Endian Firewall Support Mailinglist ()

Peter Erler | 3 Mar 2008 07:55

EFW 2.1.2 time sync

Hi,

I have an issue with timesync by time service in all versions of EFW including last stable version 2.1.2. I'm configuring a time server and the date/time sync is working a few days correct but after a few days the date/time is out of sync many days. No idea why. Does anyone have an idea about the cause or correcting action ?

Many thanks for help.

BR Peter

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/

_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

headers

Bogdan Milescu | 3 Mar 2008 13:15

block yahoo messenger and google talk with MIME

Is this possible? If it is how can i do it?

Thanks in advance..

--

-- 
Multumesc,

Bogdan MILESCU

Manager IT

SC ELMAS SRL
www.1234.ro
B-dul Grivitei Nr 1Y
Brasov, Romania
Tel 0720100115, Fax 0268308705 

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/

headers

Cristian | 4 Mar 2008 15:42

Help with AV y Content Filter

Hi everyone.

I ve a issue with an efw 2.2-beta2.

Actually I've de proxy configuration like this.

Authentication Tab:
       None

Default Policy Tab:
    Rule 1 --> Content Filter Only
    Rule 2 --> Allowed.

Content Filter Tab:
    Enable Logging.

The problem starts when I put the check on Activate Antivirus Scan on 
Content Filter tab. After that the proxy stop working because exist a 
problem with dansguardian. Below is the dansguardian access.log:

root <at> firewall:/var/log/dansguardian # tail -f access.log
Mar  4 11:27:48 firewall dansguardian: Error connecting to parent proxy
Mar  4 11:27:59 firewall dansguardian: Error connecting to parent proxy
Mar  4 11:28:43 firewall dansguardian: Error connecting to parent proxy

I saw the the clamd is stoped after start it and put the checkbox on 
Activate Antivirus Scan on Content Filter when I try to browse the web 
I've the error:

Sorry, you are not currently allowed to request: 
http://www.google.com/
from this cache until you have authenticated yourself.

Any clue.
Regards

--

-- 

======================================
Cristian Ce.
http://www.linkedin.com/in/cristiance
======================================

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/

headers

Opper Klet | 4 Mar 2008 21:33

Re: Need Help Setting Up Endian in VMware Server

What you can do is the following:

In VMWare Virtual Network Editor you configure the VMWare connections as
follows:
VMnet0 Bridged to the physical adapter that is connected to your LAN.  This
will become your Green interface.
VMnet9 Bridged to the physical adapter that is connected to your WAN.  This
will become your Red interface.

If you use the EFW VMWare image that you can download, there are 4 NICs
installed by default.  The first one (normally called "Ethernet") you can
configure to connect directly to your physical network (Bridged).  The
fourth one (normally called "Ethernet 4") you can configure as "Custom:
Specific virtual network" and then select "VMnet9 (Bridged)" in the dropdown
box.  The other two you can configure as not connected and not use them in
EFW.

If you disable all protocols (including TCP/IP!) except "VMware Bridge
Protocol" in Windows on the NIC that is connected to your ADSL connection,
all traffic from and to the internet must go through the EFW and your
Windows machine is not reachable directly from the internet.  This because
this NIC will only be reachable by VMWare.  This way you can quite safely
set up an EFW to protect your "LAN" without running an extra PC.

Hope this helps 

-----Original Message-----
From: efw-user-bounces@...
[mailto:efw-user-bounces@...] On Behalf Of Rapt0r
Sent: zaterdag 23 februari 2008 7:39
To: efw-user@...
Subject: [Efw-user] Need Help Setting Up Endian in VMware Server

I'm getting confuse in mapping Physical NIC cards to Host Virtual Network
Mapping in VMware Server.
I need help with my current setup

WinXP Pro with 2 NICs
One of the NIC is connected to ADSL Gateway Wireless Router with Static IP
192.168.100.50 in same network as ADSL Gateway Router.

Second NIC card not connected to any device. Its idle.

1 Switch with 5 ports.

Now how do I connect physical NICs and Which NIC to Map in Vmware Server?

 Please help

-- 
View this message in context:
http://www.nabble.com/Need-Help-Setting-Up-Endian-in-VMware-Server-tp1554100
9p15541009.html
Sent from the efw-user mailing list archive at Nabble.com.

