tom_newton

If you have input/output errors your disks may well be hosed. you want rsync in any case - it's not difficult to use, and serverside needs no more setup than you have right now.

Yup, there's 1000 VPN licences (or "enough for most people") with the UTM 1000. These can be any combination of VPN types.

Ah... there's no DNS proxy in an SWG - sadly it's an intrinsic part of the firewall code so can't be easily mangled on (we will be unmanglking it this year though) - one option is to run the firewall s/w without an external connection on your 1200 hardware...

What are you trying to crack? If its a linux box you have physical access to, boot into single user mode and sort it out. Also bear in mind that modern linux discourages the use of "root" - so it may be that you've a local account on there and need to su?

This would be the lightspeed that's "not a proxy of any kind" - I see.

Thanks for going with Smoothwall. Difficult to give such examples tbh - if we know of em, they go in the blocklist, that's our first line of defence, and we keep it pretty complete (helps in situations where we have less information on the traffic, eg if someone doesn't want to inspect https). One really useful feature of the content filter is fast moving sites: try proxies, if you get a newish one, or one which has escaped our glance, that will get content filtered, or for example certain google searches, or online games sites are a good contender for being content filtered. Yes, you'll sometimes get parts of a site filtered where others aren't but i tends to be very temporal - particular articles or posts. Worth noting that Bloxx don't content filter anything that's in their list; period. So if edugeek is marked as "forum", then its a forum. (Willing to be corrected if that's old info). Smoothwall's G3 applies all filters to all requests and then decides according to policy (unless you explicitly state otherwise: that, folks is the difference between "allow" and "whitelist").

strange topic for edugeek. My father in law has a borehole camera - as far as I know they're fairly specialised kit, I wouldn't recommend jerry-rigging one.

John's solution should work...

Yes - drop me a line, let me know your details and I am sure we will get something worked out. I don't know why support told you to let your disk get full, that's certainly not the standard line. We are improving the housekeeping disk stuff right now (next-but-one release) . With regard to pricing, maybe there is some miscommunication somewhere, I will certainly be happy to go and rootle it out if there is! Tom

Are you absolutely sure you don't want it done in Perl?

Just make the flapjacks tastier, discouraging the thrower - unless of course they're some kind of flapjack-hating numpty... certainly wouldn't catch me throwing perfectly good flapjack.

The only way to catch these in filtering is actually to look in-page (possible with your smoothie!) it's computationally cheap to "block any page containing origin://" - much more expensive to "find and replace" it out. Either is possible, but be kind to your CPU and use the "block" method O course by the time someone clicks the link, all bets are off, as the handler needn't obey proxy rules.

Sure we can manage to make some sort of an appearance this year Hope you've been in touch with our lot @Dos_Box

Hm, would be a nice sort of thing to have indeed... not something we have lying around sadly... makes me think though :-/

Yes, transparent http and https

Those of you in Leeds (and indeed further afield), you're always welcome to pop in and see us - we're on Gelderd Rd, just opposite the mercedes/smart garage before you hit the ringroad. Drop in for a coffee and biscuit any time, we'd be happy to chat filtering

Drop me an email brainchylde I think we might have something fun brewing :-)

Which auth method is that? Bear in mind that something like NTLM or Kerberos, if you forcibly log the user out they're just going to log straight back in

Well... I go on holiday for 2 lousy weeks.. and a thread like this pops up - I bet you were wondering where I was hiding Some good comments - some fair points, some not so much I can only really update from a product PoV (although I know Gary's working like a trojan to get support where he wants it, and we have a salesforce chap now helping with the salesforce support desk... not much experience of it myself)... anyway, product wise, the roadmap's not official yet, but here's some ideas: * new reporting which should be loads better, faster, and more reliable, with shiny new log viewers is a month or 2 out. - there's now a dedicated reporting team so more improvements to come * first bit of layer 7 is the "next update out" - you will see huge changes in firewall/UTM over the next year * Research is ongoing on new auth methods (we have a client like lightspeed, but we don't like clients, its so last decade ) * some of our "most wanted" ideas are seeing the light of day - including policy based bandwidth limits * loads of performance enhancements coming before summer Not got my plans together for the back end of the year yet.... but we won't be staying still

Interesting - thanks folks. @AngryTechnician (or anyone else authing ipads etc like this) - would you be interested in talking to some of my developer friends, we have a better plan than putting folk in vlans based on auth, which would involve passing the 802.1x auth straight to the smoothie for fully granular filtering and logging, but we need to know that our solution would fit into our customers' networks. Drop me a PM if you'd be willing to spare 30 mins

Though many fones don't forward the origin number with a forwarded text due to lack of space

Folks, Anyone using 802.1x to secure their wireless? I'd be interested to hear your thoughts on how well it works, and to learn how you have it set up - particularly if you're a Smoothwall user... Tom

Thanks for the recommendations folks - we will be at BETT (I'll be floating about wed/thu) - sorry I haven't been as active on this forum as I have in the past, been a busy time in smoothwall's product management function...!

Some confusion here between the conference call facility, multiway calling, and conference phones Conference call: being able to make a call into a number and expect your buddies to be there in a conference "room" - this is easily achievable on a low usage basis with something like powwownow, which is free setup, but costly calls. Gotomeeting offers conference audio (you don't need the client) at national rate calls, but you will need an account (not mega money). Otherwise most good phone systems (and some bad ones) will do this, but it is often an extra licence Multiway calling: This is where you can call 2 or more people and all talk together. There's no "auto-organiser" and you can't dial in. Many SIP (IP phone) endpoints support this. Cheaper ones just do 2-way, I think I have 3 or 4 way on my endpoint here and it was £150ish. Conference phone hardware "fancy speakerphone" - usually offers multiway calling too. Polycom's IP7000 is by far the best, that's the IP version, they do do a POTS one. They're about 700 notes mind.

@ThePalmist - drop me an email, tell me your woes, I will do what I can to get the right people pointed in your direction - don't like to see someone not getting value out of their smoothie.