+ Post New Thread
Results 1 to 11 of 11
*nix Thread, SchoolGuardian + WSUS in Technical; Didn't know right section for this but as SC is based on Linux why not here i thought lol... Right ...
  1. #1

    Join Date
    Mar 2007
    Location
    Devon
    Posts
    1,041
    Thank Post
    225
    Thanked 63 Times in 56 Posts
    Rep Power
    29

    SchoolGuardian + WSUS

    Didn't know right section for this but as SC is based on Linux why not here i thought lol...

    Right we have just moved over the this system but i'm having great problems getting WSUS3 to update. The server it is running from has open access to the net without a username but when i try to synchronize or download the updates i get told that

    9:39:37 192.168.100.1 - http://download.windowsupdate.com/v7/wsus/redir/wsus... 0 403
    *DENIED* Your username is not allowed to web browse: -
    Banned User
    Now i've allowed the IP access and told it not to auth against windowsupdate.com but still nothing. Anyone else having problems. The funny thing is if i turn off the auth completely it works but no students can access the net....

    Help :P

  2. #2

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,325
    Thank Post
    622
    Thanked 1,577 Times in 1,414 Posts
    Rep Power
    413

    Re: SchoolGuardian + WSUS

    One way around it would be to set up NT Lanman Proxy, NTLM on your workstation and point your wsus box through that.

    That way it will be browsing using an authorised username.

    Otherwise using the bypass options should work.

    Ben

  3. #3


    Join Date
    Oct 2006
    Posts
    3,411
    Thank Post
    184
    Thanked 356 Times in 285 Posts
    Rep Power
    148

    Re: SchoolGuardian + WSUS

    Cant you just run SW in parrelell to your network? Allowing your servers direct access.
    Or is SW your firewall?

  4. #4


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,461
    Thank Post
    866
    Thanked 845 Times in 667 Posts
    Rep Power
    195

    Re: SchoolGuardian + WSUS

    dave: the trick is to put the wsus update sites in the "sites that don't need authentication" list on the guardian/authentication page. I'd also add them to "always allow" in "default users".

    There are a couple of wrangles involving windows update depending on exactly how folk have it set up. WU often gets its proxy settings from a different source from IE, for example.

    It seems that you have the WSUS server going through the proxy, which, in and of itself is not an issue but it may mean you have to add a few explicit allows.

    We've just been fiddling with our knowledge base on the web, but this URL should get you the right article:
    https://support.smoothwall.net/index...id=211&nav=0,4

    HTH,

    Tom

  5. Thanks to tom_newton from:

    OverWorked (22nd June 2009)

  6. #5

    Join Date
    Mar 2007
    Location
    Devon
    Posts
    1,041
    Thank Post
    225
    Thanked 63 Times in 56 Posts
    Rep Power
    29

    Re: SchoolGuardian + WSUS

    Have it all fixed now, added the server to the allow list and also the auth exceptions. Still wasn't working so i gave but..... installed an email update and rebooted it started working...

    Wonderful now every pc in the college needs updates...

    Thanks for the advice guys

  7. #6


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,461
    Thank Post
    866
    Thanked 845 Times in 667 Posts
    Rep Power
    195

    Re: SchoolGuardian + WSUS

    Heh - methinks one of your changes required a guardian restart. Regrettably, the "windows solution" of "reboot it, see if it works" occasionaly seems to fix things too

  8. #7

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,802
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: SchoolGuardian + WSUS

    There are a couple of wrangles involving windows update depending on exactly how folk have it set up. WU often gets its proxy settings from a different source from IE, for example.
    WU uses WinHTTP. You can control WinHTTP's proxy setting with the 'proxycfg' tool (present in XP SP1 and above and Win2k3). Here's what I use (as a machine startup script.

    Code:
    proxycfg -p proxy.carrhill.lancs.sch.uk:8080 erra.carrhill.lancs.sch.uk

  9. #8


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,461
    Thank Post
    866
    Thanked 845 Times in 667 Posts
    Rep Power
    195

    Re: SchoolGuardian + WSUS

    @Geoff - I use WPAD. WinHTTP will actually pick up on DHCP option 252. This can be done with SchoolGuardian, and IE's "Automatic detection" then works as well. Trouble is, there's a minor, minor hackage required to SG's DHCP server (needs to be made authoritative). Can happily use Win2003's DHCP too.

  10. #9

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,802
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: SchoolGuardian + WSUS

    I dislike the security implications of using option 252 in DHCP.

  11. #10


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,461
    Thank Post
    866
    Thanked 845 Times in 667 Posts
    Rep Power
    195

    Re: SchoolGuardian + WSUS

    Any in particular? Or just the possibility of a rogue DHCP server?

  12. #11

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,802
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: SchoolGuardian + WSUS


SHARE:
+ Post New Thread

Similar Threads

  1. LDAP & SchoolGuardian
    By dave.81 in forum *nix
    Replies: 2
    Last Post: 14th September 2007, 09:20 AM
  2. SchoolGuardian Problems
    By Gatt in forum *nix
    Replies: 5
    Last Post: 7th September 2007, 01:44 PM
  3. SW SchoolGuardian
    By Gatt in forum *nix
    Replies: 17
    Last Post: 20th April 2007, 07:11 AM
  4. Replies: 1
    Last Post: 8th November 2006, 09:57 AM
  5. SchoolGuardian
    By Simcfc73 in forum Wireless Networks
    Replies: 23
    Last Post: 22nd September 2006, 03:28 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •