and delete this message and all its attachments.
>
> --
> Using storage to extend the benefits of virtualization and iSCSI
> Virtualization increases hardware utilization and delivers a new level of
> agility. Learn what those decisions are and how to modernize your storage
> and backup environments for virtualization.
> http://www.accelacomm.com/jaw/sfnl/114/51434361/
> ___
> Efw-user mailing list
> Efw-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/efw-user


--
Using storage to extend the benefits of virtualization and iSCSI
Virtualization increases hardware utilization and delivers a new level of
agility. Learn what those decisions are and how to modernize your storage 
and backup environments for virtualization.
http://www.accelacomm.com/jaw/sfnl/114/51434361/
___
Efw-user mailing list
Efw-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/efw-user

[Efw-user] Using Samba 2 for EFW Proxy User DB?

[Mark Clarke]

Hi all,

Is it possible to use a samba 2 user db for authentication of squid in
endian firewall? Is it possible to use samba 3? I read that it is
possible but it doesn't look that way from my experience.

thanks

Mark


===

Jumping Bean - Your Java and Linux Experts
http://www.JumpingBean.co.za

Linux Training - Linux Professional Institute Approved Training Partner
http://www.LinuxCertification.co.za

Drupal Training - Professional Drupal Training
http://www.learndrupal.co.za

Cyber Connect - More than just broadband - Bonded ADSL, WiMAX, MetroNet. For 
all you WAN connection needs
http://www.CyberConnect.co.za 

Tel: 011-781 80 14
Fax: 011-781 80 15
===
Disclaimer

Any views or opinions presented in this email are solely those of the author 
and do not necessarily represent those of the company. Employees of Cyber 
Designs are expressly required not to make defamatory statements and not to 
infringe or authorize any infringement of copyright or any other legal right by 
email communications. Any such communication is contrary to company policy and 
outside the scope of the employment of the individual concerned. The company 
will not accept any liability in respect of such communication, and the 
employee responsible will be personally liable for any damages or other 
liability arising.

--
Learn how Oracle Real Application Clusters (RAC) One Node allows customers
to consolidate database storage, standardize their database environment, and, 
should the need arise, upgrade to a full multi-node Oracle RAC database 
without downtime or disruption
http://p.sf.net/sfu/oracle-sfdevnl
___
Efw-user mailing list
Efw-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/efw-user

[Efw-user] How to restart red interface from command line

[Mark Clarke]

Hi all,

Does anyone know the efw command to restart the red interface from the
command line and have custom firewall rules fire at the same time? Need
to find a way to close all connections after 12:00pm.

thanks

Mark


===

Jumping Bean - Your Java and Linux Experts
http://www.JumpingBean.co.za

LPI Training - Linux Professional Institute Approved Training Partner
http://www.LinuxCertification.co.za

IP-PBX - Call Centre or Business VOIP/IP-PBX
http://www.ip-pbx.co.za

Cyber Connect - More than just broadband
http://www.CyberConnect.co.za 

Tel: 011-781 80 14
Fax: 011-781 80 15
===
Disclaimer

Any views or opinions presented in this email are solely those of the author 
and do not necessarily represent those of the company. Employees of Cyber 
Designs are expressly required not to make defamatory statements and not to 
infringe or authorize any infringement of copyright or any other legal right by 
email communications. Any such communication is contrary to company policy and 
outside the scope of the employment of the individual concerned. The company 
will not accept any liability in respect of such communication, and the 
employee responsible will be personally liable for any damages or other 
liability arising.

--
This SF.net email is sponsored by 

Make an app they can't live without
Enter the BlackBerry Developer Challenge
http://p.sf.net/sfu/RIM-dev2dev 
___
Efw-user mailing list
Efw-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/efw-user

[Efw-user] SMTP Proxy Allow Access from Specific External IPs Only

[Mark Clarke]

Hi all,

Is it possible to use external access rules to limit which IPs can 
access port 25 on endian in combination with smtp proxy? ie. only accept 
port 25 from ip address xx.xx.xx.xx and then pass it through endians 
SMTP proxy?

I would prefer to use port forwarding only to the internal mail server 
but, although I am  sure there used to be a source IP filter on the port 
forwarding rules, it appears to have disappeared now. Has this feature 
been removed from the community edition?

regards

Mark

--
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
___
Efw-user mailing list
Efw-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/efw-user

[Efw-user] How to allow skype with authenticating proxy?

[Mark Clarke]

Hi all,

We would like to allow skype access but have an authenticating proxy for 
web access setup. This is the only way to access port 80/443 etc. I have 
tried adding the proxy setting we use for Firefox into the skype proxy 
setting page but it does not work. We are using Skype on Ubuntu Linux.

