tom_newton

I would suggest trying a more modern openvpn client - now there are so many we wont be packaging one any longer

Some folks have found that their certificate is too insecure (eg MD5) for the newer version of openVPN - anything telling in the logs? @Primus would you mind DM'ing me to identify yourself? We are gathering data on the RIP situation.

There are still a few odd wrinkles with DHCP (it only sees certain interfaces.... various legacy bits in the DHCP module cause this, we are working to fix it) support are able to resolve it manually if you put in a ticket.

Definitely chat to your filter vendor - as @dhicks mentioned its usually better to go with a chrome extension rather than trying to shoe horn chromebooks through a proxy, all good vendors (and some bad ones ) will offer this as an option

So one of my very good friends, an exiled Yorkshireman works very near here - sadly he's actually up north that day, so I won't be able to drop in on him for a beer. However, he mentions: "by far nearest tube stop for Air Museum is Colindale which is shut until at least December (confusingly Hendon Central ain't that close). Recommend Thameslink train from St Panc to Mill Hill Broadway"

A side-advert is ruining ya banner @Dos_Box I look forward to being there - always enjoy the Edit events, and it is nice to have one in "that london".

Not yet is the answer - a future maiden release, though your fix should be upgrade-proof

Er, hmmm... I will find out - nothing jumps out at me that says "yes"

It took me a minute, but I have had it suggested that this is the document to read: (nb, this does not constitute legal advice from me or my employer!) https://www.cps.gov.uk/publication/memorandum-understanding-between-crown-prosecution-service-cps-and-national-police This indicates that there's a decent amount of "good guys" protection. Be sure if you do discover something you suspect may be illegal that you report it to the IWF as soon as practically possible (particularly if it is hosted on the internet somewhere) and that you make as few copies as is necessary (I would say clearing your browser cache would be a good idea, just for the sake of completeness)

Happy 30th I presume!

This is not a density issue

Is that site in a "do not auth for" list - it's entirely possible that your predecessor decided that teamviewer hated being authenticated...

UKSIC are making a decent fist of a hard job - their certification is brand new, and I for one expect it to become much more rigorous. I am sure a few of their folks lurk here but I will have a chat and see where the guidance lands. It's certainly difficult when an organisation is not a proscribed organisation. In this case it's *our* policy to look for evidence of discrimination/hate speech and use that in our determination. This is definitely not a matter for the IWF - they get all sorts reported to them, but their remit is [rightly] CSAM and CSAM only.

I was just with our friends at the IWF today. I will ask for an opinion on this!

If there's any particular visibility you would like, we can help you with that. There are firewall logs, but they arent generally exposed. Most schools are not hosting their own servers these days so most of the true firewall functions dont add a ton of value. If there's something we can tweak though I am happy to help

Glad things are working for you - hopefully more improvements incoming in the winter.

Ask your CSM to get you onto "Maiden" - our latest release. That has VPN updates which will help (and more still are coming in Newport later this year)

Yes* * the functionality for this is currently hidden - we have only recently added in "MSP" support for 1 person with many customers. Fire me an email - [email protected] - and I will get it turned on for you. It is going GA in the next weeks.

I'd usually suggest your wifi controller is the place to do the visitor management, as that mediates at the network level, so they dont even get on the network without (agreeing to AUP, having a token, etc)

You could probably get the unifi to spit a radius accounting packet to the smoothie to track the usage on a token by token basis too

We're working on some youtube improvements. Shakes will have more detail - I will point him at this thread.

Yeah, the "download back to on-prem" method is much slower. Also there's a version which still takes 30 mins to upload, but that's been replaced and only a handful of folks are on it

Chris, I know we have not been where we would like to be with you guys - I know your troubles, and yes, many of them were caused by us dropping the ball, sometimes more than once. Can't blame you for your frustrations, but I know the team is working to fix em. I should add that we do NOT get preferential treatment on here. We have not asked for posts to be taken down except in, as I recall, one incredibly exceptional situation. I (really, honestly) appreciate it when people vent any frustrations, as (usually) it means I can go do something to help.

Seems like Harry has managed to pin just that IP for you. It's strange as LLB usually puts 1 client/server/port combo on one line, and fixes it there. Quite why this is misbehaving I dont know, but that fix will hold

You can create a "location" for that IP range... or as someone said create a default user group for that proxy, and then exempt those from https inspection