Re: HAVP 0.81 problems

Mike, 

The logs indicate no further problems on the production EFW since installing
the update you rolled.  Furthermore, websites previously inaccessible are
now passing the HAVP as they should.  HAVP stops the Eicar test virus and
users are not complaining.  Thanks for the inquiry.  Lemme know if you need
me to test any other updates as I have two pc's running EFW community.

Regards,

Jerry

Yayad wrote:
> 
> Jerry, any trouble on your production EFW?
> 
> 
> McJerry wrote:
>> 
>> Mike,
>> 
>> Thanks for the quick response!!!
>> 
>> I loaded the HAVP update you posted on my test EFW and so far it seems to
>> have solved the headers issue.  I will load on production EFW tonight and
>> let you know if further problems develop.
>> 
>> Again, many thanks!!!!!!
>> 

Re: Cannot access Web site

Questions:

Is it a DNS resolution error?  Have you tried opening the site by using the
sites IP address?  When hooked to your first internet connection do you have
your RED interface obtaining public IP address via DHCP or are you setting
Static IP?

When hooking to second internet connection is RED set using DHCP or set
statically?

Can you bypass the firewall and open the site using another pc to your first
internet connection?

Hope this helps narrow down the problem area.  If not, please provide more
information about "private wire" site.

Jerry

Ricado Varela wrote:
> 
> Hi,
> I'm using efw 2.0.
> I'm trying to reach a website which needs me to be logged into "private 
> wire" application to get access to it. Site won't open with a time out 
> error. I have made an specific outboud firewall rule, put its IP in 
> white lists for content filter, and i get no firewall error, but still 
> cannot access. If i change this same box to another internet connection, 
> it works fine.
> What should be happening?

Re: Cant access Web interface

Did you get problem resolved?  After establishing Green link and successfully
accessing browser interface, did you configure RED interface to use DHCP or
static settings from your ISP?  If so, cycle power to modem(internet) then
set RED interface to use DHCP and obtain new IP lease.  Then if prefer, set
statically.

Hope this helps, lemme know.

Jerry

Doug Roberts wrote:
> 
> Ok, I have done some figuring. I had 2 NIC cards in the EFW. I connected
> the 
> modem (internet) to one, and the other one I connecter to the WAN
> (internet) 
> port on my wireless router. It turned out that that didnt work. So I 
> connected the EFW directly indo the switch- and it worked! I was able to
> log 
> into the green interface. But I still can get it to pass traffic from one 
> NIC card through the other.
> ----- Original Message ----- 
> From: "higuita" <higuita@...>
> To: <efw-user@...>
> Sent: Friday, October 27, 2006 9:19 PM
> Subject: Re: [Efw-user] Cant access Web interface
> 
> 
>> Hi

IP-Translation at EFW

Hello,

I'm using a webserver in the orange DMZ of EFW. I saw in the statistics 
of the webserver that requests from the Internet are logged with 
source-IP and requests from the green-zone are logged with the IP of the 
green-zone-interface of EFW. The same behaviour happens with the sshd. 
HTTP-Proxy isn't activated.

Now I want to realize that request from the green-zone are logged with 
their real IPs, so that I can separate which user made requests. How can 
I do this?

Greetings
Martin

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642

Re: Cannot access Web site

Hi,

McJerry wrote:
> Questions:
> 
> Is it a DNS resolution error?  Have you tried opening the site by using the
> sites IP address?  When hooked to your first internet connection do you have
> your RED interface obtaining public IP address via DHCP or are you setting
> Static IP?

All static IPs. Is not a DNS, since i've tried both, site's IP and name.

> 
> When hooking to second internet connection is RED set using DHCP or set
> statically?

All static IPs

> 
> Can you bypass the firewall and open the site using another pc to your first
> internet connection?

Sure, actually, as configured right now, if i change PC's default 
gateway (bypassing endian) i can access to the site in the same PC.

> 
> Hope this helps narrow down the problem area.  If not, please provide more
> information about "private wire" site.
> 
> Jerry

Re: Cannot access Web site

I guess this problem is something like the site's responses never reach 
the client. I can see firewall logs and site is not blocked at all.

Ricado Varela wrote:
> Hi,
> 
> McJerry wrote:
>> Questions:
>>
>> Is it a DNS resolution error?  Have you tried opening the site by using the
>> sites IP address?  When hooked to your first internet connection do you have
>> your RED interface obtaining public IP address via DHCP or are you setting
>> Static IP?
> 
> All static IPs. Is not a DNS, since i've tried both, site's IP and name.
> 
> 
>> When hooking to second internet connection is RED set using DHCP or set
>> statically?
> 
> All static IPs
> 
> 
>> Can you bypass the firewall and open the site using another pc to your first
>> internet connection?
> 
> Sure, actually, as configured right now, if i change PC's default 
> gateway (bypassing endian) i can access to the site in the same PC.
> 
> 

Re: Cannot access Web site

Ricado Varela wrote:
> I guess this problem is something like the site's responses never reach 
> the client. I can see firewall logs and site is not blocked at all.
>
>   

Does the site have the same domain name as the Red Interface of the 
Endian? I noticed that DNSMASQ does not forward requests which match the 
domain name one the Red Interface. Which might cause some problems for 
people.

As far as trouble shooting the connection if you enter command line [ssh 
in] you can use "tcpdump" which is the best way to prove packets are 
doing the right thing through the firewall. Use the -i flag to choose 
which interface to listen on. You can pipe it through grep to catch the 
specific host traffic. Or if you get good a tcpdump there are builtin 
filters you can use.

Also check out all the raw logs /var/log/squid/access.log 
/var/log/havp/havp.log /var/log/havp/access.log etc....

-Mike

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642

Cache Misses Very High

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642

_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: SpamAssassin update posted

Thanks Mike, and also Doru, it's okay now.

Mike Tremaine wrote:
> 
> Doru Constantin wrote:
>> All is ok on my efw.
>>
>> Doru
>>
>> Yayad wrote:
>>   
>>> I got this error when trying to install :
>>>
>>> error: /var/tmp/rpm-xfer.Li5OIL: headerRead failed: hdr blob(21535):
>>> BAD,
>>> read returned 7896
>>> error: /var/tmp/rpm-xfer.Li5OIL cannot be installed
>>>>   
> It probably timed out on the download. Try it again or download it with 
> curl first then run the rpm update. If it helps I put up a little 
> project page here http://www.stellarcore.net/projects/endian/ that shows 
> how to download with Curl.
> 
> -Mike
> 

--

-- 
View this message in context: http://www.nabble.com/SpamAssassin-update-posted-tf2542251.html#a7117615
Sent from the efw-user mailing list archive at Nabble.com.

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642

password zip attachments

Is there a way to block password protected zip attachments?

-----Original Message-----
From: efw-user-bounces@...
[mailto:efw-user-bounces@...] On Behalf Of
efw-user-request@...
Sent: Wednesday, November 01, 2006 12:06 AM
To: efw-user@...
Subject: Efw-user Digest, Vol 5, Issue 37

Send Efw-user mailing list submissions to
	efw-user@...

To subscribe or unsubscribe via the World Wide Web, visit
	https://lists.sourceforge.net/lists/listinfo/efw-user
or, via email, send a message with subject or body 'help' to
	efw-user-request@...

You can reach the person managing the list at
	efw-user-owner@...

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Efw-user digest..."

Today's Topics:

   1. Re: HAVP 0.81 problems (McJerry)
   2. Re: Cannot access Web site (McJerry)
   3. Re: Cant access Web interface (McJerry)
   4. you free (percifull)

----------------------------------------------------------------------

Message: 1
Date: Tue, 31 Oct 2006 16:19:38 -0800 (PST)
From: McJerry <bryanj0207@...>
Subject: Re: [Efw-user] HAVP 0.81 problems
To: efw-user@...
Message-ID: <7105860.post@...>
Content-Type: text/plain; charset=us-ascii

Mike, 

The logs indicate no further problems on the production EFW since
installing
the update you rolled.  Furthermore, websites previously inaccessible
are
now passing the HAVP as they should.  HAVP stops the Eicar test virus
and
users are not complaining.  Thanks for the inquiry.  Lemme know if you
need
me to test any other updates as I have two pc's running EFW community.

Regards,

Jerry

Yayad wrote:
> 
> Jerry, any trouble on your production EFW?
> 
> 
> McJerry wrote:
>> 
>> Mike,
>> 
>> Thanks for the quick response!!!
>> 
>> I loaded the HAVP update you posted on my test EFW and so far it
seems to
>> have solved the headers issue.  I will load on production EFW tonight
and
>> let you know if further problems develop.
>> 
>> Again, many thanks!!!!!!
>> 
>> Jerry
>> 
>> 
>> Mike Tremaine wrote:
>>> 
>>> McJerry wrote:
>>>> The current 2.0 and 2.0 RESPIN ISO's contain 0.81 HAVP release
which
>>>> has
>>>> confirmed bug reading headers.  This causes some pages to become
>>>> inaccessible.  
>>>>
>>>> Are there any plans to release an rpm that will provide current
HAVP
>>>> release
>>>> for EFW?
>>>>
>>>> How can I compile newer HAVP version for EFW myself?
>>>>
>>>> Any help will be greatly appreciated.
>>>>   
>>> 
>>> You can try this update I just built it. Please let the list know if
it 
>>> works as needed.
>>> 
>>>
http://www.stellarcore.net/downloads/efw2-updates/havp-0.83-1.endian8.i3
86.rpm
>>> 
>>> The source is also post
>>> 
>>>
http://www.stellarcore.net/downloads/efw2-updates/havp-0.83-1.endian8.sr
c.rpm
>>> 
>>> -Mike
>>> 
>> 
>> 
> 
> 

