gmane.comp.security.firewalls.efw.user

EFC v2.51 - issues routing from LAN to another subnet

Renato Pereira — 2012-05-11T20:08:02

Does anyone some idea???

 <http://www.efwsupport.com/index.php?topic=3142.0>
http://www.efwsupport.com/index.php?topic=3142.0

 

 

tks,

 

Renato P

 

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/_______________________________________________
Efw-user mailing list
Efw-user-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: 2.5.1 upgrade

compdoc — 2012-05-11T14:05:40

upgrade to 2.5.1

 

This does not work for me

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/_______________________________________________
Efw-user mailing list
Efw-user-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: 2.5.1 upgrade

Guenther Boelter — 2012-05-11T09:30:13

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/_______________________________________________
Efw-user mailing list
Efw-user-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: 2.5.1 upgrade

2012-05-11T08:14:25

Running efw-upgrade -s and selecting development builds I'm able to 
upgrade to 2.5.1


Giovanni Vecchi

System and Network Administrator



SAER Elettropompe SpA

Via Circonvallazione, 22

42016 Guastalla (RE) - Italy

Tel. +39 0522 830941

Fax +39 0522 826948

mail to: giovanni.vecchi-Vt427sO+ix0< at >public.gmane.org

www.saerelettropompe.com








Il contenuto di questa comunicazione ha natura riservata ed è destinato 
esclusivamente alla persona o ente cui essa è indirizzata. 
Qualsiasi forma di utilizzo non autorizzato del contenuto di questo 
messaggio non è consentito. Se non siete il destinatario designato di 
questo messaggio e del suo contenuto Vi preghiamo di comunicarlo 
immediatamente al mittente e di distruggere il messaggio ed i suoi 
eventuali allegati. 


This comunication is confidential and intended for the addressee(s) only.
Any form of unauthorized use of the content of this e-mail is not 
permitted.If you are not the intended recipent of this message and its 
contents, please notify t

Re: 2.5.1 upgrade

2012-05-11T07:56:51

Hello everybody.

I'm trying to update EFW 2.4.1 to 2.5.1 but I have "No interesting 
upgrades available" message me too.
Pinging www.endian.com is successful.

Any idea?


Giovanni Vecchi

System and Network Administrator



SAER Elettropompe SpA

Via Circonvallazione, 22

42016 Guastalla (RE) - Italy

Tel. +39 0522 830941

Fax +39 0522 826948

mail to: giovanni.vecchi-Vt427sO+ix0< at >public.gmane.org

www.saerelettropompe.com








Il contenuto di questa comunicazione ha natura riservata ed è destinato 
esclusivamente alla persona o ente cui essa è indirizzata. 
Qualsiasi forma di utilizzo non autorizzato del contenuto di questo 
messaggio non è consentito. Se non siete il destinatario designato di 
questo messaggio e del suo contenuto Vi preghiamo di comunicarlo 
immediatamente al mittente e di distruggere il messaggio ed i suoi 
eventuali allegati. 


This comunication is confidential and intended for the addressee(s) only.
Any form of unauthorized use of the content of this e-mail is not 
permitted.If

2.5.1 HA Configuration howto

Anthony Giggins — 2012-05-10T12:01:30

Just wondering howto enable HA in 2.5.1 Community, some documentation
mentions it is supposed to be under services however I cant locate this,
would I need VLAN's specified before enabling this or is the documention
I've read wrong and this is only a feature in the enterprise versions?

Cheers,

Anthony
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/_______________________________________________
Efw-user mailing list
Efw-user-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: Endian behind a pfsense

Farzan Qureshi — 2012-04-28T22:02:55

Pleasure man :-)
On Apr 29, 2012 1:16 AM, "Eduardo Mendes" <eduardo.mendes-Re5JQEeQqe8AvxtiuMwx3w< at >public.gmane.org> wrote:

Re: Endian behind a pfsense

Jonathan Lessa — 2012-04-28T15:29:54

Disponha!!! :-D


2012/4/28 Eduardo Mendes <eduardo.mendes-Re5JQEeQqe8AvxtiuMwx3w< at >public.gmane.org>

Re: Endian behind a pfsense

Eduardo Mendes — 2012-04-28T15:24:41

Cool. I will try your approach as a workaround.

Obrigado :-)


-Eduardo

On Apr 28, 2012, at 9:07 AM, Jonathan Lessa <jonathanlessa-Re5JQEeQqe8AvxtiuMwx3w< at >public.gmane.org> wrote:

is a pleasure to help!

let's see if I can explain it better.
I gave him two options:
1) use the Endian Static IP
There were two distinct networks: pfsense-Endian and Endian-LAN

2) Do not use the WAN and put the two network interfaces in the green zone
Then their workstations and Endian would be in the same LAN pfsense. Vc
atruibuiria a LAN ip of the Endian (green zone), but their workstations have
pfsense as the gateway.
For this to work you must connect the pfsense in one of the interfaces and
other interface endian endian switch connected in your LAN, so that all
traffic from LAN to LAN getaway (pfsense) would be to bridge the green zone.



