Working with a 2wire adsl modem

I am having some problems to configure a 2wire adsl modem with an Endian box.

I've installed Endian on a server for testing purposes. My local network
is a Windows Domain controlled one, I have 5 clients, one MS Windows 2003
Std Server acting as Domain Server, I have DHCp for my 5 clients, the
router that the provider is installing is a 2wire modem, 27x series (I
know about the security stuff about this modems, but the ISP (Prodigy)
only supplies this kind of hardware). So, local network, one Endian Box
with two network cards, GREEN + RED, GREEN interface is static ip, RED
interface is static ip. So basically I have:

 LOCAL                     ENDIAN                2WIRE
NETWORK       <---> GREEN    BOX   RED <--->     MODEM   <---> INTERNET
(192.168.10.0)                                (192.168.1.0)

I've enabled the Proxy service to server for my 5 clients with local
authentication option, the problem arises when I see that one of the
clients is accesing the internet without authenticating against the proxy,
so I said, Damn! Transparent Proxy.

After some researching I found that the 2wire modem is a router, so it is
doing its job routing traffic to internet from my local network :D. Well,
I did some research and found that I could use my adls modem as just a
bridge and also found that I could configure Endian to do the
authentication job with PPPoE, so I made the configuration, but the modem
just won't work with Endian, so I ended up going back to normal network
connection with the modem working as a router, but I really need to
authenticate all my traffic. So, after all this sad history :D, my
question is, Is there a way to avoid my users from accessing the internet
without authenticating against my proxy and leave the 2wire modem acting

Re: Working with a 2wire adsl modem

I have a customer that uses a 2Wire modem as a bridge, but
they also have a static IP which gets assigned to the efw.
You can probably google how to do this.

But there is also nothing wrong with using the 2Wire as a
router, with the efw behind it. 

Neither way matters to proxy authentication...

------------------------------------------------------------------------------

Re: Working with a 2wire adsl modem

In transparent mode, users will not authenticate.  If you need
authentication, then I think the best way would be to deny direct
outbound access from Green via outbound rules.  If users want to surf,
they must use (and authenticate to, if configured) the proxy.

Shaun

-----Original Message-----
From: jcenteno@...
[mailto:jcenteno@...] 
Sent: Wednesday, April 01, 2009 6:05 PM
To: efw-user@...
Subject: [Efw-user] Working with a 2wire adsl modem

I am having some problems to configure a 2wire adsl modem with an Endian
box.

I've installed Endian on a server for testing purposes. My local network
is a Windows Domain controlled one, I have 5 clients, one MS Windows
2003
Std Server acting as Domain Server, I have DHCp for my 5 clients, the
router that the provider is installing is a 2wire modem, 27x series (I
know about the security stuff about this modems, but the ISP (Prodigy)
only supplies this kind of hardware). So, local network, one Endian Box
with two network cards, GREEN + RED, GREEN interface is static ip, RED
interface is static ip. So basically I have:

 LOCAL                     ENDIAN                2WIRE
NETWORK       <---> GREEN    BOX   RED <--->     MODEM   <---> INTERNET
(192.168.10.0)                                (192.168.1.0)

Monitoring an endian firewall with munin

Hello,

We are using Munin [1] to monitor servers in our LAN and remote ones. Now we're using endian firewall and need
to integrate that into our monitoring system.
As far as I see, munin-node is not available for endian - is that right?

Did anyone already try to get the firewall monitored with munin? Are there other ways to do that, without
needing munin-node? Is munin somewhere available for efw?

[1] http://munin.projects.linpro.no/
--

-- 
Mit freundlichen Grüßen
Christian Weiske

------------------------------------------------------------------------------

Total Crash

------------------------------------------------------------------------------

_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: Total Crash

------------------------------------------------------------------------------

_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Total Crash

------------------------------------------------------------------------------

_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: Total Crash

------------------------------------------------------------------------------

_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: Working with a 2wire adsl modem

Just to say thanks to all the people that helped. Shaun's advice was the
solution for me.

Thanks again.

