http://blog.gmane.org/gmane.comp.security.firewalls.efw.user hourly 1 1901-01-01T00:00+00:00 http://gmane.org/img/gmane-25t.png http://gmane.org http://comments.gmane.org/gmane.comp.security.firewalls.efw.user/5821 <pre>Hi to all, we use EFW in school and run a content filter (at level 50). Of corse a lot of unwanted keywords are forbidden but "Google" is open and the pupils can search for "sex and porn sites" via "google - pictures" :-( I tried to enter the URL http://www.google.de/imghp?hl=de&amp;tab=wi and http://www.google.de/imghp?hl=de&amp;tab=ii into the list of forbidden URLs - it didn´t work. So I remembered the ACL-List for (Cisco-)Routers and created a filter that is located before the pupils-Filter to close the hole: Filter 1: deny http://www.google.de/imghp?hl=de&amp;tab=wi deny http://www.google.de/imghp?hl=de&amp;tab=ii Filter 2: permit all and not: Filter 2: permit all deny http://www.google.de/imghp?hl=de&amp;tab=wi deny http://www.google.de/imghp?hl=de&amp;tab=ii It didn´t work either. How can I deny porn-pictures or may be all "google-pictures"? Any suggestions? thanks Herbert ------------------------------------------------------------------------------ Try New Relic Now &amp; We'll Send You this Cool Shirt New Relic i</pre> Herbert Appel 2013-04-23T07:37:09 http://comments.gmane.org/gmane.comp.security.firewalls.efw.user/5820 <pre>Hi, I'm trying to setup VLANs on a EFW, what's the "none" option used to? Thanks.- ------------------------------------------------------------------------------ Precog is a next-generation analytics platform capable of advanced analytics on semi-structured data. The platform includes APIs for building apps and a phenomenal toolset for data science. Developers can use our toolset for easy data analysis &amp; visualization. Get a free account! http://www2.precog.com/precogplatform/slashdotnewsletter_______________________________________________ Efw-user mailing list Efw-user-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f&lt; at &gt;public.gmane.org https://lists.sourceforge.net/lists/listinfo/efw-user </pre> Andres Gonzalez 2013-04-22T23:18:42 http://comments.gmane.org/gmane.comp.security.firewalls.efw.user/5818 <pre>Hi, thanks to all who helped me to solve the problem esp. Josh, Kevin, Andre, Farzan, Davo and all the others. The solution was the IPS! I switched it off and ...... 53MBit/s up and 13MBit/s down :-) Now we have no IPS but there are two firewalls in a row LAN--------EFW------------FOS 100------FTTH/WAN thanks a lot Herbert ------------------------------------------------------------------------------ Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_d2d_mar </pre> Herbert Appel 2013-03-21T14:15:25 http://comments.gmane.org/gmane.comp.security.firewalls.efw.user/5803 <pre>Hello together, we use the latest version of EFW 2.51 in school. Since about one week we are connected to FTTH (FOS 100 as CPE) with 50MBit/s. On the red IF there are truely 50MBit/s, but on the green IF there are only 7MBit/s. Of course the services decelerate the thruput but I didn´t excpect this decrease. We are running CLAVAV, AMAVIS, NTP, DHCP, Content-Filter. What bothers me is that,when we were connected to DSL with 368kBit/s, we had full speed on the green side (47kB/s). Can somebody confirm that this is normal? Or, what can we do to lever the thruput? I would be grateful for any hint. Thanks in advance Herbert ------------------------------------------------------------------------------ Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_d2d_mar </pre> Herbert Appel 2013-03-20T06:40:54 http://comments.gmane.org/gmane.comp.security.firewalls.efw.user/5802 <pre> Endian 2.5.1 Community Version: Hello Today our Endian firewall was going down, as the partition where /var/log reside was full up to 100%. I was not aware of this circumstance. Going to the command shell I found plenty of old archived logs, even later ones than those specified by a 30 days setting. Also I have configured the settings in order that only refused and bad packets are logged. Although also the firewall.log was about 1.2 GBytes. As I did not found any possibility on the Web-Interface to delete the old logs I did it manually. Is there any other way, in order that old logs are deleted automatically, when the partition is going to 90%? I would be grateful for any hint. Thanks in advance, Andre ------------------------------------------------------------------------------ Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_d2d_mar </pre> Andre Mueller 2013-03-14T17:19:58 http://comments.gmane.org/gmane.comp.security.firewalls.efw.user/5801 <pre> Endian 2.5.1 Community Version: Hello I feel a bit silly - behind an Endian 2.5.1 from the LAN I am not