Nabble - efw-user

Re: Problems with OpenVPN from 2.2 to 2.3

2009-12-07T17:46:19Z

I've noticed that whenever rules with IPS are enabled, traffic does not get through. Snort might be set too strictly in my scenario.

Disabled IPS, but the VPN server still does not let traffic through. Since this is for a client, I'll have to go back to their offices to have a look again. Will keep you posted.

I also need to report to Endian some issues I've found while migrating their firewall from 2.2 to 2.3 last weekend.

Thanks for the replies,

Rafael

2009/12/8 Vikash Khatuwala <vikash@...>

Do you have IPS (snort) running? I found that snort will filter VPN
traffic regardless of VPN firewall rules.

At 07:03 PM 07-12-09, you wrote:
>Have you cheked the VPN firewall config?
>Cheers,
>Pedro
>On Monday 07 December 2009 07:58:17 Rafael Fonseca wrote:
> > I'm getting the same thing. Any news?
> > --
> > Rafael Fonseca
> > www.nunca.com.br
> >
> >
> > 2009/11/7 Elmar Natter <en@...>
> >
> > > I've just encountered a new problem while switching from 2.2 to
> > > 2.3. The same config which worked perfect under 2.2 cause a
> > > problem under 2.3. Now only the router is pingable, and the web
> > > front end is available. But none IP from the network (same subnet
> > > on green interface) is available. So what to do different in efw
> > > 2.3 to get openvpn access running?
> > >
> > > Regards
> > >
> > > Elmar
> > >
> > >
> > >
> > >
> > >
> > >
> ------------------------------------------------------------------------------
> > > Let Crystal Reports handle the reporting - Free Crystal Reports
> 2008 30-Day
> > > trial. Simplify your report design, integration and deployment
> - and focus
> > > on
> > > what you do best, core application coding. Discover what's new with
> > > Crystal Reports now. http://p.sf.net/sfu/bobj-july
> > > _______________________________________________
> > > Efw-user mailing list
> > > Efw-user@...
> > > https://lists.sourceforge.net/lists/listinfo/efw-user
> > >
> >
>
>--
>----------------------------------------------------------------------------------------------------------
>Pedro M. S. Oliveira
>IT Consultant
>Email: pmsoliveira@...
>URL: http://www.linux-geex.com
>Cellular: +351 96 5867227
>----------------------------------------------------------------------------------------------------------
>
>------------------------------------------------------------------------------
>Join us December 9, 2009 for the Red Hat Virtual Experience,
>a free event focused on virtualization and cloud computing.
>Attend in-depth sessions from your desk. Your couch. Anywhere.
>http://p.sf.net/sfu/redhat-sfdev2dev
>_______________________________________________
>Efw-user mailing list
>Efw-user@...
>https://lists.sourceforge.net/lists/listinfo/efw-user

------------------------------------------------------------------------------
Join us December 9, 2009 for the Red Hat Virtual Experience,
a free event focused on virtualization and cloud computing.
Attend in-depth sessions from your desk. Your couch. Anywhere.
http://p.sf.net/sfu/redhat-sfdev2dev
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

--
--
Rafael Fonseca
www.nunca.com.br

------------------------------------------------------------------------------
Return on Information:
Google Enterprise Search pays you back
Get the facts.
http://p.sf.net/sfu/google-dev2dev

_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: Problems with OpenVPN from 2.2 to 2.3

2009-12-07T05:52:21Z

Do you have IPS (snort) running? I found that snort will filter VPN
traffic regardless of VPN firewall rules.

At 07:03 PM 07-12-09, you wrote:

>Have you cheked the VPN firewall config?
>Cheers,
>Pedro
>On Monday 07 December 2009 07:58:17 Rafael Fonseca wrote:
> > I'm getting the same thing. Any news?
> > --
> > Rafael Fonseca
> > www.nunca.com.br
> >
> >
> > 2009/11/7 Elmar Natter <en@...>
> >
> > > I've just encountered a new problem while switching from 2.2 to
> > > 2.3. The same config which worked perfect under 2.2 cause a
> > > problem under 2.3. Now only the router is pingable, and the web
> > > front end is available. But none IP from the network (same subnet
> > > on green interface) is available. So what to do different in efw
> > > 2.3 to get openvpn access running?
> > >
> > > Regards
> > >
> > > Elmar
> > >
> > >
> > >
> > >
> > >
> > >
> ------------------------------------------------------------------------------
> > > Let Crystal Reports handle the reporting - Free Crystal Reports
> 2008 30-Day
> > > trial. Simplify your report design, integration and deployment
> - and focus
> > > on
> > > what you do best, core application coding. Discover what's new with
> > > Crystal Reports now. http://p.sf.net/sfu/bobj-july
> > > _______________________________________________
> > > Efw-user mailing list
> > > Efw-user@...
> > > https://lists.sourceforge.net/lists/listinfo/efw-user
> > >
> >
>
>--
>----------------------------------------------------------------------------------------------------------
>Pedro M. S. Oliveira
>IT Consultant
>Email: pmsoliveira@...
>URL: http://www.linux-geex.com
>Cellular: +351 96 5867227
>----------------------------------------------------------------------------------------------------------
>
>------------------------------------------------------------------------------
>Join us December 9, 2009 for the Red Hat Virtual Experience,
>a free event focused on virtualization and cloud computing.
>Attend in-depth sessions from your desk. Your couch. Anywhere.
>http://p.sf.net/sfu/redhat-sfdev2dev
>_______________________________________________
>Efw-user mailing list
>Efw-user@...
>https://lists.sourceforge.net/lists/listinfo/efw-user

