Re: [Efw-user] Block HTTP traffic:

2013-12-24 Thread Matt Hayes
Ok, I think I understand now.  There is a way to do this, and probably more
ways, but you can possibly do it with a DHCP option or if you run Windows
Server, you can use group policy to deploy proxy settings to all machines
to force them to utilize the proxy for internet browsing.


On Tue, Dec 24, 2013 at 12:07 AM, danillo F. danill...@hotmail.com wrote:

 Well let me try to be more objective.

 I want to block all http and https traffic and only allow them to use the
 internet using proxy, I leave the proxy and non-transparent.



 --
 Date: Mon, 23 Dec 2013 23:39:24 -0500
 From: domin...@slackadelic.com
 To: efw-user@lists.sourceforge.net
 Subject: Re: [Efw-user] Block HTTP traffic:

 What do you mean by the 'navigation proxy'?  That's the confusing party.

 You either use the proxy or you don't.  You have a few ways to do this.
  one is to configure the proxy as transparent so that it filters all HTTP
 traffic or you turn it on and point specifically to it.  But, I've never
 heard of someone wanting to use an HTTP proxy but block HTTP proxy.  If you
 want to block HTTP, don't use the proxy.  Turn it off and utilize the
 outbound firewall rules to block outbound port 80.

 By default the outbound firewall allows for outbound port 80.


 On Mon, Dec 23, 2013 at 6:19 PM, danillo F. danill...@hotmail.com wrote:

 I did the default installation endian, do not set any rules, only those
 that come by default.
 The Endian is configured in gateway mode and the stations that set the
 IP endian as default gateway.
 With the default settings of the Endian all stations can browse normally,
 I would like to disable this option, only releasing the navigation proxy.

 att



  Date: Mon, 23 Dec 2013 22:23:14 +0100
  From: davidecottign...@racine.ra.it
  To: efw-user@lists.sourceforge.net
  Subject: Re: [Efw-user] Block HTTP traffic:
 
  Should you post a detailed config?
 
  On 23/12/2013 15:45, danillo F. wrote:
   But I do not want to use transparent proxy, want to allow only
   navigation using proxy.
  
  
  
  
 
   Date: Mon, 23 Dec 2013 09:07:14 -0500
   From: domin...@slackadelic.com
   To: efw-user@lists.sourceforge.net
   Subject: Re: [Efw-user] Block HTTP traffic:
  
   Set the proxy to be transparent... no need to remove any rules.
  
  
   On Mon, Dec 23, 2013 at 5:57 AM, danillo F. danill...@hotmail.com
   mailto:danill...@hotmail.com wrote:
  
   I did that, but just disabling the rules is still possible to
   navigate, even without setting the proxy in navigated.
  
   att
  
   danillo
  
Date: Mon, 23 Dec 2013 11:33:40 +0100
From: davidecottign...@racine.ra.it
   mailto:davidecottign...@racine.ra.it
To: efw-user@lists.sourceforge.net
   mailto:efw-user@lists.sourceforge.net
Subject: Re: [Efw-user] Block HTTP traffic:
  
   
Sure you need to block these protocols and set navigation to proxy
   port
at client side, if proxy is set to not transparerent.
Davide.
   
   
Nella citazione in data Mon Dec 23 01:31:22 2013, danillo F. ha
   scritto:
 Hello people, okay?
 I am wanting to block HTTP and HTTPS traffic, only allowing
   navigation
 proxy.
 I went to Firewall Outgoing firewall:

 And I disabled the following rules:

 RED GREEN TCP/80 ALLOW with IPS allow HTTP
 RED GREEN TCP/443 ALLOW with IPS allow HTTPS

 However still continued getting surf, have some other option?

 att

 danillo



  
 --
 Rapidly troubleshoot problems before they affect your business.
   Most IT
 organizations don't have a clear picture of how application
   performance
 affects their revenue. With AppDynamics, you get 100% visibility
   into your
 Java,.NET,  PHP application. Start your 15-day FREE TRIAL of
   AppDynamics Pro!

  
 http://pubads.g.doubleclick.net/gampad/clk?id=84349831iu=/4140/ostg.clktrk


 ___
 Efw-user mailing list
 Efw-user@lists.sourceforge.net
   mailto:Efw-user@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/efw-user
   
   
   
   
  
 --
Rapidly troubleshoot problems before they affect your business.
   Most IT
organizations don't have a clear picture of how application
   performance
affects their revenue. With AppDynamics, you get 100% visibility
   into your
Java,.NET,  PHP application. Start your 15-day FREE TRIAL of
   AppDynamics Pro!
   
  
 http://pubads.g.doubleclick.net/gampad/clk?id=84349831iu=/4140/ostg.clktrk
___
Efw-user mailing list
Efw-user@lists.sourceforge.net mailto:
 Efw-user@lists.sourceforge.net

[Efw-user] [EFW 2.5.2] openVPN problem

2013-12-24 Thread Andres Gonzalez
Hi !

I have installed EFW 2.5.2 under VMWare ESXi 5.5, the LAN interface is
a VLAN trunk (LAN/WIFI).
Everything seems to work excpet the openVPN connections (roaming users
or gw2gw). The connections are established but I cannot access to
nothing behind the EFW (just de EFW GUI).
Firewall VPN rules are disabled, the user has access to the LAN.

Can be an issue with the VLANs or virtual environment ?

Regards.-

-- 
AGD

--
Rapidly troubleshoot problems before they affect your business. Most IT 
organizations don't have a clear picture of how application performance 
affects their revenue. With AppDynamics, you get 100% visibility into your 
Java,.NET,  PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro!
http://pubads.g.doubleclick.net/gampad/clk?id=84349831iu=/4140/ostg.clktrk
___
Efw-user mailing list
Efw-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/efw-user


Re: [Efw-user] [EFW 2.5.2] openVPN problem

2013-12-24 Thread Álex López
Not sure, but I think you need to enable promiscuous mode on adapter
El 24/12/2013 15:16, Andres Gonzalez tuc...@gmail.com escribió:

 Hi !

 I have installed EFW 2.5.2 under VMWare ESXi 5.5, the LAN interface is
 a VLAN trunk (LAN/WIFI).
 Everything seems to work excpet the openVPN connections (roaming users
 or gw2gw). The connections are established but I cannot access to
 nothing behind the EFW (just de EFW GUI).
 Firewall VPN rules are disabled, the user has access to the LAN.

 Can be an issue with the VLANs or virtual environment ?

 Regards.-

 --
 AGD


 --
 Rapidly troubleshoot problems before they affect your business. Most IT
 organizations don't have a clear picture of how application performance
 affects their revenue. With AppDynamics, you get 100% visibility into your
 Java,.NET,  PHP application. Start your 15-day FREE TRIAL of AppDynamics
 Pro!
 http://pubads.g.doubleclick.net/gampad/clk?id=84349831iu=/4140/ostg.clktrk
 ___
 Efw-user mailing list
 Efw-user@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/efw-user

--
Rapidly troubleshoot problems before they affect your business. Most IT 
organizations don't have a clear picture of how application performance 
affects their revenue. With AppDynamics, you get 100% visibility into your 
Java,.NET,  PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro!
http://pubads.g.doubleclick.net/gampad/clk?id=84349831iu=/4140/ostg.clktrk___
Efw-user mailing list
Efw-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/efw-user