Jonathan Lessa



2012/4/28 Eduardo Mendes <eduardo.mendes-Re5JQEeQqe8AvxtiuMwx3w< at >public.gmane.org>

Re: Endian behind a pfsense

Jonathan Lessa — 2012-04-28T14:05:16

is a pleasure to help!

let's see if I can explain it better.
I gave him two options:
1) use the Endian Static IP
There were two distinct networks: pfsense-Endian and Endian-LAN

2) Do not use the WAN and put the two network interfaces in the green zone
Then their workstations and Endian would be in the same LAN pfsense. Vc
atruibuiria a LAN ip of the Endian (green zone), but their workstations have
pfsense as the gateway.
For this to work you must connect the pfsense in one of the interfaces and
other interface endian endian switch connected in your LAN, so that all
traffic from LAN to LAN getaway (pfsense) would be to bridge the green zone.



Jonathan Lessa



2012/4/28 Eduardo Mendes <eduardo.mendes-Re5JQEeQqe8AvxtiuMwx3w< at >public.gmane.org>

Re: Endian behind a pfsense

Eduardo Mendes — 2012-04-28T13:15:02

Jonathan and Farzan,

Thank you both for replying it.

Turns out, there is a bug on Endian 2.5.1 where it is redirecting the
traffic to the default gateway even though all the machines involved are on
the same subnet. I tried to reproduce the problem on 2.4.1, but this
version works like a charm. I opened bug 0004342 to track this issue.

Jonathan,

Thanks for your idea as to use it as a static ip and not a Gateway. You
mean that I should configure both networks with the same ip range?

http://bugs.endian.com/bug_view_advanced_page.php?bug_id=4342

Thanks,

-Eduardo

On Sat, Apr 28, 2012 at 4:42 AM, Jonathan Lessa <jonathanlessa-Re5JQEeQqe8AvxtiuMwx3w< at >public.gmane.org>wrote:

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats.

Re: Endian behind a pfsense

Jonathan Lessa — 2012-04-28T09:42:07

Have tried to leave the Endian Static IP and not as GATEWAY?
If you want to leave the endian "transparent" between your workstations and
pfsense, Endian can try to leave without WAN and configure two ethernet
interfaces on the same bridge, Endian to assign an IP network and configure
it the default route as the pfsense.
So you will have all traffic passing through the bridge, which allows you
to apply rules of proxy and firewall, but the gateway for your
workstations would
be the pfsense and not the Endian. Since there must be structured as
follows: Cable Modem ---> pfSense -> ([eth0] Endian [eth1]) -> LAN Switch

Jonathan Lessa



2012/4/27 Eduardo Mendes <eduardo.mendes-Re5JQEeQqe8AvxtiuMwx3w< at >public.gmane.org>

Re: Endian behind a pfsense

Farzan Qureshi — 2012-04-27T21:20:13

Hi,

Never did this scenario case.

Couple of questions:

How pfsense and endian are connected?

What are the networks for pfsense and endian?

Have you done a trace path/trace route on your endian to an internal IP or
to your system?

Traceroute or tracepath from your endian to an external address such as
yahoo.com and see if the packet traverse from your gateway that is pf sense.

You might need to add route on your endian. Default route should be your
pfsense that is 0.0.0.0 ,0.0.0.0   192.168.100.1(pfsense-ipaddress)

Also under endian firewall and under firewall menu go to incoming routed
traffic and create a rule to allow incoming routed traffic on your green
subnet.

I hope this helps.

Farzan
On Apr 28, 2012 3:54 AM, "Eduardo Mendes" <eduardo.mendes-Re5JQEeQqe8AvxtiuMwx3w< at >public.gmane.org> wrote:

Endian behind a pfsense

Eduardo Mendes — 2012-04-27T15:52:38

Hello all,

I'm doing some tests in my lab and found a very weird problem. I have two
servers: one has pfsense and it is my gateway to the internet. The second
one is a Endian Community 2.5.1 configured as a gateway. PFSENSE is the
only one with two networks: one is connected to my lan and the other one is
my cable modem.

The problems is every time I add the pfsense ip as the default gateway in
Endian, pfsense starts to block traffic that comes from endian to my
workstation(from where I am accessing endian web interface). I send a
packet to endian. Endian replies it, but it replies through its default
gateway - pfsense.  Hence I lose access to endian web interface. If I
restore endian to its factory configuration, or if I delete the default
gateway, I get the access back.

My question here is why endian, when configured on gateway mode, is sending
all the traffic through its default gateway - pfsense - if both endian and
my workstation are on the same network? Have anyone had luck configuring a
endian, as a

zabbix rpm

2012-04-06T07:53:33

Hi everybody.

Does anyone build rpm for zabbix agent >= 1.8.1 ?

I've installed zabbix agent following this guide: 
http://www.efwsupport.com/index.php?topic=2657.0  but start on boot 
doesn't work.

Thanks!


