tom_newton

Missed this thread earlier... Looks like Google have done the sensible thing and kept images out (for now!) and indeed a cursory check shows that the handful of images you get with text search don't get included for searches for "big boobs" etc. As John says - you're going to have to do full interception to get 100% performance - however we Smoothwall folk are working on a way to get more out of the HTTPS transatction without having to MITM, even in transparent mode. This may give us URLs - wether it lets us see search terms is site-dependant.

Given that I have lived in Leeds knocking on for 15 yrs and have never heard of an area called "New Forest" I might speculate that that was a particularly foolish sign to make

Never got it to connect to their "my squeezebox" service (but that was probably me breaking stuff), and have a handful of little niggles - it has rebooted itself once, and also the buttons aren't lit, which as a "clock radio" is a bit irritating until you learn to go by touch. Bear in mind it is mono - but the sound is very good, all things considered. Will be excellent when they finally release the battery pack and make it portable.

Also drinking Thwaites makes your web filtering a tiny bit better (as they are also Smoothie users!) Whisky lovers: try Glenkinchie 20yr old. Expensive... but worth it.

Not got a Boom, but I have the radio (same gen. as the boom), and the 1st gen Squeezebox (over 5 years old I think?) both running perfectly. I really like the Slim Devices stuff, and Logitech have done an OK job of not making a balls of it since they took over.

Was on hobgoblin on wednesday (sister in law bought me a couple of bottles to have with dinner, as brother-in-law was on the stella (ick)). Will be Tim Taylor's tonight though I think.

Bit crude... but a regular expression URL? Does the WS1000 support that? This sort of trick is why we filter flash files to determine "gameyness" - so even if someone gets past the search filters, they get a black box with "flash blocked" instead of motocross madness or whatever

I would generally advise any "carlsberg regret" to occur roughly 90 second after purchase... but to each his own

Yeah, Rob was out & about too... we'll be adding a few more bodies here in Leeds soon I think. Good to here Nile was on top form - you can tell your A-level students that being a Smoothie customer actually entitles you to a cup of tea and a biscuit at our offices whenever you feel the need

So the proxy is set by IP on the machines? gonna be hard I guess... is there any commonality between the machines at all? A shared drive where you could put a batch script to alter the settings, and just boot&click each one?

Can anyone beat - conf call with US customer straight "after" work... then dinner at TGI fridays at a motorway junction, followed by an evening in a premier inn with very little to do? *joy* Still did some good UI feedback stuff today with some of our wonderful customers who took time out of their busy schedules to come visit us in southampton. Big tanks to any of you reading this!

@Nik - if you have some examples of proxies with particularly good camouflage i'd like to have them for our proxy zoo

Thank you for saving me from checking - I always do, though, just in case

Tell that to accounts wasp! She wants so much detail... she even has a mug that says "I spreadsheets"!

Always just poked things direct into mysql myself... seemed easier

@john - they're ok if you don't need scanning on every desktop, there's a MUCH more lightweight (megs, not 100s of megs) driver for just print. Network scanning si a bit of a chore, but other than that, the one that nice vicki lady sent us is a breath of fresh air compared to that poxy poxy %$!£ lexmark. @TcsLtd - go on... quote me up an inexpensive A3 printer (only really need print, and low vol) - the chief accounts wesp (Nic) is getting her own lair soon, and will want to furnish it with something large enough to print the sales analysis in >6pt

That is about the size of it at the minute (we're releasing "additive groups" for autumn half-term). You'd have to create a new group with all their current rights (except those applied ot all users, which ARE already additive) and add world cup to that.

My colleagues are asking why you don't want transparent on - they rightly point out that you can bypass transparent for selected IPs if you wish - going transparent will not give users any more access than normal either (they will still get auth'd). Other than that it may be a manual removal of iptables rules. It should be pointed out that this is due to a limitation in Guardian - we can't do proxyntlm in 2auth mode - which will be going away in the major Guardian (as opposed to Auth) update later in the year. At that point we will be able to run as many differing auth schemes on as many ports as we like Good to see that speed has improved too. We suspected oldauth as being something of a bottleneck, and you have also applied the new reporting stuffs which will speed things up.

I'll check it out. This is likely due to needing to use the "transparent trick" in NTLM (we have 2 ways of authenticating with NTLM) - so there shouldn't be a requirement to actually transparently proxy anything (though it shouldn't hurt?). Block direct is a bit of an ancient hangover from the past - you should be able to block direct access in the outgoing rules. Let me chat to dev and I will see what i can find out.

I'm sure there's no objections to non-edu folk lurking (or even actively contributing) for indefinite periods of time.. (See also: Domino)

@ben thanks - we tend to try and keep continuity in sales and support where we can - you're right that its unusual, but valuable. Always interesting to see how others operate though.

Ben, I think you have the right idea there - far better for someone to call you following a forum post on your direct line than sit wondering how to get in touch. BTW.. when you say 2-techs-per-sales-bod, is that support or pre-sales or both? Just curious

A "maybe" - but you'd be best off asking your account manager... PM me and i'll find their details.

It's the same deal - with dyndns you have to notify the service you have changed your IP with some sort of tool. I imagine it would be trivial to write such a tool to log into OpenDNS and alter your records. Worth noting that OpenDNS is not web filtering - users accessing bare IPs won't be logged or filtered, and if you are using a cache between you and the Internet at any stage you may find minor issues with users acessing cached content. The first of these issues can be mitigated by using a rule to block connections to bare IPs, but this needs to be done at layer 7 - squid or similar.

There's also Apsis Gmbh - this may be easier to set up than apache. There's another good 'un that RobF has actually managed to bodge onto a smoothie, but he's not in yet, if this thread gets bumped I may remember to ask him!