EFW 2.1.2 community version Proxy/Content filter not working...

[toby-35]

All,

 

I have EFW 2.1.2 up and running however it is not filtering web content. I have proxy enabled and set to transparent and have checked gambling, porn, nudity, etc in content filter section. I also checked content filter and antivirus on Proxy page. However, I can go to gambling sites as well as others without being blocked.

 

What is going on?

 

Thanks in advance,

 

Eric.

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

[compdoc]

Some parts of this message have been removed. Learn more about Nabble's security policy.

Are the workstations using DHCP from the efw?

 

From: efw-user-bounces@... [mailto:efw-user-bounces@...] On Behalf Of toby
Sent: Wednesday, August 27, 2008 11:12 AM
To: efw-user@...
Subject: [Efw-user] EFW 2.1.2 community version Proxy/Content filter not working...

 

All,

 

I have EFW 2.1.2 up and running however it is not filtering web content. I have proxy enabled and set to transparent and have checked gambling, porn, nudity, etc in content filter section. I also checked content filter and antivirus on Proxy page. However, I can go to gambling sites as well as others without being blocked.

 

What is going on?

 

Thanks in advance,

 

Eric.

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

[toby-35]

Yes.

On Wed, Aug 27, 2008 at 1:49 PM, compdoc <compdoc@...> wrote:

Are the workstations using DHCP from the efw?

 

From: efw-user-bounces@... [mailto:efw-user-bounces@...] On Behalf Of toby
Sent: Wednesday, August 27, 2008 11:12 AM
To: efw-user@...
Subject: [Efw-user] EFW 2.1.2 community version Proxy/Content filter not working...

 

All,

 

I have EFW 2.1.2 up and running however it is not filtering web content. I have proxy enabled and set to transparent and have checked gambling, porn, nudity, etc in content filter section. I also checked content filter and antivirus on Proxy page. However, I can go to gambling sites as well as others without being blocked.

 

What is going on?

 

Thanks in advance,

 

Eric.

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

[compdoc]

Some parts of this message have been removed. Learn more about Nabble's security policy.

I use these settings on 2.1.2:

************

Advanced Web Proxy Tab

Enabled on Green: checked

Transparent on Green: checked

Contentfilter enabled: checked

Antivirus enabled: checked (not needed for content, but a good idea)

***********

Content filter (Dansguardian) Tab

Max. score for phrases (50-300): 300

PICS: checked

Block pages which contain phrases of the following categories

(check all that apply)

Block pages known to have content of the following categories

(check all that apply)

**************

And you'll need to add sites you visit to the whitelist. I had to update the AV keep it from stopping/crashing occasionally. Theres instructions on the web...

Could you show the settings of ipconfig (or ifconfig) from a typical workstation?

 

 

 

 

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

[toby-35]

compdoc,

 

I made my settings look like your suggestions and I still have the same issue. I can go to www.gambling.com without being blocked. Here are the IP settings from one of the machines:

 

C:\>ipconfig /all

Windows IP Configuration

        Host Name . . . . . . . . . . . . : workstation2
        Primary Dns Suffix  . . . . . . . : corp.local
        Node Type . . . . . . . . . . . . : Unknown
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No
        DNS Suffix Search List. . . . . . : corp.local
                                            corp.local

Ethernet adapter Local Area Connection:

        Connection-specific DNS Suffix  . : corp.local
        Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
        Physical Address. . . . . . . . . : 00-10-18-09-CF-35
        Dhcp Enabled. . . . . . . . . . . : Yes
        Autoconfiguration Enabled . . . . : Yes
        IP Address. . . . . . . . . . . . : 10.7.7.221
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 10.7.7.1
        DHCP Server . . . . . . . . . . . : 10.7.7.1
        DNS Servers . . . . . . . . . . . : 10.7.7.21
                                                    68.105.28.11
        Lease Obtained. . . . . . . . . . : Wednesday, August 27, 2008 3:51:41 PM
        Lease Expires . . . . . . . . . . : Wednesday, August 27, 2008 4:51:41 PM

On Wed, Aug 27, 2008 at 2:14 PM, compdoc <compdoc@...> wrote:

I use these settings on 2.1.2:

************

Advanced Web Proxy Tab

Enabled on Green: checked

Transparent on Green: checked

Contentfilter enabled: checked

Antivirus enabled: checked (not needed for content, but a good idea)

***********

Content filter (Dansguardian) Tab

Max. score for phrases (50-300): 300

PICS: checked

Block pages which contain phrases of the following categories

(check all that apply)

Block pages known to have content of the following categories

(check all that apply)

**************

And you'll need to add sites you visit to the whitelist. I had to update the AV keep it from stopping/crashing occasionally. Theres instructions on the web...

Could you show the settings of ipconfig (or ifconfig) from a typical workstation?

 

 

 

 

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

[compdoc]

Some parts of this message have been removed. Learn more about Nabble's security policy.

That all looks good. The only difference I see is that I use the efw as the primary dns server. You might try changing it as a test.

 

Make sure that on the page Advanced Web Proxy> Network based access control > Allowed subnets, that your correct subnet & mask is entered there. And that no one is allowed to bypass the transparent proxy.

 

What's the subnet range, etc. used on the red/public nic?

 

From: efw-user-bounces@... [mailto:efw-user-bounces@...] On Behalf Of toby
Sent: Wednesday, August 27, 2008 3:07 PM
To: efw-user@...
Subject: Re: [Efw-user] EFW 2.1.2 community version Proxy/Content filter not working...

 

compdoc,

 

I made my settings look like your suggestions and I still have the same issue. I can go to www.gambling.com without being blocked. Here are the IP settings from one of the machines:

 

C:\>ipconfig /all

Windows IP Configuration

        Host Name . . . . . . . . . . . . : workstation2
        Primary Dns Suffix  . . . . . . . : corp.local
        Node Type . . . . . . . . . . . . : Unknown
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No
        DNS Suffix Search List. . . . . . : corp.local
                                            corp.local

Ethernet adapter Local Area Connection:

        Connection-specific DNS Suffix  . : corp.local
        Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
        Physical Address. . . . . . . . . : 00-10-18-09-CF-35
        Dhcp Enabled. . . . . . . . . . . : Yes
        Autoconfiguration Enabled . . . . : Yes
        IP Address. . . . . . . . . . . . : 10.7.7.221
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 10.7.7.1
        DHCP Server . . . . . . . . . . . : 10.7.7.1
        DNS Servers . . . . . . . . . . . : 10.7.7.21
                                                    68.105.28.11
        Lease Obtained. . . . . . . . . . : Wednesday, August 27, 2008 3:51:41 PM
        Lease Expires . . . . . . . . . . : Wednesday, August 27, 2008 4:51:41 PM

On Wed, Aug 27, 2008 at 2:14 PM, compdoc <compdoc@...> wrote:

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user