I would set each client to use DHCP. That way, you won't have any mis-configured
clients. At least try it with one client and see what happens...

Of course you'll need to enable the DHCP service for this.

It's no problem that the router on the red can't be denated. I use this setup
all the time for some customers.

By the way, I have many customers that use simple natted routers as their only
firewall, and don’t have problems. Although most routers don’t provide the
control that efw does...



-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Stephane Parenton
Sent: Tuesday, October 23, 2007 10:11 AM
To: [email protected]
Subject: Re: [Efw-user] Back to the content filter...

compdoc a écrit :
> Is there another router on the lan? Maybe the clients aren’t going thru the
efw?
>
> Open a dos window on a client, and type: ipconfig /all
>
> Is the gateway IP the same as the IP of the green nic?
>
> Whats the dns server ip that’s listed? Are the clients using DHCP?
>
>   
The config is the following

There is a red/green config. The red is DHCP and gets DNS from a 
modem/router that cannot be denated and does not provide a REAL 
Firewall. So EFW is here and the green provides another nated network 
(double nat from internet to the PCs). The gateway IP is the same as the 
green IP for every PCs. The clients are not using DHCP, tey're all with 
fixed Adress, and the DNS points to the green IP.

As far as I know, they can only go through the firewall.... The PCs are 
connected to a switch that is connected to the FW that is connected to 
the modem/router (only one cable... )... I cannot see anything wrong 
there... so far...

Stephane

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Efw-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/efw-user


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Efw-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/efw-user

Reply via email to