able to establish successfully a PPTP-client working connection to an PPTP-server outside on the internet. Outside of the Endian firewall or from the public internet (eg. iPhone) the PPTP-connection to the PPTP-Server works correct. From behind the Endian firewall on the LAN I am able to connect to the PPTP-Server, the routes are configured correctly on the client-PC (standard VPN-Client on MacOSX), but no data traffic is possible in-between the client-PC and the remote network of the PPTP-server (neither ping nor any other type of data exchange). On the Endian firewall the outgoing firewall settings are disabled. Thus default rules are enabled. By enabling outgoing firewall settings the default rule for GREEN is : Source=GREEN; Destination=RED; Service/Protocol=&lt;ANY&gt;; Policy=ALLOW. Therefore no additional rules should be necessary. On the firewall live Log I cannot see any related drops</pre> Andre Mueller 2013-03-14T17:09:24 http://comments.gmane.org/gmane.comp.security.firewalls.efw.user/5797 <pre>I'm just finishing up changes to the VPN support in EFW Community 2.5.1. It includes the following improvements: * Add Xauth support to IPsec for host-net connections * Proper IPsec operation when initiator is behind NAT * L2TP PSK and Certificate * Xauth/L2TP User configuration page This not only adds a new package for the L2TP support it also modifies the existing efw-ipsec package. As a result I would like to get as much testing as possible before releasing it and possible breaking someone's IPsec connection. If you are interested in giving this a try (and can access your firewall even without your IPsec connection :-)) please let me know. ------------------------------------------------------------------------------ Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_d2d_feb_______________________________________________ Efw-user mailing list Efw-user-5NWGOfrQmneRv+LV9MX5uipxlw</pre> Robert B. Nelson 2013-02-27T22:41:00 http://comments.gmane.org/gmane.comp.security.firewalls.efw.user/5796 <pre>Hi! I need to block audio feature on Skype, but allow chat. Any idea if it's possible ? Regards.- ------------------------------------------------------------------------------ Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_d2d_feb_______________________________________________ Efw-user mailing list Efw-user-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f&lt; at &gt;public.gmane.org https://lists.sourceforge.net/lists/listinfo/efw-user </pre> Andres Gonzalez 2013-02-26T02:05:35 http://comments.gmane.org/gmane.comp.security.firewalls.efw.user/5792 <pre> I've created some new repositories for EFW Community 2.5.1. There are three repositories: release, updates, and addons. Each repository has two actual repositories, one for RPMs, the other for SRPMs. The release repository just contains the binary RPMs you get when you use the Developer Environment I created to build the SRPMs from Endian. It also contains the SRPMs used to build those binaries. This repository is intended to allow users of the Developer Environment to install the necessary *-devel RPM packages without having to build all the packages from the SRPMs. Please don't use it to download the RPMs or SRPMs that are available from the Endian update site or SourceForge. The updates repository is currently empty but will contain packages which replace packages that ship as part of EFW, either to fix bugs or provide additional features. The addons repository has packages that are in addition to, rather than replacements for, standard packages. It currently contains wget, subversion (with h</pre> Robert B. Nelson 2013-02-23T22:43:22 http://comments.gmane.org/gmane.comp.security.firewalls.efw.user/5789 <pre>Hi. I've some systems still running 2.4, what's the best way to upgrade to 2.5.1? efw-upgrade doesn't do anything. thanks </pre> Lorenzo Milesi 2013-01-08T13:02:00 http://comments.gmane.org/gmane.comp.security.firewalls.efw.user/5786 <pre>I am trying to get endian to support wifi - it appears this has not been enabled in the kernel. So what I had in mind was to re-config the kernel (with wifi) and rebuild the kernel - using the development environment. Can anybody help with the steps needed to unpack the kernel sources snd to re-build afterwards? TIA D ------------------------------------------------------------------------------ LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial Remotely access PCs and mobile devices and provide instant support Improve your efficiency, and focus on delivering more value-add services Discover what IT Professionals Know. Rescue delivers http://p.sf.net/sfu/logmein_12329d2d </pre> Derek Sims 2012-12-21T11:43:08 http://comments.gmane.org/gmane.comp.security.firewalls.efw.user/5783 <pre>Hi Has anybody got any WIFI working with endian (Community)? I would like to build a system with built in WIFI AP - but I dont seems to have the right drivers. D ------------------------------------------------------------------------------ LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial Remotely access PCs and mobile devices and provide instant support Improve your efficiency, and focus on delivering more value-add services Discover what IT Professionals Know. Rescue delivers http://p.sf.net/sfu/logmein_12329d2d </pre> Derek Sims 2012-12-19T17:22:00 http://comments.gmane.org/gmane.comp.security.firewalls.efw.user/5776 <pre>Hi guys, I´m sitting behind an ENDIAN-MINI. Mails from my iMAC with pictures inside go to the outgoing mailserver "mail.hosting-agency.de" SMTP port 25 or 587 and come from IMAP Server "mail.hosting-agency.de" but sent from my iPAD there is no connection with the SMTP-Server - so I was told from my mail-hoster. Has anybody heard about such a behavior? What can be wrong? thanks a lot for any hint Herbert ------------------------------------------------------------------------------ LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial Remotely access PCs and mobile devices and provide instant support Improve your efficiency, and focus on delivering more value-add services Discover what IT Professionals Know. Rescue delivers http://p.sf.net/sfu/logmein_12329d2d </pre> Herbert Appel 2012-12-11T15:01:40 http://comments.gmane.org/gmane.comp.security.firewalls.efw.user/5775 <pre>Dear Community, I am trying to install Endian firewall 2.5.1 on Cisco Cisco UCS C220 M3 Server with RAID controller UCSC SAS 2008M-8i,LSI SAS 9266-8i 8. It boots up but then the installation says "DISK is too small" after giving an error "unable to read device"... I wounder if any one of you had any success of installing it on a machine with RAID controller. It looks like controller driver is not loaded. Any help would be much appreciated. Thanks. Farzan </pre> Farzan Qureshi 2012-12-10T01:34:19 http://comments.gmane.org/gmane.comp.security.firewalls.efw.user/5762 <pre> Hello, I am new with endian firewall and I have a doubt regarding its operation with SIP. I am using Asterisk as proxy server behind the firewall and I have made portforwarding of the corresponding SIP and RTP ports. However I do not know if I should disable the endian SIP proxy feature or not? What do you think? Thank you very much in advance! ------------------------------------------------------------------------------ Keep yourself connected to Go Parallel: VERIFY Test and improve your parallel project with help from experts and peers. http://goparallel.sourceforge.net_______________________________________________ Efw-user mailing list Efw-user-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f&lt; at &gt;public.gmane.org https://lists.sourceforge.net/lists/listinfo/efw-user </pre> luis felipe picó herrero 2012-11-29T20:51:37 http://comments.gmane.org/gmane.comp.security.firewalls.efw.user/5761 <pre>Hello, I've been using Endian FWs for a few years now, at the beginning just the Community versions but as I gained trust in the product I started to sell the idea to my clients and they started to buy Endians. Usually I would recommend the Endian FW to customers who didn't have the know how to set a decent firewall, apart from the firewall issue it's nice to have an integrated dashboard and that matters to the less techy clients. Even for others that have the knowledge is nice to be able to have an whole in one package. But I think Endian still lacks a bit in real enterprise solutions I'm talking in: 1 - IPV6 Support (it's on the roadmap for endian 3). 2 - BGP,IGP Support, and if its not much to ask MPLS support. 3 - Bonding support (specially with LACP). I'm not sure if there are people out there looking for this too, but if there is please let Endian know :) Cheers, Pedro </pre> Pedro M. S. Oliveira 2012-11-26T11:34:32 http://comments.gmane.org/gmane.comp.security.firewalls.efw.user/5727 <pre>Hi Robert, I have seen your postings on the mailing list and received your email. We apologize that we did not reply immediately. Unfortunately you caught us right in the middle of our annual meetings which were held during this weekend. Additionally we have some huge projects going on that take away lots of our time. But enough about that - you were correct, some SRPMs were missing and we apologize for that. Thank you for pointing this out as we simply were not aware of it. Therefore we published them on Sourceforge on Monday and they can be downloaded here: http://sourceforge.net/projects/efw/files/Development/EFW-2.5.1/EFW-COMMUNITY-2.5.1-201201271721-MISSING-SRPMS.tar.gz/download