tom_newton

I am guessing your proxy is using ntlm auth rather than proxy-auth, or that the sites you are going to are blocked. If you are your proxy administrator, how about setting those sites as "allow" and "do not auth for", if thats possible.

We have had a few people switch to TMG (it's cheaper), and come back once they realise it doesn't offer as comprehensive filtering. Hopefully some folks on here will have less biased views Worth noting that TMG is also being end-of-lifed.

We smoothwall folk offer a range of auth methods - so maybe you'd transparently proxy with a captive portal and the explicit proxy would ntlm. There's no "perfect auth" for Android/IOS but that's a good combination. Sadly, free we cannot do (got to keep the lights on somehow!) - but we like to think we offer decent value Tom PS. PM me if you'd like to talk to our antipodean representatives

RM will now supply Smoothwall kit AFAIK, don't know wether it is the "default" though - worth asking what their quote includes.

Did someone mention me? Thanks for the recommendation!

I did tell you Shaun, don't have another until the first one can prove they're a decent mod, at least - you need to be breeding future edugeek admins Best wishes to you and your ever-growing family

You've definitely got the right hash value set?

Civic diesel should fulfil many of those requirements. The wife had the "type S", which was big enough for us, but the 5 door has the "magic seats" and apparently you can fit 4 rhinos and a pot plant in there. Was lowest-but-one tax band I think as well (this was an 08 model), and that's the 2.2 that can go some.

I know... it isn't as pretty as we would have liked (or indeed as pretty as the non-dell-based units). We added a very fancy NIC which meant the standard faceplates couldn't be easily customised... there's talk of doing it anyway, but there's a £300/unit cost at the minute... Hmm.

Virtually the same box. Different NIC I think...

The xrio boxes are supposed to be OK - if a bit tough to configure in places. They're only up the road from us, have met a few of their folks. Given the right presentation (static ethernet all round preferably) you can do simple load balancing with a Smoothwall UTM.

Thought the airstation was the AP, and as such won't need drivers?

Depends how "bondy" you want to get. Without the ISP being complicit, you can at least loadbalance outgoing traffic and use different lines for different inbound traffic.

I miss my A1200. I don't really miss memory errors in one program being able to down the whole OS, but I do miss the "good old days". My setup topped out at 1200, 68060, 24Mb RAM, 1.2Gb internal 3.5" IDE (cut the casing away), one of those drive controllers that attached to the clock header?!? + Zip drive, CD writer and 5.25" full height 340MB HD, all on scsi in a separate tower.

@millgate - what would 4x 42" set me back? Looking to move our agile development teams away from "regular" whiteboards...

That would be dangerous, on at least 2 grounds Whilst Gav was driving, which is only as dangerous as it always is being in a car with Gav...

Oi, I'll have you know that most years my talk is constructed in the car on the way over! Actually last year I managed a bit of powerpoint even.

I shoulda taken advantage of a spellcheck I guess. Grr John Smith did almost join Smoothwall many years ago - we're looking for someone slightly less experienced than he, and obviously mr 2k6 up there too

And make sure you carry your wallet in a wheelbarrow - still pretty expensive. If it is just a few devices i'd suggest those advising injectors may have a point - in terms of price, certainly, and also looking at our PoE kit, the 24 port 100 meg switches are deep, noisy and suck juice - not something that will be as much of a problem with a non-PoE gig switch and some injectors.

As others have said, python won't allow access to anything they don't have already. It will allow users to do things faster than they could by hand - and if it is on your regular network that could allow students to create a DoS scenario. Very easy to find out whodunnit though. You could probably stop the interpreter talking to the network using windows firewall, butthat spoils some of the fun. Setting up the single host should be easy enough - ubuntu server on vm, install ssh server, use likewise to link to AD, install python, install easy text editor like joe or pico. Push putty to clients. Done

Cheeky ping of this thread - just in case people missed it as I posted at 8 in the evening. Where have all the techies gone? There was a time we'd be inundated with applications for these posts.

Still looking for the right people on some vacancies Careers at Smoothwall Particularly of interest might be: Technical Consultant, Leeds. Working with Rob_f, craigf, and DT2 to help our sales team look after new customers, from planning installs, answering queries to site visits, and helping new users get to grips with their smoothie. Based in Leedds, but lots of travel. Must be a hands-on networking type, with a good knowledge of IP networking, if you have been a big part of managing a school network, you'll not be far off. Experience (any) web filter, firewall, virtualisation, scripting - these will be viewed positively! You will need to be able to drive and not be scared of our salespeople! Sysadmin: Southampton - check website for details Unspecified eeferral bonus if you recommend me somebody we later employ

What @dhicks said. You could even set up an ubuntu box joined to AD, one decent desktop should allow for a full class of students (probably more) all doing "commandline" based python. Use an easy text editor like "joe" and you're away. You may have problems with students trying to be clever and DOS the box by running compute-intensive stuff, but it is easy enough to spot these and apply a LART. You could position this as a "first step" into the python world - also one box means you have a LOT of control over the runtime environment, a (competent) IT teacher can easily distribute sample scripts to students, it might even be possible for students to log in from home to do work.

Oddly enough I am going to weigh in on the connection stuff, and not the filtering If we were able to use fast "home" connections at work, they would suddenly become very expensive, sure your one school could knock off that extra bandwidth at times of low use, but if this was offered to every school in your area, the 50:1 (or more) contention would suddenly become important again. These fast home connections are available from cable TV providers because they can do the 100meg bit for a fairly short leg back to a point where you get contended back to 50:1 or so. So they might have a single 100meg line to a housing estate where everyone is effectively "chipping in" to rent it, so it seems cheap. When you get a line at a school, you are paying extra for the carriage of your data right back to somewhere where you can get "proper" bandwidth, and you really can get your 10-up 10-down all the time. Because of this, you may find the cost difference at school form 10 to 100 is not much at all, because once you have gotten over the initial price hurdle of a "professional" internet connection, upping the speed is relatively easy (up to the speed of the media, which today will be minimum 10). For example, here at Smoothwall Leeds, we pay ~£1k/mo for 100Meg symmetric (with no added services mind) but it would have been 700 for 10. We moved from bonded DSL and for the first time we get consistently low enough latency to run voip. One thing to watch out for - some ISPs will send you bonded ADSL or SDSL. These products aren't quite as good, but they're perfectly serviceable in many areas, they should be somewhat cheaper though. If you ditch your LEA's service and buy your own connectivity and filtering, you can shop around, and you can spend on the bits you want to spend on. Some primaries are OK on a business DSL @ £60/mo. Its just a bit harder to manage as you have to buy in all the stuff and DIY it, and that does not come for free. Hope that makes a modicum of sense, not finished 1st coffee yet.

Java doesn't play nice with proxy authentication, in general. Would suggest the LEA need to exclude those domains from being authenticated. It is not a hard thing to do in squid, and if netsweeper can't help them fix it...