Thanks



--
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf
___
Efw-user mailing list
Efw-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: [Efw-user] Endian use %97 of ram

[Mark Clarke]

could be you are running ntop and its taking a lot of memory


Tunç YURDAKUL wrote:
> Hi,
> Nobody have any idea ?
> Tunç
>
> - Original Message -
> *From:* Tunç YURDAKUL 
> *To:* efw-user@lists.sourceforge.net
> 
> *Sent:* Wednesday, May 06, 2009 11:15 AM
> *Subject:* Re: [Efw-user] Endian use %97 of ram
>
> Hi,
>  
> I have 2Gb of ram.
> For use proxy and firewall for 60 users.
> For use 3 domain 150 mail adresses for SMTP scanner.
>  
> In System Status Information list;
> - All services are running, except;
> 1- DHCP server
> 2- SLProxy
> 3- VPN (Ipsec)
>  
> Now, under memory status, ram usage %95.
>  
> Which service use all ram capacity or
> Why Endian use almost all capacity of ram?
>  
> Thanks all
>  
> Tunç
>  
>  
>  
> - Original Message -
>
> *From:* Marc Fellman 
> *To:* efw-user@lists.sourceforge.net
> 
> *Sent:* Wednesday, May 06, 2009 9:47 AM
> *Subject:* Re: [Efw-user] Endian use %97 of ram
>
> Hi. 
>
> This is very normal for Linux. Much will be cache. Although
> you might also have not enough RAM but that's not clear from
> you're question. How much ram does the server have?
>
> Met vriendelijke groet / With kind regards
>
> Marc Fellman
>
>
> Send with my iPhone. 
> Verstuurd met mijn iPhone. 
>
> Op 6 mei 2009 om 08:34 heeft Tunç YURDAKUL  > het volgende geschreven:\
>
>> Hello,
>> I have Endian 2.2rc3
>> Nowadays my Endian uses %97 ram of total memory.
>> Why system very busy? Which service do this? Where can i
>> check and watch it?
>> Thanks
>>
>>
>> __ Information from ESET NOD32 Antivirus, version of
>> virus signature database 4054 (20090505) __
>>
>> The message was checked by ESET NOD32 Antivirus.
>>
>> http://www.eset.com
>> 
>> --
>> The NEW KODAK i700 Series Scanners deliver under ANY
>> circumstances! Your
>> production scanning environment may not be a perfect world -
>> but thanks to
>> Kodak, there's a perfect scanner to get the job done! With
>> the NEW KODAK i700
>> Series Scanner you'll get full speed at 300 dpi even with all
>> image
>> processing features enabled. http://p.sf.net/sfu/kodak-com
>> ___
>> Efw-user mailing list
>> Efw-user@lists.sourceforge.net
>> 
>> https://lists.sourceforge.net/lists/listinfo/efw-user
>
>
> __ Information from ESET NOD32 Antivirus, version of
> virus signature database 4054 (20090505) __
>
> The message was checked by ESET NOD32 Antivirus.
>
> http://www.eset.com
>
> 
> 
> 
> --
> The NEW KODAK i700 Series Scanners deliver under ANY
> circumstances! Your
> production scanning environment may not be a perfect world -
> but thanks to
> Kodak, there's a perfect scanner to get the job done! With the
> NEW KODAK i700
> Series Scanner you'll get full speed at 300 dpi even with all
> image
> processing features enabled. http://p.sf.net/sfu/kodak-com
>
>
> __ Information from ESET NOD32 Antivirus, version of
> virus signature database 4054 (20090505) __
>
> The message was checked by ESET NOD32 Antivirus.
>
> http://www.eset.com
>
> 
> 
> ___
> Efw-user mailing list
> Efw-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/efw-user
>
>
>
> __ Information from ESET NOD32 Antivirus, version of
> virus signature database 4054 (20090505) __
>
> The message was checked by ESET NOD32 Antivirus.
>
> http://www.eset.com
>
>
>
> __ Information from ESET NOD32 Antivirus, version of virus
> signature database 4054 (20090505) __
>
> The message was checked by ESET NOD32 Antivirus.
>
> http://www.eset.com
>
>
> __ Information from ESET NOD32 Antivirus, version of virus
> signature database 4054 (20090505) __
>
> The message was checked by ESET NOD32 Antivirus.
>
> http://

Re: [Efw-user] Endian use %97 of ram

[Mark Clarke]

Linux nearly always show all memory as used.