------------------------------------------------------------------------------
Join us December 9, 2009 for the Red Hat Virtual Experience,
a free event focused on virtualization and cloud computing.
Attend in-depth sessions from your desk. Your couch. Anywhere.
http://p.sf.net/sfu/redhat-sfdev2dev
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: Problems with OpenVPN from 2.2 to 2.3

2009-12-07T03:03:58Z

Have you cheked the VPN firewall config?
Cheers,
Pedro
On Monday 07 December 2009 07:58:17 Rafael Fonseca wrote:

> I'm getting the same thing. Any news?
> --
> Rafael Fonseca
> www.nunca.com.br
>
>
> 2009/11/7 Elmar Natter <en@...>
>
> > I've just encountered a new problem while switching from 2.2 to
> > 2.3. The same config which worked perfect under 2.2 cause a
> > problem under 2.3. Now only the router is pingable, and the web
> > front end is available. But none IP from the network (same subnet
> > on green interface) is available. So what to do different in efw
> > 2.3 to get openvpn access running?
> >
> > Regards
> >
> > Elmar
> >
> >
> >
> >
> >
> > ------------------------------------------------------------------------------
> > Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
> > trial. Simplify your report design, integration and deployment - and focus
> > on
> > what you do best, core application coding. Discover what's new with
> > Crystal Reports now. http://p.sf.net/sfu/bobj-july
> > _______________________________________________
> > Efw-user mailing list
> > Efw-user@...
> > https://lists.sourceforge.net/lists/listinfo/efw-user
> >
>

--
----------------------------------------------------------------------------------------------------------
Pedro M. S. Oliveira
IT Consultant
Email: pmsoliveira@...
URL: http://www.linux-geex.com
Cellular: +351 96 5867227
----------------------------------------------------------------------------------------------------------

------------------------------------------------------------------------------
Join us December 9, 2009 for the Red Hat Virtual Experience,
a free event focused on virtualization and cloud computing.
Attend in-depth sessions from your desk. Your couch. Anywhere.
http://p.sf.net/sfu/redhat-sfdev2dev
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: Problems with OpenVPN from 2.2 to 2.3

2009-12-06T23:58:17Z

I'm getting the same thing. Any news?
--
Rafael Fonseca
www.nunca.com.br

2009/11/7 Elmar Natter <en@...>

I've just encountered a new problem while switching from 2.2 to
2.3. The same config which worked perfect under 2.2 cause a
problem under 2.3. Now only the router is pingable, and the web
front end is available. But none IP from the network (same subnet
on green interface) is available. So what to do different in efw
2.3 to get openvpn access running?

Regards

Elmar

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: Not alerting on ssh login

2009-12-01T16:17:36Z

hi,

EFW is using syslog-ng which is very powerful in reporting.

Regards
Jaroslaw

----- "Steve Madel" <sjmadel@...> schrieb:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> I noticed today that my firewall is not alerting on ssh logins.
> Backup emails are working however. What would you guys suggest
> checking to see why this isn't working?
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.12 (MingW32)
> Comment: Use GnuPG with Firefox : http://getfiregpg.org (Version:
> 0.7.10)
>
> iEYEARECAAYFAksG9YQACgkQ94ZHW4r/A7Kq1wCghKYxVOiVkR04ENV8rqQ5GhBm
> t80AoLtIJWOva6DNDLyua0rW+DkfzFWu
> =ZQu4
> -----END PGP SIGNATURE-----
>
> ------------------------------------------------------------------------------
> Let Crystal Reports handle the reporting - Free Crystal Reports 2008
> 30-Day
> trial. Simplify your report design, integration and deployment - and
> focus on
> what you do best, core application coding. Discover what's new with
> Crystal Reports now. http://p.sf.net/sfu/bobj-july
> _______________________________________________
> Efw-user mailing list
> Efw-user@...
> https://lists.sourceforge.net/lists/listinfo/efw-user

Re: Snort blocks smb and netbios over VPN despite FW rule.

2009-11-30T19:54:17Z

Just did that, Issue ID 2464

Thanks.

