[Smoothwall] Dropbox not working

[linkazoid]

Hi,

 

We cant get our smoothwall to work with dropbox... we're on unfiltered access but it still wont connect. It keeps telling me that I have invalid proxy settings.

 

Has anyone got it working with smoothwall with NTLM Auth? I've just seen on Dropbox's KB that it does not work with NTLM Auth, so can I bodge it?

 

Michael

[rob_f]

If it doesn't support NTLM Auth you might want to try putting the domains it requires into Guardian > Authentication > Settings "Do not require auth for" box - not sure off the top of my head which ones it may be, but dropbox.com would be a good start.

 

Hope this helps,

 

 

Rob.

[linkazoid]

Thanks Rob.. Didn't actually think of putting it in there. Will try tomorrow and let you know.

 

Michael

[Sylv3r]

I have it working here and I can't remember making any changes to our Smoothwall config to get it to work - thats not to say we didn't - Ive probably just forgot!

[badders]

Did anybody get this working? I've added dropbox.com to the "Do not require auth" box which has stopped the initial proxy error but dropbox is still not connecting.

[Sylv3r]

Did anybody get this working? I've added dropbox.com to the "Do not require auth" box which has stopped the initial proxy error but dropbox is still not connecting.

 

I'll check our config on our box tomorrow and see if I can find anything obvious.

[hil]

I have it working at my school and did not change anything in Smoothwall. I have got the filterend proxy in as well.

[CJF]

Hi Guys...

To get dropbox working smoothly on our test network I had to add the domain exception as suggested by Rob_F and also added the domain to the Custom allowed content category in [guardian » filtering » user defined categories].

Hope this helps...

[Sylv3r]

Hi Guys...

To get dropbox working smoothly on our test network I had to add the domain exception as suggested by Rob_F and also added the domain to the Custom allowed content category in [guardian » filtering » user defined categories].

Hope this helps...

 

Bit late in replying but these were the changes we had made also.

[badders]

I've added dropbox.com to the custom allowed and it's still not connecting. The smoothwall logs show "DENIED Your username is not allowed to web browse".

[tom_newton]

Aha! That's the root of your problem.

When you put a site in do-not-auth-for, it doesn't get authenticated, so for that single request, you don't have a username - and for that single request, your group becomes "Unauthenticated IPs" - because most of our auth methods are stateless, and rely on re-assessing authentication details on every transaction. More secure, but quite intensive - and prone to fail for bad software. Anyway.

 

Because you have "unauthenticated IPs" as "no browsing" (see guardian/auth/settings) you will get blocked when you don't authenticate. To fix this, you will need to:

1. allow unauth' IPs to browse

2. Create a rule: Unauthenticated IPS, Everything, All the time, Block (this re-instates the "no browsing" rule in an overridable way)

3. Create a rule "Unauthenticated IPs, Custom Allowed Content, All the time, Allow"

 

Assuming dropbox is in CAC, you'll be golden.

 

HTH,

 

Tom

[badders]

That's got it working, thanks Tom.

[TechMonkey]

In case anyone comes looking here for how to do this in the new interface I created a new User Defined group & called it Bypass Auth. Then went to Web proxy » Authentication » Exceptions and added Bypass Auth. Seems happy though beware, when setting up Dropbox it kept bringing up the Proxy page or telling me it hadn't connected, making me think it had failed, but carried on quite happily if I clicked reconnect.