Macinator

Awesome - thank you so much for your answers. Scott

Thank you for the reply - any idea if the BLF can require a code - we do not want the kids hitting it. Especially making it the big red button - it just draws their attention. Regarding e911 answer - what you mention with FreePBX is what we need - but I am not following if 3CX is capable of this? Thanks, Scott

We are currently on Shoretel but needing to do massive upgrades - most equipment end of life and going from 56 phones to 325, so I am weighing option of upgrading or going FreePBX or 3CX. With my time left in this position I don't want to saddle my team with something that requires lots of scripting and linux skills, 3CX looks more user friendly. My question - we are a K-8 district in the US with E911 requirements to get down to zones - preferable get to actual room locations. We will have plenty of DIDs but reading the 3CX boards it is unclear how good the 3CX integration is with E911. Is it there or available via third party? Second question - we also need to integrate the phone system into the traditional school intercom. They want a panic button/code assignable to the phones to signal a building lockdown. They do not want a seperate panic button. They also want to be able to use the phones to call the intercoms at the building lever and district level. Can anyone tell me if those features are available. From what I have read it seams 3CX target audience has not been the unique situations schools find ourselves in. Thanks, Scott

Fabulous! Thank you for such a quick answer. Scott

I am in the US. Recently the ".us" country has been included in the "Top Phishing Country" category. I am not saying we should not be there but is there a way to exclude a country from being blocked by Top Phishing Country? Being in the US that is a critical domain. I do not want to allow all traffic to the ".us" domain - just prevent it from being blocked by the Top Phishing Group. I have unchecked the category and am working but I would like to keep the protection this category provides. Thanks for any help you can prove, Scott

Excellent! And as always, thanks a bunch for all the great work on the product and the quick response to Smoothwall questions! Scott

I just upgraded my server to ESX 4 from ESX 3.5. With ESX 4 there is of course a whole new set of VMTools. On my Windows based servers I could swear I see a performance bump since ESX 4 and the new drivers. My Network Guardian is running on VMWare and has always shown the "VMware guest supporting server" as green which I assume is the Smoothwall version of the VMTools. Can and/or should the VMTools be upgraded on the Network Guardian box? Would there be any benefit or should I just leave what is working alone? Directions for making the change are fairly well documented on the Smoothwall Express forums. I don't want to screw up anything Smoothwall maintains on their paid Smoothwalls and I don't know how much the Express deviates from the real Smoothwall version. Thanks for any insight you can provide, Scott

The beer sounds great. It is finally that time here. Thanks for the answers as always. I assume by your first answer "those messages, you can ignore. We will get rid of them soon, I promise" that it is just a cosmetic thing that I can't get rid of? I'm fine with that as long as I know I am not being an idiot missing the setting. Time to forward all those to the bosses email now.... Have great weekend. Thanks, Scott

Hi all - Back again for the excellent help from this forum. I turned on a bunch of the Alerts in my Network Guardian. After having complete information overload - I went back and started taking them off. I am getting down to not many items checked but I am still getting one set of alerts I just can't get rid of. I am sure I am missing something stupid. Can anyone tell me what to uncheck to get rid of these? G1132900: Caution: Large amounts of system messages are being generated, entering burst processing mode to preserve system resources. /var/log/dansguardian/access.log G1133600: Notice: System message rates have slowed, resuming normal operations. Second question - is there an alert that can be set for warning about detected viruses? On the subject of viruses - is the ClamAV sufficient? We are going live next week and I am looking forward to the excellent filtering and AV. My other option on AntiVirus is to use NOD32's ICAP. Can you install the NOD32 ICAP on the actual Smoothwall? If I go the ICAP direction it does not sound efficient to filter all the request through yet another server. Thanks again all, Scott

Quakers - I am still in the Eval stage of NOD32 - but I just got a quote from my sales rep and the pricing for NOD32 in education if fabulous. I have been on TrendMicro for several years - it has been a very good product that scales great. I have just been looking at a different solution that I hope will handle protection better. It has been a battle lately with Trend for me - especially with malware - it seems to be getting in way to easy and then successfully pulling down Tojans. I get alerts but my NOD32 has picked up a number of things that Trend has missed in the last two weeks of eval. Scott

Contink - Thanks!!! The thread you pointed to lead me right to the answer. Somehow my search both here and on Smoothwall missed the target. https://support.smoothwall.net/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=211 Answer was allow Unauthenticated Users to Microsoft Sites and then allowing the UnauthenticatedIP access to filtered. Went right through. Thank a bunch! Scott