At 09:59 PM 30-11-09, Luca Giovenzana wrote:

>That's interesting..
>
>Could you open a bug on http://bugs.endian.com ?
>
>Thanks,
>Luca
>
> > Ive got EFW 2.3 with openvpn and client is a roadwarrior. VPN works
> > fine ie. I can ping and SSH to machines on the GREEN zone to/from the
> > openvpn client.
> >
> > PING OK : VPN client <----> GREEN zone
> > SSH OK : VPN client <----> GREEN zone
> > smb/netbios BLOCKED : VPN client <----> GREEN zone
> >
> > After almost a week I figured out the snort(IPS) will block smb and
> > netbios over the VPN despite the VPN firewall rule to allow all
> > access, also same result if VPN firewall is disabled.
> >
> > If I switch off IPS then file and print sharing WORKS. There is
> > nothing in the logs logs about these packets being blocked otherwise
> > I would have found out much earlier.
> >
> > Any idea on how to fix this?
> >
> > Thanks,
> > Vikash.
>
>--
>:: e n d i a n
>:: open source - open minds
>
>:: luca giovenzana
>:: phone +39 0471 631763 :: gpg key id 3B741128
>:: http://www.endian.com :: luca (AT) endian.com
>
>
>------------------------------------------------------------------------------
>Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
>trial. Simplify your report design, integration and deployment - and focus on
>what you do best, core application coding. Discover what's new with
>Crystal Reports now. http://p.sf.net/sfu/bobj-july
>_______________________________________________
>Efw-user mailing list
>Efw-user@...
>https://lists.sourceforge.net/lists/listinfo/efw-user

Re: Snort blocks smb and netbios over VPN despite FW rule.

2009-11-30T05:59:01Z

That's interesting..

Could you open a bug on http://bugs.endian.com ?

Thanks,
Luca

> Ive got EFW 2.3 with openvpn and client is a roadwarrior. VPN works
> fine ie. I can ping and SSH to machines on the GREEN zone to/from the
> openvpn client.
>
> PING OK : VPN client <----> GREEN zone
> SSH OK : VPN client <----> GREEN zone
> smb/netbios BLOCKED : VPN client <----> GREEN zone
>
> After almost a week I figured out the snort(IPS) will block smb and
> netbios over the VPN despite the VPN firewall rule to allow all
> access, also same result if VPN firewall is disabled.
>
> If I switch off IPS then file and print sharing WORKS. There is
> nothing in the logs logs about these packets being blocked otherwise
> I would have found out much earlier.
>
> Any idea on how to fix this?
>
> Thanks,
> Vikash.

--
:: e n d i a n
:: open source - open minds

:: luca giovenzana
:: phone +39 0471 631763 :: gpg key id 3B741128
:: http://www.endian.com :: luca (AT) endian.com

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

signature.asc (204 bytes) Download Attachment

Re: Allow RDP

2009-11-30T05:26:06Z

Allan Marques - MULTIBELT schreef:

Hi all,

Hi Allan,

I need to allow connection RDP on port 3389 on EFW

I expect you need to portforward this port to another server. See firewall -> portforwarding.

I need a tutorial to know how to do that ?

I hope this helpes.

Sorry for my bad english,

No problem, My spanish (is it the language in Brasilia?) is far worse ;-)

Keep in touch.

Thanks


------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july


_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Allow RDP

2009-11-30T04:57:14Z

Hi all,

I need to allow connection RDP on port 3389 on EFW

I need a tutorial to know how to do that ?

Sorry for my bad english,

Keep in touch.

Thanks

Re: uplink editor not working

2009-11-30T03:50:04Z

Hi John

Thanks for the help, the second uplink folder was empty. I deleted the folder and created a new second uplink via the GUI, worked perfectly.

Thanks
Steve

-----Original Message-----
From: John Marotta [mailto:jmarotta@...]
Sent: 30 November 2009 12:21 PM
To: efw-user@...
Subject: Re: [Efw-user] uplink editor not working

Steve,

Putty into the firewall from it's green IP and goto /var/efw/uplinks.
Here you will find a separate folder for each uplink. Check the settings
file for each uplink and make sure that no 2 are using the same ETH
device.

If you need to remove the uplink, delete the whole folder. If you delete
the Main uplink, use the Network wizard to recreate it.

-----Original Message-----
From: Steven Sher [mailto:StevenS@...]
Sent: 11/30/2009 4:44 AM
To: efw-user@...
Subject: [Efw-user] uplink editor not working

I have installed the Endian 2.3 and have huge problems with multiple red
uplinks.

The editor does not seem to save the changes when editing the second
uplink, it only saves the settings when you create a new uplink.

But now when I try create a new uplink, when I click to save the new
uplink, it returns a blank page and does not create the link?

Can anybody please help with this?

