ChrisH Posted April 16, 2014 Author Posted April 16, 2014 Don't bother trying to use OUs as a source under assignments for rule sets as it just doesn't work! Stick to using groups.
ChrisH Posted May 1, 2014 Author Posted May 1, 2014 So I have to pose the question how many schools use different internal VLANs (not just admin and curriculum) ? Surely I can't be the only one who is using multiple VLANs with a layer 3 core switch/router ? I know there are plenty of you out there with Procurve 5400s etc. I have a VLAN per building/cabinet and functional based ones such printers, phones, domain wireless, guest wireless etc. I managed to get my firewall to do 1:1 NAT so each client would map to its own CLEO IP (which shows up fine in the lightspeed logs correctly) but that doesn't help with the client which will always report the clients IP address and not the one it gets mapped to. I am assuming in this situation an onsite rocket is the only answer but I never heard mention of having to make any IP changes from other managed service providers. Is anyone in Lancashire utilising VLANs like me and has subnetted up their allocated ranges ? I can see this as an option but I haven't sat down and worked it out yet. I really don't want to be changing my whole internal configuration because of the internet connection that just seems so wrong but it looks like my choices are: Onsite Rocket (mentioned in some of the information a while ago) Change my whole internal infrastructure including IP address, VLANs, ACLs and routing. So am I alone in this or have other people in Lancs having to make big changes ?
Arcath Posted May 1, 2014 Posted May 1, 2014 @ChrisH Without the machine (and thus the agent) knowing the CLEO IP that is has been given there is no way to have the automatic authentication work. I do wonder if it would be possible to modify the agents requests e.g. if your machine is 192.168.0.34 and it has a cleo ip of 10.23.12.34 to just do a string replacement on its messages but that just adds an extra overhead to your routers. Or if there was someway to give the CLEO IP to the machines as a virtual interface that the agent can see so it reports that IP aswell. Or if there was a way to add a static route to your tier only that can lets your internal IPs talk directly to the rocket. Just some ideas the last one seems like the best to me but it depends on if OCL will help and if shared tier system OCL is using supports it.
ChrisH Posted May 1, 2014 Author Posted May 1, 2014 I think the only real options are the on-site Rocket or me changing all my IP ranges and subnetting up my curriculum range, the only issue I have with that is the router interface is always x.x.x.1 and if I wan't that in it's own subnetwork I'm going to be wasting 125 IPs which I can get away with but its a pain. If it was at the end of the range I could just use a /30 mask.
ChrisH Posted May 12, 2014 Author Posted May 12, 2014 Got mine all sorted now, you must have an IP address from your assigned 10.x.x.x range. I still have my firewall in-place and my separate VLANs so everything worked out okay in the end.
ellsandell Posted May 20, 2014 Posted May 20, 2014 Is it just me or is almost every URL shortening service blocked? Yacapaca.com uses bit.ly, and after asking OCL they say they can't change the default block list to allow it?
synaesthesia Posted May 20, 2014 Posted May 20, 2014 Are you surprised? Given the choice, I would have every single one of them blocked too. Biggest source of infection from websites and downloads are thanks to those damn things.
ellsandell Posted May 20, 2014 Posted May 20, 2014 Not surprised no, just annoying as they work fine on our old filtering (Cumbria) which we never had any problems with.
Arcath Posted June 2, 2014 Posted June 2, 2014 @ellsandell you could try Unshorten any URL - unshort.me to get the link the bit.ly url points to. 1
Joanne Posted June 2, 2014 Posted June 2, 2014 I've tried to set up the e-mail authentication method to do filtering over-ride, but it continues to say that there is no authentication source. I've followed the instructions and double checked all the settings... I'm so confused !!
SimpleSi Posted June 3, 2014 Posted June 3, 2014 @Joanne I've got email override working at one school. Im in their Friday AM so can go through what I've done if you want to give me a call
ellsandell Posted June 3, 2014 Posted June 3, 2014 @ellsandell you could try Unshorten any URL - unshort.me to get the link the bit.ly url points to. Cheers, will do for us in the department as they have a somewhat-automated chrome extension too.
