Re: Win200 gateway blocking FBSD html?

2004-02-20 Thread anubis
On Thu, 19 Feb 2004 1:46 pm, Robert Storey wrote:
> I'm trying to set up a FreeBSD client machine for a school. They
> have never used FBSD or even Linux, they are 100% Windows. They are
> interested in letting their students gain experience with
> non-Windows software. So I need to prove to them that FBSD can
> work, but I've run into a major obstacle.
>snip

I have a similar setup.  We make each client authenticate to the ms 
isa firewall so that we can stop bludgers checking their share 
portfolio durting work.  This is probably a similar situation.
Try this.

With MS ISA server which is probably running on the win2k firewall box 
there is an option called something like "authenticate outgoing 
requests"  Untick this, It will ask to save settings and restart 
services.  Say yes.  Wait 1 minute.  Try the bsd box again.
You should be able to get out via nat ot via proxy then.

To find the setting start clicking on I think the server object and 
then properties. 

If you cant find it let me know and I will make a step by step.

I have a second freebsd firewall box for all the bsd machines to 
connect through and as a backup for when the windows machine breaks 
down.  You may want to dig out an old relic and so the same.





___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Win200 gateway blocking FBSD html?

2004-02-19 Thread James Long
On Thu, Feb 19, 2004 at 01:12:45PM +0800, Robert Storey wrote:
> 
> I find this very peculiar. Just to be sure that I don't have a misconfigured 
> firewall on the FBSD box, I installed FBSD on my laptop, plugged it into a different 
> network - works fine, I can surf the web. Then I plug it into the school's network, 
> and http doesn't work, but ping and ftp can reach the outside world (though again, 
> it's slow).

A couple suggestions:

1) wrap your lines at 70 character or so;

2) check a windows client which can browse easily and see whether they're
using any settings that suggest a proxy server.  If you do find a proxy
server in use, configure your FreeBSD machine to use the same settings.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Win200 gateway blocking FBSD html?

2004-02-19 Thread Gerard Seibert
Date: Thu, 19 Feb 2004 11:46:57 +0800
From: Robert Storey <[EMAIL PROTECTED]>
Subject: Win200 gateway blocking FBSD html?
To: [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset=US-ASCII

I'm trying to set up a FreeBSD client machine for a school. They have never used FBSD 
or even Linux, they are 100% Windows. They are interested in letting their students 
gain experience with non-Windows software. So I need to prove to them that FBSD can 
work, but I've run into a major obstacle.

The client machines are connected to a switch, which is connected to a Windows 2000 
gateway machine to access the Internet. I set up a FBSD client, and using dhcp it can 
find the network. I can ping the gateway machine, and even ping the local ISP. I can 
also use gftp to access some anonymous ftp sites (such as FreeBSD.org) though 
performance seems slow.

The problem - I cannot access any web sites with http. Doesn't matter if I use 
Konqueror, Mozilla or Lynx. Yet, all the Windows machines on this network can browse 
the web (using Internet Explorer) without difficulty.

I find this very peculiar. Just to be sure that I don't have a misconfigured firewall 
on the FBSD box, I installed FBSD on my laptop, plugged it into a different network - 
works fine, I can surf the web. Then I plug it into the school's network, and http 
doesn't work, but ping and ftp can reach the outside world (though again, it's slow).

Is it somehow possible that the Windows gateway only allows Internet Explorer to work? 
Doesn't seem possible, but what do I know? All suggestions welcome.

best regards,
Robert

Thursday, February 19, 2004 9:52:48 AM

** Reply Separator **

Have you tried using nslookup to see if it is working correctly?

Gerard Seibert
[EMAIL PROTECTED]

Did You Know?

"Jingle Bells" was originally written as a song for Thanksgiving.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Win200 gateway blocking FBSD html?

2004-02-19 Thread Robert Storey
Dear All,

Thanks to everyone (8 persons so far) who replied to my question - I
greatly appreciate the help. Yes, I believe that the problem must be a
Windows proxy server - it's a school, and if I'm not mistaken, a proxy
server can be configured to block pornographic web sites (correct me if
I'm wrong). I'll have to check this tomorrow, as I'm not at the school
right now (it's night here - I'm in Taiwan).

Briefly, to answer some of the questions posed...

> I was wondering, does your mailer hava option to cut the text
> on or becore char 72? This is a bit difficult to read, but i can
> answer you question.

Sorry, I just fixed that. Thanks for telling me.