Thanks

Steve

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: uplink editor not working

2009-11-30T02:21:07Z

Steve,

Putty into the firewall from it's green IP and goto /var/efw/uplinks.
Here you will find a separate folder for each uplink. Check the settings
file for each uplink and make sure that no 2 are using the same ETH
device.

If you need to remove the uplink, delete the whole folder. If you delete
the Main uplink, use the Network wizard to recreate it.

-----Original Message-----
From: Steven Sher [mailto:StevenS@...]
Sent: 11/30/2009 4:44 AM
To: efw-user@...
Subject: [Efw-user] uplink editor not working

I have installed the Endian 2.3 and have huge problems with multiple red
uplinks.

The editor does not seem to save the changes when editing the second
uplink, it only saves the settings when you create a new uplink.

But now when I try create a new uplink, when I click to save the new
uplink, it returns a blank page and does not create the link?

Can anybody please help with this?

Thanks

Steve

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

uplink editor not working

2009-11-30T01:43:45Z

I have installed the Endian 2.3 and have huge problems with multiple red uplinks.

The editor does not seem to save the changes when editing the second uplink, it only saves the settings when you create a new uplink.

But now when I try create a new uplink, when I click to save the new uplink, it returns a blank page and does not create the link?

Can anybody please help with this?

Thanks

Steve

Snort blocks smb and netbios over VPN despite FW rule.

2009-11-29T22:18:11Z

Hi,

Ive got EFW 2.3 with openvpn and client is a roadwarrior. VPN works
fine ie. I can ping and SSH to machines on the GREEN zone to/from the
openvpn client.

PING OK : VPN client <----> GREEN zone
SSH OK : VPN client <----> GREEN zone
smb/netbios BLOCKED : VPN client <----> GREEN zone

After almost a week I figured out the snort(IPS) will block smb and
netbios over the VPN despite the VPN firewall rule to allow all
access, also same result if VPN firewall is disabled.

If I switch off IPS then file and print sharing WORKS. There is
nothing in the logs logs about these packets being blocked otherwise
I would have found out much earlier.

Any idea on how to fix this?

Thanks,
Vikash.

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: Devel packages for 2.3

2009-11-28T18:26:03Z

Igor Mikolic-Torreira wrote:

> Did you notice that glibc-devel provided on the
> updates-devel site (glibc-devel-2.3.4-2.39.endian6) is older
> than the glibc installed by the EFW 2.3 installer and
> distributed as part of the RPMs and SRPMS
> (glibc-2.3.4-2.41.endian8)
>
> This is a problem for building a 2.3 development box
> directly on top of an EFW 2.3 install (which is what I've
> done in the past).
>
> Anyone know where a corresponding version of glibc-devel
> might be found? I can try forcing it, but I would prefer to
> install the appropriate version.

Actually, there are a bunch of older packages on the
updates-devel site. For example, EFW 2.3 comes with rpm
4.4.2, but the updates-devel site has rpm 4.4.1. This is
more than a packaging bump (as is the case with glibc), as
the rpm versions are actually different. I noticed this as
I was trying to install rpm-build....

Igor

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: Devel packages for 2.3

2009-11-28T17:52:38Z

Patricio A. Bruna wrote:

> I found the answer my self, all the packages are available on the
> updates-devel site.
>
> Thanks
>
> ------------------------------------
> Patricio Bruna V.
> IT Linux Ltda.
> http://www.it-linux.cl
> Fono : (+56-2) 333 0578
> Móvil: (+56-9) 7776 2899
> IT Linux en Facebook <http://www.facebook.com/pages/IT-Linux/73630412809>

Patricio,

Did you notice that glibc-devel provided on the
updates-devel site (glibc-devel-2.3.4-2.39.endian6) is older
than the glibc installed by the EFW 2.3 installer and
distributed as part of the RPMs and SRPMS
(glibc-2.3.4-2.41.endian8)

This is a problem for building a 2.3 development box
directly on top of an EFW 2.3 install (which is what I've
done in the past).

Anyone know where a corresponding version of glibc-devel
might be found? I can try forcing it, but I would prefer to
install the appropriate version.

Igor

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Xen support for 2.3

2009-11-28T12:27:20Z

Anyone has managed to compile a xen-kernel for endian 2.3 or the xenpv drivers?

------------------------------------
Patricio Bruna V.
IT Linux Ltda.
http://www.it-linux.cl
Fono : (+56-2) 333 0578
Móvil: (+56-9) 7776 2899
IT Linux en Facebook

Re: Devel packages for 2.3

2009-11-28T12:19:56Z

Patricio A. Bruna wrote:

> Im trying to build a kernel with xen support, do you know how?
>
> ------------------------------------
> Patricio Bruna V.
> IT Linux Ltda.
> http://www.it-linux.cl
> Fono : (+56-2) 333 0578
> Móvil: (+56-9) 7776 2899
> IT Linux en Facebook <http://www.facebook.com/pages/IT-Linux/73630412809>
>
>

No, that's not something I've been working on because I use
dedicated EFW hosts. But neobiker (active on this list) has
been working xen support and might be able to help you. So
you probably should ask the question in a new thread.