> In transparent mode, users will not authenticate.  If you need
> authentication, then I think the best way would be to deny direct
> outbound access from Green via outbound rules.  If users want to surf,
> they must use (and authenticate to, if configured) the proxy.
>
> Shaun
>
>
> -----Original Message-----
> From: jcenteno@... [mailto:jcenteno@...]
> Sent: Wednesday, April 01, 2009 6:05 PM
> To: efw-user@...
> Subject: [Efw-user] Working with a 2wire adsl modem
>
> I am having some problems to configure a 2wire adsl modem with an Endian
> box.
>
> I've installed Endian on a server for testing purposes. My local network
> is a Windows Domain controlled one, I have 5 clients, one MS Windows
> 2003
> Std Server acting as Domain Server, I have DHCp for my 5 clients, the
> router that the provider is installing is a 2wire modem, 27x series (I
> know about the security stuff about this modems, but the ISP (Prodigy)
> only supplies this kind of hardware). So, local network, one Endian Box
> with two network cards, GREEN + RED, GREEN interface is static ip, RED
> interface is static ip. So basically I have:
>
>  LOCAL                     ENDIAN                2WIRE
> NETWORK       <---> GREEN    BOX   RED <--->     MODEM   <---> INTERNET
> (192.168.10.0)                                (192.168.1.0)
>
> I've enabled the Proxy service to server for my 5 clients with local
> authentication option, the problem arises when I see that one of the
> clients is accesing the internet without authenticating against the
> proxy,
> so I said, Damn! Transparent Proxy.
>
> After some researching I found that the 2wire modem is a router, so it
> is
> doing its job routing traffic to internet from my local network :D.
> Well,
> I did some research and found that I could use my adls modem as just a
> bridge and also found that I could configure Endian to do the
> authentication job with PPPoE, so I made the configuration, but the
> modem
> just won't work with Endian, so I ended up going back to normal network
> connection with the modem working as a router, but I really need to
> authenticate all my traffic. So, after all this sad history :D, my
> question is, Is there a way to avoid my users from accessing the
> internet
> without authenticating against my proxy and leave the 2wire modem acting
> as router ?
>
> Thanks in advance.
>
>
> ------------------------------------------------------------------------
> ------
> _______________________________________________
> Efw-user mailing list
> Efw-user@...
> https://lists.sourceforge.net/lists/listinfo/efw-user
>
> ------------------------------------------------------------------------------
> _______________________________________________
> Efw-user mailing list
> Efw-user@...
> https://lists.sourceforge.net/lists/listinfo/efw-user
>

------------------------------------------------------------------------------

Re: Working with a 2wire adsl modem

Glad to hear it worked.  Now it's your turn to help someone else :).

Shaun 

-----Original Message-----
From: jcenteno@...
[mailto:jcenteno@...] 
Sent: Thursday, April 02, 2009 11:38 AM
To: efw-user@...
Subject: Re: [Efw-user] Working with a 2wire adsl modem

Just to say thanks to all the people that helped. Shaun's advice was the
solution for me.

Thanks again.

> In transparent mode, users will not authenticate.  If you need
> authentication, then I think the best way would be to deny direct
> outbound access from Green via outbound rules.  If users want to surf,
> they must use (and authenticate to, if configured) the proxy.
>
> Shaun
>
>
> -----Original Message-----
> From: jcenteno@... [mailto:jcenteno@...]
> Sent: Wednesday, April 01, 2009 6:05 PM
> To: efw-user@...
> Subject: [Efw-user] Working with a 2wire adsl modem
>
> I am having some problems to configure a 2wire adsl modem with an
Endian
> box.
>
> I've installed Endian on a server for testing purposes. My local
network
> is a Windows Domain controlled one, I have 5 clients, one MS Windows
> 2003
> Std Server acting as Domain Server, I have DHCp for my 5 clients, the
> router that the provider is installing is a 2wire modem, 27x series (I
> know about the security stuff about this modems, but the ISP (Prodigy)
> only supplies this kind of hardware). So, local network, one Endian
Box
> with two network cards, GREEN + RED, GREEN interface is static ip, RED
> interface is static ip. So basically I have:
>
>  LOCAL                     ENDIAN                2WIRE
> NETWORK       <---> GREEN    BOX   RED <--->     MODEM   <--->
INTERNET
> (192.168.10.0)                                (192.168.1.0)
>
> I've enabled the Proxy service to server for my 5 clients with local
> authentication option, the problem arises when I see that one of the
> clients is accesing the internet without authenticating against the
> proxy,
> so I said, Damn! Transparent Proxy.
>
> After some researching I found that the 2wire modem is a router, so it
> is
> doing its job routing traffic to internet from my local network :D.
> Well,
> I did some research and found that I could use my adls modem as just a
> bridge and also found that I could configure Endian to do the
> authentication job with PPPoE, so I made the configuration, but the
> modem
> just won't work with Endian, so I ended up going back to normal
network
> connection with the modem working as a router, but I really need to
> authenticate all my traffic. So, after all this sad history :D, my
> question is, Is there a way to avoid my users from accessing the
> internet
> without authenticating against my proxy and leave the 2wire modem
acting
> as router ?
>
> Thanks in advance.
>
>
>
------------------------------------------------------------------------
> ------
> _______________________________________________
> Efw-user mailing list
> Efw-user@...
> https://lists.sourceforge.net/lists/listinfo/efw-user
>
>
------------------------------------------------------------------------
------
> _______________________________________________
> Efw-user mailing list
> Efw-user@...
> https://lists.sourceforge.net/lists/listinfo/efw-user
>

------------------------------------------------------------------------
------
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

------------------------------------------------------------------------------