> And Windows clients are set also to get their network settings 
> automatically. This will include those that are managed by dhcp. I 
> assume from what you say that the FreeBSD machine is successfully 
> gaining a valid ip address, netmask, gateway (router) address and is 
> resolving domain names.

Yes, the output of ifconfig looks very good.

> Is there another gateway that you can go out on? Or better yet,
> replace the the server! 

Unfortunately, not. Interestingly, I learned that the old gateway (5
years old) was installed by a contractor, and it ran FreeBSD! No one at
the school understood how to configure it, and they just replaced it
with a nice new shiny Windows 2000 box because they thought it would be
easier. Arrgh!

More experiments tomorrow. Thanks again,

 - Robert
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Win200 gateway blocking FBSD html?

2004-02-19 Thread Aled Treharne
On Thu, 2004-02-19 at 08:30, Alex de Kruijff wrote:
> Dear Robert,
>  
> > The problem - I cannot access any web sites with http. Doesn't
> matter if I use Konqueror, Mozilla or Lynx. Yet, all the Windows
> machines on this network can browse the web (using Internet Explorer)
> without difficulty.
[...]
> > Is it somehow possible that the Windows gateway only allows Internet
> Explorer to work? Doesn't seem possible, but what do I know? All
> suggestions welcome.
> 
> No a firewall doesn't know anything like that. It makes it choices based
[...]

True... 

> known working client. The other option is that is a proxy server
[...]

Ah! And here lies the crux of it. If you have Microsoft Proxy server
installed with Proxy client on each of the machines, the Proxy client
hooks into the IP stack of the client machine. I've never looked into it
in any depth, but this may be what is causing your headaches.

The solution is either to set up the proxy server to proxy HTTP
properly, install a different Proxy software on there (try Wingate), or
alternatively, install FreeBSD and squid on there. :)

Cheers,
Aled.

-- 
Aled Treharne - Network Operations - Mistral Internet
Tel: 0870 751 6300 Fax: 0870 751 6399  http://www.mistral.net 
Statements made are at all times subject to Mistral's Terms and
Conditions of Business, which are available upon request.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Win200 gateway blocking FBSD html?

2004-02-19 Thread Alex de Kruijff
Dear Robert,

I was wondering, does your mailer hava option to cut the text on or
becore char 72? This is a bit difficult to read, but i can answer you
question.

Articles based on solutions that I use:
http://www.kruijff.org/alex/index.php?dir=docs/FreeBSD/
On Thu, Feb 19, 2004 at 11:46:57AM +0800, Robert Storey wrote:
> I'm trying to set up a FreeBSD client machine for a school. They have never used 
> FBSD or even Linux, they are 100% Windows. They are interested in letting their 
> students gain experience with non-Windows software. So I need to prove to them that 
> FBSD can work, but I've run into a major obstacle.
> 
> The client machines are connected to a switch, which is connected to a Windows 2000 
> gateway machine to access the Internet. I set up a FBSD client, and using dhcp it 
> can find the network. I can ping the gateway machine, and even ping the local ISP. I 
> can also use gftp to access some anonymous ftp sites (such as FreeBSD.org) though 
> performance seems slow.
> 
> The problem - I cannot access any web sites with http. Doesn't matter if I use 
> Konqueror, Mozilla or Lynx. Yet, all the Windows machines on this network can browse 
> the web (using Internet Explorer) without difficulty.
> 
> I find this very peculiar. Just to be sure that I don't have a misconfigured 
> firewall on the FBSD box, I installed FBSD on my laptop, plugged it into a different 
> network - works fine, I can surf the web. Then I plug it into the school's network, 
> and http doesn't work, but ping and ftp can reach the outside world (though again, 
> it's slow).
> 
> Is it somehow possible that the Windows gateway only allows Internet Explorer to 
> work? Doesn't seem possible, but what do I know? All suggestions welcome.

No a firewall doesn't know anything like that. It makes it choices based
on IP, port and certain flags. There are two posibilties however. The
first is that your DHCP gives you an IP that is blocked by the firewall.
You could check this by using you laptop to steal one of the IP's of a
known working client. The other option is that is a proxy server
installed. That could explain the slow performance. A proxy server
doesn't have the wisdom to block based on that kind of info. (Small
change i am wrong here)

I hope his answers you question. Please do a group reply if you have
more question on this topic and i'll help you if i got the time.

Best regards,
Alex

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Win200 gateway blocking FBSD html?