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/

headers

Cristian | 5 Mar 2008 13:29

SOLVED [Fwd: Help with AV y Content Filter]

Hi

The problem is solved. Just I want to share de experience, may be it is 
useful for someone else.
The issue was on  havp antivirus. When I asked for the havp status the 
answer was:

        "havp dead but subsys locked"

To resove this remove the pid file located on /var/run/havp/havp.pid and 
start the daemon again. After that you can put the checkbox "Activate 
Antivirus Scan" in the Content Filter Tab.

The thing that I would like to know is why this happend :-s )

REgards

CC

-------- Original Message --------
Subject: 	Help with AV y Content Filter
Date: 	Tue, 04 Mar 2008 12:42:26 -0200
From: 	Cristian <cceliberti@...>
To: 	efw-user@...

Hi everyone.

I ve a issue with an efw 2.2-beta2.

Actually I've de proxy configuration like this.

Authentication Tab:
      None

Default Policy Tab:
   Rule 1 --> Content Filter Only
   Rule 2 --> Allowed.

Content Filter Tab:
   Enable Logging.

The problem starts when I put the check on Activate Antivirus Scan on 
Content Filter tab. After that the proxy stop working because exist a 
problem with dansguardian. Below is the dansguardian access.log:

root <at> firewall:/var/log/dansguardian # tail -f access.log
Mar  4 11:27:48 firewall dansguardian: Error connecting to parent proxy
Mar  4 11:27:59 firewall dansguardian: Error connecting to parent proxy
Mar  4 11:28:43 firewall dansguardian: Error connecting to parent proxy

I saw the the clamd is stoped after start it and put the checkbox on 
Activate Antivirus Scan on Content Filter when I try to browse the web 
I've the error:

Sorry, you are not currently allowed to request: 
http://www.google.com/
from this cache until you have authenticated yourself.

Any clue.
Regards

-- 

======================================
Cristian Ce.
http://www.linkedin.com/in/cristiance
======================================

--

-- 

======================================
Cristian Ce.
http://www.linkedin.com/in/cristiance
======================================

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/

headers

André Pohl | 6 Mar 2008 10:21

configuring amavis and spamassassin manualy

Hi there,

ok ... I know, that 99% of the readers would kill me for this, but for our 
company it is very important.

I need to configure efw pop3-spam proxy for bouncing spams....

We get about 6000 (!) spams per day for 8 persons, thats to much for sorting by 
hand (most of our contacts resits in asia - that may be the reason for that).

On the other hand - the are 10-15 false positves per week which contains 
orders - and my boss would not be happy, if the sender will not be informed, 
that his message was marked as spam and deleted).

So the question is: 

How can I configure the pop3-Spam-Proxy manually to bounce mails ?

Regards, André

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Efw-user mailing list
Efw-user <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/efw-user

headers

Cristian | 6 Mar 2008 13:29

Name resolution Issue EFW-Beta2

Hi

My efw is experimeting a name resolution issue. Since a few days the 
users are reporting that exists some pages that they can't access. Efw 
is configured with DNS cache and proxy enabled. When I access by ssh and 
put telnet www.google.com 80 the answer is:

                "www.google.com: Host name lookup failure"

I restared dnsmasq and check the configuration and it's fine, but the 
issue persists. At this time I resolved this disabling dns transparent 
proxy.

I woluld like to know why it is happening, how to resolved this issue 
because I would like to keep the cache functionality. In other if anyone 
knows if it is possible to install some tools like nslookup o dig on efw 
please tell me.

regards

CC

--

-- 

======================================
Cristian Ce.
http://www.linkedin.com/in/cristiance
======================================

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/

headers

Scott Silva | 6 Mar 2008 17:30

Re: configuring amavis and spamassassin manualy

on 3-6-2008 1:21 AM André Pohl spake the following:
> Hi there,
> 
> ok ... I know, that 99% of the readers would kill me for this, but for our 
> company it is very important.
> 
> I need to configure efw pop3-spam proxy for bouncing spams....
> 
> We get about 6000 (!) spams per day for 8 persons, thats to much for sorting by 
> hand (most of our contacts resits in asia - that may be the reason for that).
> 
> On the other hand - the are 10-15 false positves per week which contains 
> orders - and my boss would not be happy, if the sender will not be informed, 
> that his message was marked as spam and deleted).
> 
> So the question is: 
> 
> How can I configure the pop3-Spam-Proxy manually to bounce mails ?
> 
> Regards, André
But who would you be bouncing them too? The faked sender?
How will you receive mail when bouncing the spams to the faked senders gets 
you on a half dozen blacklists?
If you depend on orders coming in, you need to accept the mail and check it.
Look and see if the spam you receive falls on a blacklist, and drop them at 
the MTA.