Igor

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: Devel packages for 2.3

2009-11-28T11:51:42Z

Im trying to build a kernel with xen support, do you know how?

------------------------------------
Patricio Bruna V.
IT Linux Ltda.
http://www.it-linux.cl
Fono : (+56-2) 333 0578
Móvil: (+56-9) 7776 2899
IT Linux en Facebook

----- "Igor Mikolic-Torreira" <igormtnews@...> escribió:

> Patricio A. Bruna wrote:
> > The username is the email you register with endian and the password is
> > community
> >
>
> Got it -- thanks! Somehow I missed this. Busy downloading
> as we speak :)
>
> Igor
>
> ------------------------------------------------------------------------------
> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
> trial. Simplify your report design, integration and deployment - and focus on
> what you do best, core application coding. Discover what's new with
> Crystal Reports now. http://p.sf.net/sfu/bobj-july
> _______________________________________________
> Efw-user mailing list
> Efw-user@...
> https://lists.sourceforge.net/lists/listinfo/efw-user
>

Re: Devel packages for 2.3

2009-11-28T11:07:23Z

Patricio A. Bruna wrote:
> The username is the email you register with endian and the password is
> community
>

Got it -- thanks! Somehow I missed this. Busy downloading
as we speak :)

Igor

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: Devel packages for 2.3

2009-11-28T09:53:06Z

The username is the email you register with endian and the password is community

------------------------------------
Patricio Bruna V.
IT Linux Ltda.
http://www.it-linux.cl
Fono : (+56-2) 333 0578
Móvil: (+56-9) 7776 2899
IT Linux en Facebook

----- "Igor Mikolic-Torreira" <igormtnews@...> escribió:

> Patricio A. Bruna wrote:
> > You may found it here: http://updates.endian.org/devel/pool/
> > You'll need a username, for this go to the comunity site of endian
> >
>
> Patricio,
>
> Thanks -- I'm already registered with the Endian community
> (via http://www.endian.com/en/community/efw-updates/), but
> while that allows me to udpate my EFW systems, it didn't
> provide me with a username or password.
>
> Is there some other place I need to register? I tried using
> combinations of my name and email address as username and/or
> password with no luck.
>
> Sorry to be obtuse, but I am eager to build several add-on
> packages I really need to build for my 2.3 set ups (which I
> will share at http://http://endian.mcabig.net/).
>
> Igor
>
>
> ------------------------------------------------------------------------------
> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
> trial. Simplify your report design, integration and deployment - and focus on
> what you do best, core application coding. Discover what's new with
> Crystal Reports now. http://p.sf.net/sfu/bobj-july
> _______________________________________________
> Efw-user mailing list
> Efw-user@...
> https://lists.sourceforge.net/lists/listinfo/efw-user
>

Re: Devel packages for 2.3

2009-11-28T09:39:45Z

Patricio A. Bruna wrote:
> You may found it here: http://updates.endian.org/devel/pool/
> You'll need a username, for this go to the comunity site of endian
>

Patricio,

Thanks -- I'm already registered with the Endian community
(via http://www.endian.com/en/community/efw-updates/), but
while that allows me to udpate my EFW systems, it didn't
provide me with a username or password.

Is there some other place I need to register? I tried using
combinations of my name and email address as username and/or
password with no luck.

Sorry to be obtuse, but I am eager to build several add-on
packages I really need to build for my 2.3 set ups (which I
will share at http://http://endian.mcabig.net/).

Igor

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: Devel packages for 2.3

2009-11-28T09:03:50Z

You may found it here: http://updates.endian.org/devel/pool/
You'll need a username, for this go to the comunity site of endian

------------------------------------
Patricio Bruna V.
IT Linux Ltda.
http://www.it-linux.cl
Fono : (+56-2) 333 0578
Móvil: (+56-9) 7776 2899
IT Linux en Facebook

----- "Igor Mikolic-Torreira" <igormtnews@...> escribió:

> Patricio A. Bruna wrote:
> > I found the answer my self, all the packages are available on the
> > updates-devel site.
> >
> > Thanks
> >
>
> Could you provide a link please. I've looked all over and
> haven't been able to find them. I can find the source RPMs
> for 2.3 at sourceforge
>
> https://sourceforge.net/projects/efw/files/Development/
>
> But they don't have the devel RPMs like they had issued for
> previous versions (latest devel RPMs I can find are for 2.2).
>
> Thanks,
>
> Igor
>
> ------------------------------------------------------------------------------
> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
> trial. Simplify your report design, integration and deployment - and focus on
> what you do best, core application coding. Discover what's new with
> Crystal Reports now. http://p.sf.net/sfu/bobj-july
> _______________________________________________
> Efw-user mailing list
> Efw-user@...
> https://lists.sourceforge.net/lists/listinfo/efw-user
>

Re: Devel packages for 2.3

2009-11-28T08:10:42Z

Patricio A. Bruna wrote:
> I found the answer my self, all the packages are available on the
> updates-devel site.
>
> Thanks
>

Could you provide a link please. I've looked all over and
haven't been able to find them. I can find the source RPMs
for 2.3 at sourceforge

https://sourceforge.net/projects/efw/files/Development/

But they don't have the devel RPMs like they had issued for
previous versions (latest devel RPMs I can find are for 2.2).