2004-02-19 Thread Peter Risdon
Robert Storey wrote:

I'm trying to set up a FreeBSD client machine for a school. 
 

...

The client machines are connected to a switch, which is connected to a Windows 2000 gateway machine to access the Internet. I set up a FBSD client, and using dhcp it can find the network.

And Windows clients are set also to get their network settings 
automatically. This will include those that are managed by dhcp. I 
assume from what you say that the FreeBSD machine is successfully 
gaining a valid ip address, netmask, gateway (router) address and is 
resolving domain names.

I can ping the gateway machine, and even ping the local ISP. I can also use gftp to access some anonymous ftp sites (such as FreeBSD.org) though performance seems slow.

The problem - I cannot access any web sites with http. Doesn't matter if I use Konqueror, Mozilla or Lynx. Yet, all the Windows machines on this network can browse the web (using Internet Explorer) without difficulty.
 

Another type of automatic setting used _by default_ in Windows networks 
is the use of a proxy server on the gateway machine for http 
connections. This setting is also made automatically on the Windows 
clients, but not on your FreeBSD machine.

Look in the internet control panel on a Windows client and check the 
proxy server settings. If I remember right, you'll want to use port 8080 
on the gateway as a proxy server for http connections.

HTH.

PWR.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Win200 gateway blocking FBSD html?

2004-02-19 Thread Scott W
Robert Storey wrote:

I'm trying to set up a FreeBSD client machine for a school. They have never used FBSD or even Linux, they are 100% Windows. They are interested in letting their students gain experience with non-Windows software. So I need to prove to them that FBSD can work, but I've run into a major obstacle.

The client machines are connected to a switch, which is connected to a Windows 2000 gateway machine to access the Internet. I set up a FBSD client, and using dhcp it can find the network. I can ping the gateway machine, and even ping the local ISP. I can also use gftp to access some anonymous ftp sites (such as FreeBSD.org) though performance seems slow.

The problem - I cannot access any web sites with http. Doesn't matter if I use Konqueror, Mozilla or Lynx. Yet, all the Windows machines on this network can browse the web (using Internet Explorer) without difficulty.

I find this very peculiar. Just to be sure that I don't have a misconfigured firewall on the FBSD box, I installed FBSD on my laptop, plugged it into a different network - works fine, I can surf the web. Then I plug it into the school's network, and http doesn't work, but ping and ftp can reach the outside world (though again, it's slow).

Is it somehow possible that the Windows gateway only allows Internet Explorer to work? Doesn't seem possible, but what do I know? All suggestions welcome.

best regards,
Robert
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
 

Sounds like they may be using a proxy server.  IIRC, most fairly recent 
versions of IE can locate a proxy without configuration (assuming it's a 
Windows/MS proxy server)- not sure if that's the default configuration 
for IE or not, but sounds like it's worth looking into- check out the 
existing IE configuration and ensure No Proxy is selected, close IE and 
relaunch- is it still able to reach outside the LAN?

Scott

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Win200 gateway blocking FBSD html?

2004-02-19 Thread Ion-Mihai Tetcu
On Thu, 19 Feb 2004 11:46:57 +0800
Robert Storey <[EMAIL PROTECTED]> wrote:

> I'm trying to set up a FreeBSD client machine for a school. They have
> never used FBSD or even Linux, they are 100% Windows. They are
> interested in letting their students gain experience with non-Windows
> software. So I need to prove to them that FBSD can work, but I've run
> into a major obstacle.
> 
> The client machines are connected to a switch, which is connected to a
> Windows 2000 gateway machine to access the Internet. I set up a FBSD
> client, and using dhcp it can find the network. I can ping the gateway
> machine, and even ping the local ISP. I can also use gftp to access
> some anonymous ftp sites (such as FreeBSD.org) though performance
> seems slow.
> 
> The problem - I cannot access any web sites with http. Doesn't matter
> if I use Konqueror, Mozilla or Lynx. Yet, all the Windows machines on
> this network can browse the web (using Internet Explorer) without
> difficulty.

Are the IE's on win machine using a proxy on the 2000 gateway ?


-- 
IOnut
Unregistered ;) FreeBSD user

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Win200 gateway blocking FBSD html?

2004-02-19 Thread Andrew China
Sounds like MSproxy server. Doing a search on the net results in similar
problems to yours. Some suggest enabling SOCKS support on the MSproxy server
and a SOCKS client on your client box.