Joanne Posted June 4, 2014 Posted June 4, 2014 @Joanne I've got email override working at one school. Im in their Friday AM so can go through what I've done if you want to give me a call @SimpleSi Sounds good. I followed your instructions to the tee and I also got the same instructions off someone else who has got it working and all settings seems correct, but it just doesn't work! If you can PM me your number that would be dandy!
Joanne Posted June 5, 2014 Posted June 5, 2014 @SimpleSi I got it working at my other school!! Created a local user to authenticate! YESSSSSSSSSSSSSSSSS!! *Ed Stafford Style*
Joanne Posted June 6, 2014 Posted June 6, 2014 Yeah, just trying to get it working at my school now... then I will fully document!
Joanne Posted June 6, 2014 Posted June 6, 2014 Eureka Using lancs email addresses as temp override authority so teachers can get on with things in-between peripetic technician visits Create a new lancsngfl email address called [email protected] (use your real school) Goto Dashboard - Administration and then Add Authentication Source stick email in all boxes (or anything you want) but put in outlook.lancsngfl.ac.uk for mail server and tick the encrypt and end user use. Goto Webfile - Override Users and create a new list called web, description web Edit it and Add User Search for web - click on it - change Name to [email protected] Enter web as description Goto WebFilter and Policy Management - Rule Sets - Students Scroll to Access page Select Require Username and select Restrict username as well and select web for username access Then make sure all the overrides boxes are ticked for every category you want staff to be able to override and that web is selected And I think that does it I've got it working so if it doesn't work for you then its probably my instructions Simon Right, what I did was very similar to this... except you don't need to create a new e-mail address. Go to Dashboard, administration. Under Authentication click on local users, scroll down and check the box available to end users. Save. Scroll down to local users. Click Add Local User. I called mine web. Then go to Web Filter, override users, create a new list and call it Web. Then add user, select local users from the drop down, search for and add web to the list. Then to set which rule sets you allow override on, it's Web Filter, Policy Management, Rule Sets, Students. Click override on the categories you want to override on. FYI - youtube is classed as 'adult'. Et voila. When you get to the blocked page, just type in web and the password you set and away you go! I can't thank @SimpleSi enough, because without his instructions I wouldn't have figured it out!
klingklang Posted June 17, 2014 Posted June 17, 2014 Has the lightspeed filtering blocked Apple App and Itunes store ? I'm sure BTSL have been tinkering because it was working last week..
SimpleSi Posted June 18, 2014 Posted June 18, 2014 I couldn't get onto the app store yesterday in one school Just tried at today's school and now working Maybe a blip? Simon 1
klingklang Posted June 18, 2014 Posted June 18, 2014 I will try again later this aft but worked fine since its introduction.
Joanne Posted June 18, 2014 Posted June 18, 2014 mine was blocked. So unblocked itunes.apple.com now it works fine. 1
cheekycharly Posted September 5, 2014 Posted September 5, 2014 Hi Guys I am visiting a school today where they aren't happy with the Lightspeed facility as it is blocking most pages they use on a regular basis. They are wanting to go back to the old setup using their CLEO box as a proxy.1. This is new to me Lightspeed so I have just had a good read through this thread and found out quite a bit now already.2. How do we revert them knowing nothing on the server 2012 was changed and lightspeed has just kicked in.Any help appreciated.
Joanne Posted September 5, 2014 Posted September 5, 2014 you need to log onto the rocket console which is https://filter.education.btlsl.co.uk/login using the itcoord e-mail address and password. Then go to web filter, URL patterns, Student IP range, then unblock all the websites they need. Lightspeed is way better than what they had before because of the ability to control your own filtering. Once they see this they will understand it's better and stick with it 1
synaesthesia Posted September 5, 2014 Posted September 5, 2014 Shame people will often be unhappy with a product because of the way it's managed/configured rather than the product itslelf!
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now