See http://www.dontbouncespam.org/
and http://wiki.castlecops.com/What_is_Wrong_With_Bouncing_Spam

--

-- 
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't!!!!

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/

_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

headers

Thomas Heimann | 6 Mar 2008 17:55

Antw: configuring amavis and spamassassin manualy

Hi,

the best will be to move the mx to your EFW box.
Therefore the EFW should have a static IP.
Then you can use blacklists which will block 90-95 percent of the
spams.
The status of mails from blacklisted IPs is "not delivered".
So the sender is getting a bounce mail from his own mail system.

Thomas

-- 

SHS-Concept GbR
Dirk Schäfers
Dipl.-Ing Thomas Heimann
Dipl.-Ing Kai Schäfers 
Hagener Str.57
D-58642 Iserlohn
Germany

Tel.:   +49 +2374 9209776
Mobil: 0160 94773968
Fax:   +49 +2374 9209778

 Ust-ID:DE813360908

>>> André Pohl <a.pohl@...> schrieb am 06.03.2008
um 10:21 in
Nachricht <loom.20080306T090716-555@...>:
> Hi there,
> 
> ok ... I know, that 99% of the readers would kill me for this, but
for our 
> company it is very important.
> 
> I need to configure efw pop3-spam proxy for bouncing spams....
> 
> We get about 6000 (!) spams per day for 8 persons, thats to much for
sorting 
> by 
> hand (most of our contacts resits in asia - that may be the reason
for 
> that).
> 
> On the other hand - the are 10-15 false positves per week which
contains 
> orders - and my boss would not be happy, if the sender will not be
informed, 
> 
> that his message was marked as spam and deleted).
> 
> So the question is: 
> 
> How can I configure the pop3-Spam-Proxy manually to bounce mails ?
> 
> Regards, André
> 
> 
>
-------------------------------------------------------------------------
> This SF.net email is sponsored by: Microsoft
> Defy all challenges. Microsoft(R) Visual Studio 2008.
> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ 
> _______________________________________________
> Efw-user mailing list
> Efw-user@... 
> https://lists.sourceforge.net/lists/listinfo/efw-user

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/

headers

Ed Vanover | 6 Mar 2008 19:27

Capabilities

We are looking for a content filtering solution for the college where I work. We have a 30 Meg internet connection with approximately 2500 total users with max concurrent users of about 2000. We want to filter by subnet as a transparent proxy and with no authorization. We currently have a firewall and router so these functions are not needed. With this information could Endian perform and work in this environment with the right hardware?

Ed Vanover

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/

_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

2	May 2013
2	April 2013
20	March 2013
10	February 2013
1	January 2013
21	December 2012
56	November 2012
2	October 2012
15	September 2012
25	August 2012
5	July 2012
7	June 2012
7	May 2012
9	April 2012
1	March 2012
26	February 2012
3	January 2012
1	December 2011
9	November 2011
41	October 2011
48	September 2011
2	August 2011
10	July 2011
9	June 2011
6	May 2011
9	April 2011
18	March 2011
40	February 2011
5	January 2011
13	December 2010
58	November 2010
34	October 2010
39	September 2010
30	August 2010
18	July 2010
50	June 2010
70	May 2010
69	April 2010
46	March 2010
40	February 2010
46	January 2010
56	December 2009
86	November 2009
61	October 2009
59	September 2009
18	August 2009
40	July 2009
76	June 2009
94	May 2009
70	April 2009
115	March 2009
85	February 2009
61	January 2009
73	December 2008
152	November 2008
270	October 2008
96	September 2008
121	August 2008
88	July 2008
122	June 2008
147	May 2008
175	April 2008
44	March 2008
74	February 2008
144	January 2008
86	December 2007
149	November 2007
223	October 2007
143	September 2007
134	August 2007
96	July 2007
131	June 2007
118	May 2007
105	April 2007
107	March 2007
101	February 2007
206	January 2007
141	December 2006
159	November 2006
172	October 2006
168	September 2006
95	August 2006
46	July 2006

Mon	Tue	Wed	Thu	Fri	Sat	Sun

					1	2
3	4	5	6	7	8	9
10	11	12	13	14	15	16
17	18	19	20	21	22	23
24	25	26	27	28	29	30
31