Re: [Efw-user] Windows Authentication Problems

2009-07-16 Thread Davide Cottignoli
Yes, you can put some rules in iptables to redirect incoming packet to port 80 similar to: iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j DNAT --to 192.168.1.254:8080 in this case traffic is INTERCEPTED and redirected to the squid proxy but in this case you cannot use authenticatio

Re: [Efw-user] Windows Authentication Problems

2009-07-16 Thread Guilherme Rocha
Hello Davide and Christopher, thanks for your answer. I understand you two. My question isn't just block the navigation without set the proxy in browser settings. I would like to use AD authentication without to set the proxy in browser, asking anybody for authentication. Set the proxy in bro

Re: [Efw-user] Windows Authentication Problems

2009-07-16 Thread Davide Cottignoli
If you don't set proxy settings in browser you go through Endian directly if port 80 is open to the outgoing traffic. You also avoid this by removing default gateway from client, so traffic can go to Internet only if proxy settings are in place. Guilherme Rocha ha scritto: > Hello folks, > >

Re: [Efw-user] Windows Authentication Problems

2009-07-16 Thread Christopher Salinardi
You need to deny all internet access except through the proxy, that's what Sam was trying to say. Remove any outgoing rules allowing port 80/443 access and any other ports you want to block (like FTP). Thanks, Chris On Thu, Jul 16, 2009 at 8:55 AM, Guilherme Rocha < guilherme.consul...@gmail.co

Re: [Efw-user] Windows Authentication Problems

2009-07-16 Thread Guilherme Rocha
Hi Sam, thanks for your quick reply. Yes, port 80 is opened. In fact, outgoing firewall is disabled. hug, 2009/7/16 Sam Osborne : > May be obvious but port 80 outgoing blocked? > > On 16/07/2009, at 10:28 PM, Guilherme Rocha wrote: > >> Hello folks, >> >> >> >> I'm a very satisfied endian

Re: [Efw-user] Windows Authentication Problems

2009-07-16 Thread Sam Osborne
May be obvious but port 80 outgoing blocked? On 16/07/2009, at 10:28 PM, Guilherme Rocha wrote: > Hello folks, > > > > I'm a very satisfied endian user, since the first versions, so I'm not > exactly a endian and linux newbie, but > > ... I'm with problems in a new Endian 2.2rc2 set-up, using