Thanks,

Igor

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: Devel packages for 2.3

2009-11-28T07:38:50Z

I found the answer my self, all the packages are available on the updates-devel site.

Thanks

------------------------------------
Patricio Bruna V.
IT Linux Ltda.
http://www.it-linux.cl
Fono : (+56-2) 333 0578
Móvil: (+56-9) 7776 2899
IT Linux en Facebook

----- "Patricio A. Bruna" <pbruna@...> escribió:

Anyone know when this will be availabe
>

-------------------------------

Patricio Bruna V.

www.itlinux.cl

Teléf. (+56-2) 333 0051

Móvil (+56-9) 7776 2899

> ------------------------------------------------------------------------------
> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
> trial. Simplify your report design, integration and deployment - and focus on
> what you do best, core application coding. Discover what's new with
> Crystal Reports now. http://p.sf.net/sfu/bobj-july
> _______________________________________________
> Efw-user mailing list
> Efw-user@...
> https://lists.sourceforge.net/lists/listinfo/efw-user
>

Devel packages for 2.3

2009-11-27T13:13:32Z

Anyone know when this will be availabe

-------------------------------

Patricio Bruna V.

www.itlinux.cl

Teléf. (+56-2) 333 0051

Móvil (+56-9) 7776 2899

inter-zone rules are not working properly!!

2009-11-23T12:59:00Z

I'm working with efw 2.2 and define some rules for traffics from green to orange and other inter-zones. when I define for example that reject or deny traffic from Green zone to Orange, nothing happens and I can still access to Orange zone!!!
The similar rules are working in outgoing traffic section but no deny or reject rules are working in inter-zone traffic! I have access to zones behind firewall without any limits.

Does anybody know what's the problem with it? Any hints would be helpful.

Can't connect roadwarriors

2009-11-21T05:13:01Z

Hello all!

I have the following setup: Two Endian firewalls are connected through
OpenVPN (Gw2Gw) and everything is working nicely. I can connect
additional roadwarriors to the Endian1 and there is also everything
good. As soon as I try though to connect a roadwarrior to Endian2, the
connection hangs and cannot be completed. For the roadwarrior there isnt
a clear error but I found the following in the Endian2 log:

OpenVPN 2.1_rc7 i586-endian-linux [SSL] [LZO2] [EPOLL] built on Nov 13 2008
local WARNING: file '/var/efw/openvpn/pkcs12.p12' is group or others
accessible
local WARNING: This configuration may accept clients which do not
present a certificate
local Note: Cannot ioctl TUNSETIFF tap1: Device or resource busy (errno=16)
local Note: Attempting fallback to kernel 2.2 TUN/TAP interface
local Cannot open TUN/TAP dev /dev/tap1: No such file or directory
(errno=2)
local Exiting

From what I understand, the problem comes because there is no tap1
device. The tap0 device is probably the one used for the Gw2Gw
connection (client), but, I assume, when I started the OpenVPN server,
the Endian2 box apparently didnt create the second device for the server.

Can anyone help me resolve the problem so I can have roadwarriors
connecting to both boxes?

Thank you very much!
Vassilis

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Not alerting on ssh login

2009-11-20T12:01:09Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I noticed today that my firewall is not alerting on ssh logins.
Backup emails are working however. What would you guys suggest
checking to see why this isn't working?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.12 (MingW32)
Comment: Use GnuPG with Firefox : http://getfiregpg.org (Version: 0.7.10)

iEYEARECAAYFAksG9YQACgkQ94ZHW4r/A7Kq1wCghKYxVOiVkR04ENV8rqQ5GhBm
t80AoLtIJWOva6DNDLyua0rW+DkfzFWu
=ZQu4
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Fwd: Alerting on IPS log

2009-11-20T09:40:22Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I am trying to find a way for my efw 2.3 community edition to send an
email alert based on the snort logs. Does anybody have a tutorial or
some pointers on implementing this?