Giovanni Vecchi

System and Network Administrator



SAER Elettropompe SpA

Via Circonvallazione, 22

42016 Guastalla (RE) - Italy

Tel. +39 0522 830941

Fax +39 0522 826948

mail to: giovanni.vecchi-Vt427sO+ix0< at >public.gmane.org

www.saerelettropompe.com








Il contenuto di questa comunicazione ha natura riservata ed è destinato 
esclusivamente alla persona o ente cui essa è indirizzata. 
Qualsiasi forma di utilizzo non autorizzato del contenuto di questo 
messaggio non è consentito. Se non siete il destinatario designato di 
questo messaggio e del suo contenuto Vi preghiamo di comunicarlo 
immediatamente al mittente e di distruggere il messaggio ed i suoi 
eventuali allegati. 


This comunication is confidential and intended for the addressee(s) only.
Any form of unauthorized use of the conten

Postfix upgrade or throttling?

sam.o — 2012-03-12T07:19:53

Hi all,

Been trying to work out how to throttle outgoing relayed emails to smart
host for weeks.

Most options I've tried don't work as they require postfix 2.5+ but EFW
(even latest version) is using postfix 2.3.3

Anyone have any idea how I can stagger / throttle emails out to our SMTP
smart host or how I can upgrade postfix on my box?

Thanks in advance,
Sam.

Re: Asterisk (FreePBX) and Endian Settings

Kerridge — 2012-02-14T12:46:16



you can clear all the connections for that host, that might sort it:-

conntrack -D -s 192.168.8.6






------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d

Re: Facebook Outgoing firewall shutoff

Farzan Qureshi — 2012-02-13T02:05:42

Yes you are in right direction J

Otherwise you can also create a fixed lease for the said MAC (in case you
are using DHCP) and then block access to facebook on that IP J



*From:* Tom Maravilla [mailto:tlmaravilla-Re5JQEeQqe8AvxtiuMwx3w< at >public.gmane.org]
*Sent:* Monday, 13 February 2012 2:49 p.m.
*To:* efw-user-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
*Subject:* Re: [Efw-user] Facebook Outgoing firewall shutoff



Very interesting, how would I go about doing that?

I am looking in proxy/http/access policy, but am not sure how I would
disable the facebook app from using http port 80 or https port 443 for a
particular mac address.

Here is a screen shot of my attempt to do this:

http://slingsite.com/download/proxy.jpg

Is this the right approach?

On Sun, Feb 12, 2012 at 2:48 PM, Farzan Qureshi <fqureshi-HcX2Z0wcrrZSA5vEwR2GfKVXKuFTiq87< at >public.gmane.org>
wrote:

Google works on port 5228 udp and tcp.



However you can block the facebook ap on a particular mac address which
would be of iPhone in yo

Re: Facebook Outgoing firewall shutoff

Tom Maravilla — 2012-02-13T01:49:17

Very interesting, how would I go about doing that?

I am looking in proxy/http/access policy, but am not sure how I would
disable the facebook app from using http port 80 or https port 443 for a
particular mac address.

Here is a screen shot of my attempt to do this:

http://slingsite.com/download/proxy.jpg

Is this the right approach?

On Sun, Feb 12, 2012 at 2:48 PM, Farzan Qureshi
<fqureshi-HcX2Z0wcrrZSA5vEwR2GfKVXKuFTiq87< at >public.gmane.org>wrote:

------------------------------------------------------------------------------
Try before you buy = See our experts in action!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-dev2_______________________________________________
Efw-user mailing list
Efw-user-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/efw-user

AUTO: Shane Ingram is out of the office (returning Mon02/13/2012)

Shane Ingram — 2012-02-12T21:49:41

I am out of the office from Fri 02/10/2012 until Mon 02/13/2012.

I will be out of the office today on holidays and will not be back in the
office until Monday.

For any issues that can not wait until my return please contact Bonnie
Chatwell

Thank you and have a good day


Note: This is an automated response to your message  "Efw-user Digest, Vol
67, Issue 5" sent on 2/12/2012 4:48:49 PM.

This is the only notification you will receive while this person is away.


------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing 
also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/

Re: Facebook Outgoing firewall shutoff

Farzan Qureshi — 2012-02-12T21:48:36

Google works on port 5228 udp and tcp.



However you can block the facebook ap on a particular mac address which
would be of iPhone in your case. You have to create access policy.



*From:* Kenneth Lundström [mailto:kenneth.lundstrom-bMDIh4FUPmL1KXRcyAk9cg< at >public.gmane.org]
*Sent:* Monday, 13 February 2012 10:21 a.m.
*To:* efw-user-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
*Subject:* Re: [Efw-user] Facebook Outgoing firewall shutoff



I could be wrong be isn't facebook just a webpage, that only uses port 80.
So you can't block it based on port numbers.


Kenneth


Does anyone know which port I would need to disable to shut of my daughters
iphone facebook app?  I have spent some time searching, but can't seem to
find it.  Is there a way to watch the logs and determine this?

I also need the google/voice



------------------------------------------------------------------------------

Virtualization & Cloud Management Using Capacity Planning

Cloud computing makes use of virtualization - but cloud