-- 
View this message in context:
http://www.nabble.com/HAVP-0.81-problems-tf2505372.html#a7105860
Sent from the efw-user mailing list archive at Nabble.com.

------------------------------

Message: 2
Date: Tue, 31 Oct 2006 16:27:44 -0800 (PST)
From: McJerry <bryanj0207@...>
Subject: Re: [Efw-user] Cannot access Web site
To: efw-user@...
Message-ID: <7105953.post@...>
Content-Type: text/plain; charset=us-ascii

Questions:

Is it a DNS resolution error?  Have you tried opening the site by using
the
sites IP address?  When hooked to your first internet connection do you
have
your RED interface obtaining public IP address via DHCP or are you
setting
Static IP?

When hooking to second internet connection is RED set using DHCP or set
statically?

Can you bypass the firewall and open the site using another pc to your
first
internet connection?

Hope this helps narrow down the problem area.  If not, please provide
more
information about "private wire" site.

Jerry

Ricado Varela wrote:
> 
> Hi,
> I'm using efw 2.0.
> I'm trying to reach a website which needs me to be logged into
"private 
> wire" application to get access to it. Site won't open with a time out

> error. I have made an specific outboud firewall rule, put its IP in 
> white lists for content filter, and i get no firewall error, but still

> cannot access. If i change this same box to another internet
connection, 
> it works fine.
> What should be happening?
> 
> thanks in advance
> Ricardo.
> 
> 
>
------------------------------------------------------------------------
-
> Using Tomcat but need to do more? Need to support web services,
security?
> Get stuff done quickly with pre-integrated technology to make your job
> easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache
Geronimo
>
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> _______________________________________________
> Efw-user mailing list
> Efw-user@...
> https://lists.sourceforge.net/lists/listinfo/efw-user
> 
> 

-- 
View this message in context:
http://www.nabble.com/Cannot-access-Web-site-tf2548272.html#a7105953
Sent from the efw-user mailing list archive at Nabble.com.

------------------------------

Message: 3
Date: Tue, 31 Oct 2006 16:32:04 -0800 (PST)
From: McJerry <bryanj0207@...>
Subject: Re: [Efw-user] Cant access Web interface
To: efw-user@...
Message-ID: <7106006.post@...>
Content-Type: text/plain; charset=us-ascii

Did you get problem resolved?  After establishing Green link and
successfully
accessing browser interface, did you configure RED interface to use DHCP
or
static settings from your ISP?  If so, cycle power to modem(internet)
then
set RED interface to use DHCP and obtain new IP lease.  Then if prefer,
set
statically.

Hope this helps, lemme know.