Thanks

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.12 (MingW32)
Comment: Use GnuPG with Firefox : http://getfiregpg.org (Version: 0.7.10)

iEYEARECAAYFAksG1IYACgkQ94ZHW4r/A7JfEQCfcZA289QbvVIOos7UdZm5KXmc
wFwAn1KXrY134A7n0iJ0/ZHwujk2szKp
=oWWO
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

signature.asc (368 bytes) Download Attachment

Alerting on IPS log

2009-11-20T09:38:08Z

I am trying to find a way for my efw 2.3 community edition to send an email alert based on the snort logs. Does anybody have a tutorial or some pointers on implementing this?

Thanks

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

signature.asc (278 bytes) Download Attachment

EFW 2.3 Harware compatibility

2009-11-19T13:16:01Z

Hello,

I'm wondering about the Endian community Firewall 2.3 hardware compatibility... Can't find info about CPU compliance on the Official website.

I'd like to know if I would be able to install Endian 2.3 on this harware :

Hardware manual (pdf)

Specifications :

CPU : Intel ATOM N270
North-Bridge: Intel 82945GSE, MCH- North bridge
South-Bridge: Intel 82801GBM, ICH 7M- South bridge

I saw that Endian was [quote]Endian now supports i386 processors only... Atom is not supported
on that website (see harware support tab) :

http://www.securitywithpassion.com.au/index.php/component/option,com_moofaq/Itemid,143/id,3/view,categories/

Help would be appreciated (I'm planning to buy my hardware soon...)

Thanks

Re: EFW 2.3 content filter settings?

2009-11-19T13:02:09Z

Mike Tremaine wrote:

> I finally playing around with 2.3 in hopes of using it to upgrade the
> old 2.0 install.
>
> First thing I notice is the content filter is not enabled by default
> Then even with you create a access policy that uses the content1 profile
> it doesn't actually do anything.
>
> Second in transparent mode Havp doesn't work at all but in
> non-transparent mode it does.
>
> Maybe I miss something but I'm not really looking forward to spending
> hours debugging this. Anyone have content filtering working in
> transparent mode?
>
> -Mike
>

Argh I figured it out... Green check mark does not mean it is active in
teh content filter it means it is allowed. Red minus means to deny
it.... heavy sigh....

-Mike

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

EFW 2.3 content filter settings?

2009-11-19T12:27:20Z

I finally playing around with 2.3 in hopes of using it to upgrade the
old 2.0 install.

First thing I notice is the content filter is not enabled by default
Then even with you create a access policy that uses the content1 profile
it doesn't actually do anything.

Second in transparent mode Havp doesn't work at all but in
non-transparent mode it does.

Maybe I miss something but I'm not really looking forward to spending
hours debugging this. Anyone have content filtering working in
transparent mode?

-Mike

[If I can get this working to my satisfaction I will build a dev box for
2.3 and push those rpms.]

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Problems with SMTP proxy and Windows Vista

2009-11-19T01:03:54Z

Hi everybody

We are having problems with a efw 2.2.rc3 installation and SMTP proxy
with Windows Vista and Microsoft Outlook 2007 mail clients. When we
activate SMTP proxy (only Antispam), computers with Vista can't send
emails. They get this error (translated from spanish):

"your server don't admit none of the authentication metods admited by
your client"

I've been watching the logs, and when SMTP proxy is activated, I can see
this lines corresponding to Vista computer:

Nov 19 09:38:07 postfix/smtpd[12311]: disconnect from
unknown[192.168.3.88]
Nov 19 09:38:07 postfix/smtpd[12311]: lost connection after EHLO
from unknown[192.168.3.88]
Nov 19 09:38:07 postfix/smtpd[12311]: connect from unknown[192.168.3.88]
Nov 19 09:37:44 postfix/smtpd[12311]: disconnect from
unknown[192.168.3.88]
Nov 19 09:37:44 postfix/smtpd[12311]: lost connection after EHLO
from unknown[192.168.3.88]
Nov 19 09:37:44 postfix/smtpd[12311]: connect from unknown[192.168.3.88]
Nov 19 09:37:40 postfix/smtpd[12311]: disconnect from
unknown[192.168.3.88]
Nov 19 09:37:40 postfix/smtpd[12311]: lost connection after EHLO
from unknown[192.168.3.88]
Nov 19 09:37:40 postfix/smtpd[12311]: connect from unknown[192.168.3.88]

It seems the proxy is rejecting connections from this computer (and all
Vista computers in the LAN), but XP computers work OK. Obviously, if we
deactivate the SMTP proxy, Vista computers can send emails again.

Does anybody had this problem?

Thanks in advance

Alberto

--

Alberto Iglesias
Gerente
aiglesias@...