One thing is bugging me a little bit, though... complaining about somebody not replying during the weekend isn't all that great of an idea if you ask me. In any case, I would very much like to get in touch with you this week. Can you send me a phonenumber so that I can call you (if you would like to have a chat, that is)? </pre> Christian Graffer 2012-11-13T21:10:12 http://comments.gmane.org/gmane.comp.security.firewalls.efw.user/5719 <pre>Good afternoon. I'm searching since last week a way to create 4 subnets in the green zone and then restrict access between them with firewall rules. Unfortunately I did not find a documentation or a response on the forums. I added the VLANS through the menu, but there is no option to assign an IP address to the VLANs, VLAN can only associate to a zone, and I added the 4 in the green zone. I need to add IP addresses to a VLAN in Endian? Where should I add these addresses? After creating VLANs, they appear no address. How do the rules and routes if they have no address? Can anyone help me? I created this scenario with 4 VLANS on DEBIAN Squeeze and work, why not work in Endian? Thanks in advance. ------------------------------------------------------------------------------ LogMeIn Central: Instant, anywhere, Remote PC access and management. Stay in control, update software, and manage PCs from one command center Diagnose problems and improve visibility into emerging IT issues Automate, monitor and manage. Do m</pre> Christian 2012-11-07T21:54:17 http://comments.gmane.org/gmane.comp.security.firewalls.efw.user/5718 <pre> I am out of the office until 09/11/2012. I am off site for training and will not be back in the office until the ninth of october. Please contact our help desk for any immediate need. I will be checking my email periodically and will respond to your request as promptly as possible. Thank you and have a good day Note: This is an automated response to your message "Efw-user Digest, Vol 75, Issue 1" sent on 11/7/2012 2:40:18 AM. This is the only notification you will receive while this person is away. ------------------------------------------------------------------------------ LogMeIn Central: Instant, anywhere, Remote PC access and management. Stay in control, update software, and manage PCs from one command center Diagnose problems and improve visibility into emerging IT issues Automate, monitor and manage. Do more in less time with Central http://p.sf.net/sfu/logmein12331_d2d </pre> Shane Ingram 2012-11-07T07:42:58 http://comments.gmane.org/gmane.comp.security.firewalls.efw.user/5715 <pre>Is it right to say that with the CLI, I can't do very much? Unless I rely on linux commands standard. I mean, is there a list of the functions allowed in the CLI? I dunno, something like: start/stop firewalling, start/stop admin, start/stop vpn. AFAIK you can only start and stop the ssh service. There is a "command help" and I suspect that that's is all we got. Am I right? Thanks Davo ------------------------------------------------------------------------------ LogMeIn Central: Instant, anywhere, Remote PC access and management. Stay in control, update software, and manage PCs from one command center Diagnose problems and improve visibility into emerging IT issues Automate, monitor and manage. Do more in less time with Central http://p.sf.net/sfu/logmein12331_d2d </pre> d.davolio-jhqqPEzQr+OgsXowIWgXJ16hYfS7NtTn< at >public.gmane.org 2012-11-06T14:50:50 http://comments.gmane.org/gmane.comp.security.firewalls.efw.user/5711 <pre>Hi everybody, I'm quite new to Endian and I have a question or two. I have a Web Server published via a "Port Forwarding" rule, very simple. In the "Access From" rules section I have "Allow from: Uplink Any", since everybody can access to the Web Server. Now, someone was trying a nice DoS, attacking the http port from a fixed IP address. The documentation say that I can add an "Access From" rules to tune the IP addresses. But, as far as I can see I can only add "Access From" rules of the "Allow from" type. I can't add a "Deny from:" rule if the original one is the "Allow" type. Is it correct? Or am I missing something? To add a "Deny From" I added a duplicated "Port Forwarding" rule on top of the previous one, identical but for the "Deny From" rule. It works but is this the right way to configure? I'm asking because I know a bit of iptables and sounds a bit unnecessary to me. But as I said, I'm new to Endian and I'd like to know if I'm doing it right. Thanks Davo ---------------------------------</pre> d.davolio-jhqqPEzQr+OgsXowIWgXJ16hYfS7NtTn< at >public.gmane.org 2012-10-30T11:41:30 Search the mailing list at Gmane query http://search.gmane.org/?group=$group=gmane.comp.security.firewalls.efw.user