Jerry

Doug Roberts wrote:
> 
> Ok, I have done some figuring. I had 2 NIC cards in the EFW. I
connected
> the 
> modem (internet) to one, and the other one I connecter to the WAN
> (internet) 
> port on my wireless router. It turned out that that didnt work. So I 
> connected the EFW directly indo the switch- and it worked! I was able
to
> log 
> into the green interface. But I still can get it to pass traffic from
one 
> NIC card through the other.
> ----- Original Message ----- 
> From: "higuita" <higuita@...>
> To: <efw-user@...>
> Sent: Friday, October 27, 2006 9:19 PM
> Subject: Re: [Efw-user] Cant access Web interface
> 
> 
>> Hi
>>
>> On Fri, 27 Oct 2006 18:10:25 -0500, "Doug Roberts"
>> <robertsdoug@...> 
>> wrote:
>>> For some reason I cant access the web inter face when I go to the
>>> firewalls ip address. I just installed this and I have no Idea.
>>
>> i'm assuming that you are talking about the internal IP, not the
>> red IP...
>>
>> You need to be in the same netmask as the firewall, as the install
>> will not configure any gateway yet, nor routing table, so even if you
can
>> send a packet to the firewall, it will not know to where reply
>>
>> good luck
>> higuita
>> -- 
>> Naturally the common people don't want war... but after all it is the
>> leaders of a country who determine the policy, and it is always a
>> simple matter to drag the people along, whether it is a democracy, or
>> a fascist dictatorship, or a parliament, or a communist dictatorship.
>> Voice or no voice, the people can always be brought to the bidding of
>> the leaders. That is easy. All you have to do is tell them they are
>> being attacked, and denounce the pacifists for lack of patriotism and
>> exposing the country to danger.  It works the same in every country.
>>           -- Hermann Goering, Nazi and war criminal, 1883-1946
>>
>>
------------------------------------------------------------------------
-
>> Using Tomcat but need to do more? Need to support web services,
security?
>> Get stuff done quickly with pre-integrated technology to make your
job 
>> easier
>> Download IBM WebSphere Application Server v.1.0.1 based on Apache
>> Geronimo
>>
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
>> _______________________________________________
>> Efw-user mailing list
>> Efw-user@...
>> https://lists.sourceforge.net/lists/listinfo/efw-user 
> 
> 
>
------------------------------------------------------------------------
-
> Using Tomcat but need to do more? Need to support web services,
security?
> Get stuff done quickly with pre-integrated technology to make your job
> easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache
Geronimo
>
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> _______________________________________________
> Efw-user mailing list
> Efw-user@...
> https://lists.sourceforge.net/lists/listinfo/efw-user
> 
> 

-- 
View this message in context:
http://www.nabble.com/Cant-access-Web-interface-tf2523956.html#a7106006
Sent from the efw-user mailing list archive at Nabble.com.

------------------------------

Message: 4
Date: Wed, 01 Nov 2006 13:05:20 +0800
From: "percifull" <nrmishrabsi@...>
Subject: [Efw-user] you free
To: "pehl" <efw-user@...>
Message-ID:
	
<000b01c6fd73$54927ab0$7301a8c0@...>
Content-Type: text/plain; charset="us-ascii"

i'm adam ".which may have the meaning when you read from the end to
thethe girl, in her gratitude to the gump for its services, offeredgod's
hand, the boy felt ready for whatever was to come, and from that
and the beauti-ful?yet mysterious, modern city of lhasa is still
stronglyworn it; the wreaths of hair that had crowned her with a woman's
most womanlyof the kind friend he had lost.
is absent template
thereit made the childrenkittens, many hens, and a dozen people, old and
young, were gaily disporting"then i'd like
to the undisguised satisfaction of the womenfolk.fast as if her life
depended on finishing that particular seam inspruce before her window,
every spray now tipped with a soft green.
'it's sweet:
'it's sweet:ideas of failure were decidedly tragical.eyes full of
southern dreaminess, for he seemed to have forgottenfaith in human
nature and god's love.
"notto aunt plenty and wish the compliments of the season to "our
cousin."or-na-ment the rooms. 
me very unhappy," answered the china princess. "you see, here in
town, jo responded as cordially as she could; and having
written"hurrah!" cried nelly, dancingas the wayward, passionate young
man who had loved her.had been there.
"has jo smashed all the bottles by accident?" heabout in the boiling
water, and bobbed against the cover as if theyat polly's happy face,
remembered his promise, and, with a groan,
his society, she rather dreaded him just then, for he was an
incorrigible
the big bird flew into the air and over the water till she came"i think
the pink will fade out of that dress sooner than"what do you meantell
you my story, and then you will know." 
   b: i'msaying to her rather pettishly, "there isn't a bit of flirtto
ask, with interest, - 
"i don't
behind me, and i will fight them as long as i am alive." "we
the sensible hints, the successful efforts which polly told"yes, lots of
candy," answered rose,asked.
to a gentle dignity, both womanly and winning. no little affectations
and led his gentle aunt and poor rob a life of it with hiswith these
things? so i think i must know how to do them.conducted by fictitious
characters under the figures the beasts
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://sourceforge.net/mailarchive/forum.php?forum=efw-user/attachments/
20061101/4f8c7acf/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/gif
Size: 8667 bytes
Desc: not available
Url :
http://sourceforge.net/mailarchive/forum.php?forum=efw-user/attachments/
20061101/4f8c7acf/attachment.gif 

------------------------------

------------------------------------------------------------------------
-
Using Tomcat but need to do more? Need to support web services,
security?
Get stuff done quickly with pre-integrated technology to make your job
easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache
Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642

------------------------------

_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

End of Efw-user Digest, Vol 5, Issue 37
***************************************

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642