-----------------------------------------------------------
ARCANOS INTERCOM S.L.
Centro de Empresas Camargo (local 211)
Polígono Industrial de Trascueto s/n
39600 Revilla de Camargo (Cantabria)

Tel: +34 942 072 801 <http://www.snapanumber.com/>
Tel IP: 700 754 960
Fax: +34 942 072 802 <http://www.snapanumber.com/>
@mail: arcanos@...
Web: http://www.arcanos.es

------------------------------------------------------------------------------------------------------------
Este e-mail y cualquiera de sus ficheros anexos son confidenciales y pueden
incluir información privilegiada. Si usted no es el destinatario adecuado
(o responsable de remitirlo a la persona indicada), agradeceríamos lo
notificase o reenviase inmediatamente al emisor. No revele estos contenidos a
ninguna otra persona, no los utilice para otra finalidad, ni almacene y, o,
copie esta información en medio alguno. Opiniones, conclusiones y otro tipo
de información relacionada con este mensaje que no sean relativas a la
actividad propia de ARCANOS INTERCOM S.L., deberán ser entendidas como
exclusivas del emisor.

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: Confused about port forwarding in Endian 2.3

2009-11-18T18:00:18Z

ok this worked for me in efw2.2 and my main box with slackware running as host/gateway/router. It also worked on my gateway router. lan nic 192.168.1.1
box A efw 2.3
box B 192.168.1.2 web server on port 81

now from box B I open ff or what ever browser put in the www.mydomain.com , and it times out and logs show its being dropped. If I do it with th ipaddress:81 still the same .
This used to work with efw2.2
So unless this is fixed I'll have to go back to 2.2. Makes it horrible for testing too.

It works now for people remote. But still the new rules are way to hard to figure out compared to teh tab that was in 2.2 and previous

> From: compdoc@...
> To: efw-user@...
> Date: Tue, 17 Nov 2009 20:52:20 -0700
> Subject: Re: [Efw-user] Confused about port forwarding in Endian 2.3
>
> Most firewalls don't allow connections to go out then back
> in. You have to tell your computers how to go there
> directly, using its private network address.
>
> If the efw provides your LAN's local dns service, add
> www.host.dyndns.org and its ip address in the host section.
> If some other server provides dns, add a host record there.
>
>
>
>
> -----Original Message-----
> From: Vikash Khatuwala [mailto:vikash@...]
> Sent: Tuesday, November 17, 2009 8:42 PM
> To: efw-user@...
> Subject: Re: [Efw-user] Confused about port forwarding in
> Endian 2.3
>
> Yes I can directly access using the local IP address
> 192.168.1.10
> from GREEN zone, however it does not work when I try with
> the public
> IP address. Also I am using dyndns.org for my dynamic IP
> PPPoE (RED)
> connection.
>
> Outside the network is OK no problem
> http://www.host.dyndns.org:80/ ---(NAT)---> 192.168.1.10:80
> https://www.host.dyndns.org:443/ ---(NAT)--->
> 192.168.1.10:443
>
> From inside the GREEN network (eg. my own PC)
> http://www.host.dyndns.org:80/ --> redirect to
> https://192.168.1.1:10443
> https://www.host.dyndns.org:443/ --> Connection time out.
>
> Thanks,
> Vikash.
>
> At 10:22 AM 18-11-09, compdoc wrote:
> >Can't be opened by name? Can it be opened by its ip
> address?
> >
> >
> >
> >
> >-----Original Message-----
> >From: Vikash Khatuwala [mailto:vikash@...]
> >Sent: Tuesday, November 17, 2009 7:10 PM
> >To: efw-user@...
> >Subject: Re: [Efw-user] Confused about port forwarding in
> >Endian 2.3
> >
> >Hi,
> >
> >Ive been able to get Destination NAT working for my local
> >http
> >server, however when I try to access the website from
> >with-in the
> >GREEN network then it does not work. Any ideas?
> >
> ><ANY>:80 ---(NAT)---> 192.168.1.10:80
> ><ANY>:443 ---(NAT)---> 192.168.1.10:443
> >
> >Vikash.
>
>
> ------------------------------------------------------------
> ------------------
> Let Crystal Reports handle the reporting - Free Crystal
> Reports 2008 30-Day
> trial. Simplify your report design, integration and
> deployment - and focus on
> what you do best, core application coding. Discover what's
> new with
> Crystal Reports now. http://p.sf.net/sfu/bobj-july
> _______________________________________________
> Efw-user mailing list
> Efw-user@...
> https://lists.sourceforge.net/lists/listinfo/efw-user
>
>
> __________ Information from ESET NOD32 Antivirus, version of
> virus signature database 4615 (20091117) __________
>
> The message was checked by ESET NOD32 Antivirus.
>
> http://www.eset.com
>
>
>
> ------------------------------------------------------------------------------
> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
> trial. Simplify your report design, integration and deployment - and focus on
> what you do best, core application coding. Discover what's new with
> Crystal Reports now. http://p.sf.net/sfu/bobj-july
> _______________________________________________
> Efw-user mailing list
> Efw-user@...
> https://lists.sourceforge.net/lists/listinfo/efw-user

Windows Live: Make it easier for your friends to see what you’re up to on Facebook.
------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user