I am just finishing my eval and waiting for the PO to get processed to go live. One remaining issue I have had is with Windows Updates. There is something being blocked when it tries to search for the ActiveX control. There is nothing showing as blocked in the Web Filter Realtime monitor. All Groups are allowed the default Windows Updates category Always. I have also added a custom area with every Microsoft URL I have been able to locate. I have tried turning off the As soon as I switch the Proxy back to my original software/filter it goes right through. Any ideas or solutions to this? Once I go live I will contact support but it seems the answers on this forum are incredibly helpful and often seem to be answered by Smoothwall staff. Thanks, Scott

Rob - Thanks for the answer. I think I see what you are doing - basically blanking out the existing settings files by copying the templates over the ones that have been modified by the Setup? Then setup will see the blank config and rewrite settings-1? Is it going to cause me problems by redirecting guardian/settings to ethB and changing the EthA=off and EthB=on? Guess it may bite me down the road for an upgrade? Thanks, Scott

First - thanks again for all the answers to my questions in various threads on the Smoothwall products. So far I have been extremely impressed - the filtering is outstanding! Just trying to work through a few last quirks from what I am used to before pushing the buy button. Today's question - I have the Smoothwall using Active Directory authentication. When a user is presented with the Temporary Bypass option - is this supposed to be mapped to an Active Directory username and password or will it only take ID's created under System - Administration? It appears that Active Directory users and Local User are different that the user's allowed to perform the Temporary Bypass and Add URL to Category option? Thanks for any clarification you can provide. Scott

I have contacted support and the intial problem I had with the proxy is I has a Network Guardian with 2 network cards. Getting rid of a card stopped this from happening. The Network Guardian does not seem to be able to correctly handle NIC changes and while the answer from support was correct - it did not explain the problem or stop it from cropping up again. I have been testing this in a virtual environment - when I moved this to a higher end virtual server - same issue. It seems everytime there is a change in the NIC it loses the proxy. Finally hunted it down - after any NIC change it changes the setting in /settings/ethernet/settings DEFAULT_DEV=ethb but in the file /modules/guardian/settins/guardian/settings ethA = on ethB = off Should read ethA = off ethB = on Manually changing that setting imedaitely brough the proxy back online and filled in the address like it should. Thought I would put this out there since I doubt I am the only one tossing this around on a virtual machine for testing. Thanks all for you replies, Scott ---------------------------------------- I am working with an eval of School Guardian. For some reason, after something I changed, I can no longer get the Web content filter to go online again. It reads Errored but I can't fid what the error is. The AV and Web Proxy are fine. It was working but I lost it after changing filter settings. Could anyone give me a clue where to look for what the actual error is or what may cause this to go offline? Filter definitions are up to date - authentication is fine. The Smoothwall Knowledge base did not have much and the Smoothwall forums seem to deal more with the free versions. Thanks for any help, Scott

Similar issue to Kath's. Evaluating School Guardian and Network Guardian. I am using Active Directory authentication - NTLM Identification (Terminal Services compatibility mode) w/the Blue Star next to them. If I use the NTLM Identification (Terminal Services compatibility mode) w/o the Blue Star Dansguardian errors out. My issue - I am using Groups, no OU's - but in the case of my ID - I am a member of Domain Admin, a departmental group, and a general staff group. I can't figure out which group it actually pulls from. Restrictions for my Domain Admin groups are less restrictive (actually using some Allow rules to override Block rules for general staff), but I am getting restricted based on the general staff group. Are there rules for how groups are handled with mutiple groups? Do I need to create another group that is for Smoothwall mappings only (don't want to go that way - it is far less transparent). None of these groups are nested. Thanks, Scott

Thank you both for your replies. I tried ssiruuk2's suggestion to disable services, reboot, and re-enable - no joy. Taking that a step futher - I uninstalled the SmoothGuardian module, rebooted, and reinstalled and everything is cool again. Thanks, Scott

More info to last post. Finally found where the error log is. Seems related to Dansguardian - Feb 7 16:26:06 s_sys@netwall dansguardian[21624] Started sucessfully. Feb 7 16:27:53 s_sys@netwall dansguardian[21628] Reponse from AuthD not marked as OK; this is what we got: Feb 7 16:27:53 s_sys@netwall dansguardian[21628] Reponse from AuthD not marked as OK; this is what we got: Feb 7 16:27:54 s_sys@netwall dansguardian[21629] Reponse from AuthD not marked as OK; this is what we got: Any idea's? Thanks, Scott

I am working with an eval of School Guardian. For some reason, after something I changed, I can no longer get the Web content filter to go online again. It reads Errored but I can't fid what the error is. The AV and Web Proxy are fine. It was working but I lost it after changing filter settings. Could anyone give me a clue where to look for what the actual error is or what may cause this to go offline? Filter definitions are up to date - authentication is fine. The Smoothwall Knowledge base did not have much and the Smoothwall forums seem to deal more with the free versions. Thanks for any help, Scott