http://sourcefrog.net/weblog/software/linux-kernel/free-mem.html

Tunç YURDAKUL wrote:
>
>
>   In status \ system status section \ memory
>
>
>
>
>
>   Memory
>
>   *Size*  *Used*  *Free*  *Percentage*
> *RAM* 2074516 2021724 52792   
>
>   
>
>   97%
> *-/+ buffers/cache*   1006536 1067980 
>
>   
>
>   48%
> *Swap*530136  64  530072  
>
>   0%
>
>   
> *shared*  0
> *buffers* 180376
> *cached*  834812
>
>
>
>  Original Message -
>
> *From:* compdoc 
> *To:* efw-user@lists.sourceforge.net
> 
> *Sent:* Thursday, May 07, 2009 4:15 PM
> *Subject:* Re: [Efw-user] Endian use %97 of ram
>
> Where are you seeing this memory usage? On the Status->system
> graphs page?
>
>  
>
>  
>
>  
>
>  
>
> *From:* Tunç YURDAKUL [mailto:tyurda...@gmx.net]
> *Sent:* Thursday, May 07, 2009 6:51 AM
> *To:* efw-user@lists.sourceforge.net
> 
> *Subject:* Re: [Efw-user] Endian use %97 of ram
>
>  
>
> Hi,
>
> Nobody have any idea ?
>
> Tunç
>
>
>
> __ Information from ESET NOD32 Antivirus, version of virus
> signature database 4059 (20090507) __
>
> The message was checked by ESET NOD32 Antivirus.
>
> http://www.eset.com
>
> 
> 
> --
> The NEW KODAK i700 Series Scanners deliver under ANY
> circumstances! Your
> production scanning environment may not be a perfect world - but
> thanks to
> Kodak, there's a perfect scanner to get the job done! With the NEW
> KODAK i700
> Series Scanner you'll get full speed at 300 dpi even with all image
> processing features enabled. http://p.sf.net/sfu/kodak-com
>
>
> __ Information from ESET NOD32 Antivirus, version of virus
> signature database 4059 (20090507) __
>
> The message was checked by ESET NOD32 Antivirus.
>
> http://www.eset.com
>
> 
> ___
> Efw-user mailing list
> Efw-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/efw-user
>
>
>
> __ Information from ESET NOD32 Antivirus, version of virus
> signature database 4059 (20090507) __
>
> The message was checked by ESET NOD32 Antivirus.
>
> http://www.eset.com
>
>
>
> __ Information from ESET NOD32 Antivirus, version of virus 
> signature database 4059 (20090507) __
>
> The message was checked by ESET NOD32 Antivirus.
>
> http://www.eset.com
> 
>
> --
> The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
> production scanning environment may not be a perfect world - but thanks to
> Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700
> Series Scanner you'll get full speed at 300 dpi even with all image 
> processing features enabled. http://p.sf.net/sfu/kodak-com
> 
>
> ___
> Efw-user mailing list
> Efw-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/efw-user
>   


--
The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
production scanning environment may not be a perfect world - but thanks to
Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700
Series Scanner you'll get full speed at 300 dpi even with all image 
processing features enabled. http://p.sf.net/sfu/kodak-com
___
Efw-user mailing list
Efw-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/efw-user

[Efw-user] Transparent proxy

[Mark Clarke]

Hi all,

Is it possible to have username logged with transparent proxy? We are
using Windows AD for authentication but would prefer not to prompt users
for username and password to access the web and just use their windows
workstation logged in credentials.

Regards

Mark


-
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
___
Efw-user mailing list
Efw-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: [Efw-user] Road warrior openvpn access and DNS lookups

[Mark Clarke]

Hi there,

I am using 2.1.2. I cant see an option on the gui? Where should I look?

thanks

On Thu, 2008-05-29 at 07:17 -0700, wharfratjoe wrote:
> What version of endian are you using? This option has been added to later
> versions of endian within the openvpn gui setup.
> 
> 
> 
> mxc wrote:
> > 
> > Hi there,
> > 
> > How can one get a VPN remote client to use the internal (green) DNS server
> > for lookups? The only option, besides hacking each road warririor's host
> > file is to use ip addresses to connect. Will it just work by adding 
> > 
> > push "dhcp-option DNS 192.168.10.239"
> > 
> > to the /etc/openvpn/openvpn.conf.tmpl file? Do I need to run anything to
> > regenerate the files?
> > 
> 


-
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/
___
Efw-user mailing list
Efw-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/efw-user

[Efw-user] Road warrior, openvpn and DNS server setting for hostname lookup on green

[Mark Clarke]

Hi there, 

How can one get a VPN remote client to use the internal (green) DNS
server for lookups? The only option, besides hacking each road
warririor's host file is to use ip addresses to connect. Will it just
work by adding 

push "dhcp-option DNS 192.168.10.239" 

to the /etc/openvpn/openvpn.conf.tmpl file? Do I need to run anything to
regenerate the files?


-
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/
___
Efw-user mailing list
Efw-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/efw-user