I don't have any experience with MS Proxy directly, other than eradicating the
client on some Windows boxes that had it installed. It installs transparently
and works regardless of your browser's proxy settings. Very annoying if you
don't know it's on there.

Is there another gateway that you can go out on? Or better yet, replace the the
server! 

Quoting Robert Storey <[EMAIL PROTECTED]>:

> I'm trying to set up a FreeBSD client machine for a school. They have never
> used FBSD or even Linux, they are 100% Windows. They are interested in
> letting their students gain experience with non-Windows software. So I need
> to prove to them that FBSD can work, but I've run into a major obstacle.
> 
> The client machines are connected to a switch, which is connected to a
> Windows 2000 gateway machine to access the Internet. I set up a FBSD client,
> and using dhcp it can find the network. I can ping the gateway machine, and
> even ping the local ISP. I can also use gftp to access some anonymous ftp
> sites (such as FreeBSD.org) though performance seems slow.
> 
> The problem - I cannot access any web sites with http. Doesn't matter if I
> use Konqueror, Mozilla or Lynx. Yet, all the Windows machines on this network
> can browse the web (using Internet Explorer) without difficulty.
> 
> I find this very peculiar. Just to be sure that I don't have a misconfigured
> firewall on the FBSD box, I installed FBSD on my laptop, plugged it into a
> different network - works fine, I can surf the web. Then I plug it into the
> school's network, and http doesn't work, but ping and ftp can reach the
> outside world (though again, it's slow).
> 
> Is it somehow possible that the Windows gateway only allows Internet Explorer
> to work? Doesn't seem possible, but what do I know? All suggestions welcome.
> 
> best regards,
> Robert
> 
> 
> ___
> [EMAIL PROTECTED] mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
> 



___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Win200 gateway blocking FBSD html?

2004-02-18 Thread Robert Storey
I'm trying to set up a FreeBSD client machine for a school. They have never used FBSD 
or even Linux, they are 100% Windows. They are interested in letting their students 
gain experience with non-Windows software. So I need to prove to them that FBSD can 
work, but I've run into a major obstacle.

The client machines are connected to a switch, which is connected to a Windows 2000 
gateway machine to access the Internet. I set up a FBSD client, and using dhcp it can 
find the network. I can ping the gateway machine, and even ping the local ISP. I can 
also use gftp to access some anonymous ftp sites (such as FreeBSD.org) though 
performance seems slow.

The problem - I cannot access any web sites with http. Doesn't matter if I use 
Konqueror, Mozilla or Lynx. Yet, all the Windows machines on this network can browse 
the web (using Internet Explorer) without difficulty.

I find this very peculiar. Just to be sure that I don't have a misconfigured firewall 
on the FBSD box, I installed FBSD on my laptop, plugged it into a different network - 
works fine, I can surf the web. Then I plug it into the school's network, and http 
doesn't work, but ping and ftp can reach the outside world (though again, it's slow).

Is it somehow possible that the Windows gateway only allows Internet Explorer to work? 
Doesn't seem possible, but what do I know? All suggestions welcome.

best regards,
Robert


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Win200 gateway blocking FBSD html?

2004-02-18 Thread Robert Storey
I'm trying to set up a FreeBSD client machine for a school. They have never used FBSD 
or even Linux, they are 100% Windows. They are interested in letting their students 
gain experience with non-Windows software. So I need to prove to them that FBSD can 
work, but I've run into a major obstacle.

The client machines are connected to a switch, which is connected to a Windows 2000 
gateway machine to access the Internet. I set up a FBSD client, and using dhcp it can 
find the network. I can ping the gateway machine, and even ping the local ISP. I can 
also use gftp to access some anonymous ftp sites (such as FreeBSD.org) though 
performance seems slow.

The problem - I cannot access any web sites with http. Doesn't matter if I use 
Konqueror, Mozilla or Lynx. Yet, all the Windows machines on this network can browse 
the web (using Internet Explorer) without difficulty.

I find this very peculiar. Just to be sure that I don't have a misconfigured firewall 
on the FBSD box, I installed FBSD on my laptop, plugged it into a different network - 
works fine, I can surf the web. Then I plug it into the school's network, and http 
doesn't work, but ping and ftp can reach the outside world (though again, it's slow).

Is it somehow possible that the Windows gateway only allows Internet Explorer to work? 
Doesn't seem possible, but what do I know? All suggestions welcome.

best regards,
Robert


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"