tom_newton

They'll have her out of there in no time as long as they take it one step at a time

2 Domain schools are common enough that we Smoothwall folks added support for multi-domain auth for just that situation.. @Zoom7000 was the inspiration behind this feature

Not wireless - but I have been coveting these - anyone use em? Welcome to Just Add Power | Homepage

No I wouldn't it is HER type-R and no-one else is to be trusted driving it.

The wife drives a civic type r. It costs about 4 times as much as the previous car (diesel type s) in fuel alone, but even i get plenty of fun from the joyous acceleration it brings, we both feel we did the right thing, though I admit that I had a moment of doubt when we renewed the tax. The caveat here is that the wife is a complete petrol head and has sometimes suggested she prefers the car to me ;-) Long and short of it is that you can get by with almost any vehicle. This is not a decision to be made on practicality - if it was you'd have made it by now. Ask yourself if you enjoy driving that much...?

I'm saying nothing. Well, not literally of course, but almost nothing. Just kicking around here very quiet, that's me ;-)

Something OpenVPN based sounds like just the ticket for you.

On linux, you'd use find, which can find files according to rules like age, modification time, name, size etc. and then either list them, or execute a command (such as rm, or whatever you delete files with in windows-land) - recent versions of find actually include an option to delete the file, so you don't have to fork a copy of rm. Luckily, find is available on windows too.

http://www.amazon.co.uk/dp/B00480O9KK <-- enjoyed the first 3 Also the complete sherlock holmes, I can second that. Free, and quite enjoyable. Get the O'Reilly ebook "deal of the day" as well, you never know what gems come up half price.

Hardly the same - given at this point we're talking about replacing tyres, and there's a direct choice between new and used. There is no "do nothing" option. With a second hand car (our last 2 have been new, the wife is a petrolhead and very demanding ) I would certainly consider replacing all four feet, or asking the vendor to do so.

These 4 spots of rubber might be the last thing between you and fiery death. Personally this is one of the last places i'd look to save money.

They *shouldn't* - certainly not over a reboot or even a close and reopen of the browser IE did (still does?) have a habit of caching the result of evaluating the pac file. Worth a try, anyway

Transparent proxying for HTTPS cannot *usually* be done. This is because the traffic is ciphertext by the time it hits the tproxy, so the proxy doesn't know where the traffic is headed. There are a couple of ways round this.. and of course your proxy needs to support them: 1) Reverse DNS - look up the IP and see if it has a reverse dns entry, and block based on that - this is slow, but it works for all connections. It gives only domain blocking. It is unreliable, as many sites have no, or incorrect reverse DNS (incorrect in that it wouldn't give us the info we want, it is probably perfectly correct to the site owner!) doing MITM off reverse dns is probably mad. AFAIK websense support this? 2) SNI Modern browsers support the SNI extension which includes the destination domain as cleartext. - this is fast and reliable, but it needs support from the browser. Notable absentee is any version of IE on XP. Most browsers work ok vista and above. You only get domain level blocking (not URL) but you can do MITM and get URL/contnet blocking. Smoothwall Guardian3 supports this.

Stick the proxy pack on a webserver as wpad.dukesschooldistrict.edu/proxy.pac and don't server it outside your local network (or better, have no dns for that domain outside your network). A browser unable to get the proxy.pac will just go direct.

We only had 1/3 sysadmins - Pete & Imran both off... suspicious. Craigf and I were deputy

Anyone wonder if it is a coincidence this is after the end of term for most of you guys? You'd think folk were TRYING not to appreciate you.. just sayin'

Make sure lib/utils has the right perms set on the web server - a web server will just serve a php file if you don't tell it to interpret it... often /cgi-bin/ is already set up to handle .cgi/.php et al, whereas other directories often aren't. With apache, either stick in a config for that directory, or sometimes you can get away with .htaccess

We (Smoothwall) found that we had to add dynamic flash blocking to our web filter product to even have a chance of discriminating games from "other" flash content. It's a tough old game, it is

I bet you can get grep for windows. Then you can script this in batch file in about 5 min

Fire me a pm/email with your details and I'll sort it out in the morning

I shan't answer as I am disgracefully biased, but if you have any "can I do XYZ" with smoothwall questions, I'd be happy to help. With Smoothie you are looking at something that doesn't sit atop a windows server, so it'd be either a hardware appliance, or a.n.other server converted into a dedicated smoothwall box.

Which version of smoothwall are you running?

Depends how hard you want it to be. Easy option: stick a page with a meta refresh to vle.schoolweb... on /vle - then anyone with a bookmark to the homepage will be sorted Middlin' option: rewrite all accesses to /vle/* to the homepage of vle. Hardest: I don't know IIS, but in apache you can do a rewrite rule to thoroughly change something... can you go cross-domain? I don't know. How do yhou do it in IIS... err.. http://learn.iis.net/page.aspx/460/using-the-url-rewrite-module/ <-- looks like a fine start be careful though not to rewrite anything with a form post, because that might go squiff.

I presume the RM device is using some manner of authentication - generally flash uploaders are a complete POS and don't really support any types of auth at all. In our experience, the best way to do this is to have a list of sites in the filter for which we don't bother asking for auth.

Thanks zag. Most appliance vendors likely base their offering on a linux kernel somewhere way down beneath the shiny tin. This makes hyper-v support quite hard. We're certainly "better than we were" on hyper-v, but I would still generally caution against its use outside of a test environment for Smoothie. As for SSD... our support manager is keen - but they still have price and reliability issues which we would not dare pass on to our customers for the benefits offered! PS. We have since changed the look of the front panel of our UTM... so hopefully it would pass your high standards now