[Efw-user] New to Endian, have some questions.

2009-12-29 Thread Matthew W. Ross
Hello List, I just discovered Endian, and it looks like a great product. I am using it in place of another linux-based firewall solution to provide internet access and filtering for a school. I have a non-transparent proxy setup with Active Directory authentication. It works great for my

Re: [Efw-user] firewall rules are hard to use

2009-12-30 Thread Matthew W. Ross
I would love it if somebody would give some examples of working 2.3 firewall rules, and proxy access policies. The documentation could use some clearing up. Here are a few things I would love clarified: Under Firewall Rules, All policies are read starting from rule 1. If a packet matches a

[Efw-user] AD Authentication... how long bet ween updates of members of groups?

2010-01-06 Thread Matthew W. Ross
I want to add users to a group so they get access to different content on the internet through the filter... So I added the user to the Active Directory group which has access... How long until the Endian will refresh the list of users are members of a group? Do I have to restart the

Re: [Efw-user] Stop access internet of some users from the transparent proxy server

2010-01-13 Thread Matthew W. Ross
It is my understanding that a transparent proxy is unable to identify users. This is not a limitation of Endian firewall, but a limitation of the transparent proxy method. In order to identify users, you must set your users to use a non-transparent proxy. This method can allow the users to

Re: [Efw-user] How to configure a basic Port forward in EFW 2.3

2010-01-15 Thread Matthew W. Ross
I am not sure, but I don't think it will be possible for you to forward traffic from the internet to your server. You say that your public IP is 68.251.1.1 (or something else similar). I'm guessing that this is what your WAN interface on your 2Wire DSL modem is set to. This 2Wire modem then

Re: [Efw-user] Question

2010-02-08 Thread Matthew W. Ross
...@assid.com] To: efw-user@lists.sourceforge.net Sent: Mon, 08 Feb 2010 11:09:49 -0800 Subject: Re: [Efw-user] Question dues the iphone support ipsec if so your in luck. not to rub out in but I am glad I got the android instead -- Satish Alwani Matthew W. Ross mr...@ephrataschools.org wrote: I am

Re: [Efw-user] EFW - Atom processors

2010-02-12 Thread Matthew W. Ross
Or, to help Andres with this question: Has anybody tried Endian 2.3 as a firewall with IPS for ~150 users on a lower end processor? (Old P3, Duron/Celeron? Something in the 1.5GHertz range, or slower. I suspect that the Endian on an Atom 1.6GHertz can handle the 150 users... The real question

Re: [Efw-user] EFW - Atom processors

2010-02-12 Thread Matthew W. Ross
We are currently running 2.3 on a single server servicing 1000 machines, and a few (4, maybe) OpenVPN users. We are using the content filter features of the Endian, but not the IPS. The Server hardware we are using is a SuperMicro 1U server with Dual-Quad-core Xeons running at 2.0 Gigahertz. 8

Re: [Efw-user] Endian Hardware Recommendation

2010-03-01 Thread Matthew W. Ross
I don't remember any recent discussion about small form factor Endian hardware, but if I were looking I'd start here: http://www.newegg.com/Product/ProductList.aspx?Submit=ENESubCategory=3N=2010030003 If you get one of these systems with an expansion slot (or two) and pop in a dual-interface

Re: [Efw-user] Endian Hardware Recommendation

2010-03-02 Thread Matthew W. Ross
Recommendation Any idea in this hardware could work: http://www.astecinc.com.tw/pdf/a3500_0.pdf On Mon, Mar 1, 2010 at 7:05 PM, Matthew W. Ross mr...@ephrataschools.orgwrote: I don't remember any recent discussion about small form factor Endian hardware, but if I were looking I'd start

Re: [Efw-user] Destination nat config problem

2010-03-12 Thread Matthew W. Ross
Only a guess, but have you checked to see if your firewall settings are blocking some of your traffic somehow? --Matt Ross Ephrata School District - Original Message - From: Jonathan S. Shapiro [mailto:s...@eros-os.org] To: efw-user@lists.sourceforge.net Sent: Thu, 11 Mar 2010

[Efw-user] Customizing EFW content filters...

2010-05-18 Thread Matthew W. Ross
Hello all, I'm curious on how I should go about customizing the content filter on Endian Firewall. From other DansGuardian based firewalls I have used, I do understand and see phraselists. But I don't see where the weighted phrase lists are implemented on EFW 2.3. Example: We want to block