ben604

Could you elaborate a little? I seem to have all the firewall rules open for http, but still can't get internet on the client...

Following on from another post, I've installed PFSense to act as a firewall. We're trying to block all but HTTP/HTTPs traffic on one segment of our network. I've got the box installed, connected and configured, to a point... I can see the internet within the PFSense Web interface - I've been pinging the interweb happily. Topology is as follows: Internet - Gateway 10.60.28.3 | Juniper Firewall | Switch PFSense Box Existing Lan New Lan My questions are: - What firewall rules do I need to set up on which interface. - What setting should the client have as the default gateway? - What setting should the client have as the proxy server? Do I need to set up a proxy server on PFSense? Any help would be gladly appreciated as I'm going round in circles here!

Thanks for your replies, interesting reading. It's a fair point that damage could be done by inexperienced users. It's just a bit frustrating, we asked originally about 3 weeks ago, then had to chase them up for a response. Considering we want a single port configuring with just HTTP and HTTPS traffic coming through, it seems a bit of an ordeal to setup a new machine and install/configure IPCop (which took a good 2-3 hours yesterday).

Hello, We're building a new domain currently, for deployment over the summer, with any luck and we'd like to do some testing of the new domain safe in the knowledge that we can't do any harm to our current network. We'd like to separate out our hardware LANs, but retain internet connectivity to both, so we asked the LEA to set up a new port on our Juniper SSG5 firewall to just serve internet and deny access to the rest of our LAN, which we'd run a little 5 port switch off to our new mini domain for testing. They've described it as a "project" though, and can't help us with any great haste, so we're quickly running out of time to test and iron out any issues before the summer. They suggested using IPCop as an alternative, but that involves using another machine for which we'd have to buy another NIC, more money! Would the Juniper SSG5 do what we proposed easily? Should they give us access to the configuration of that unit as we actually bought the thing off them and we pay for their services, ie. we're the customer and should get what we want!! Any thoughts?

Black Ops is ace online. All this dedicated server jive was just the 1337 getting in a whinge, it works fine. Speaking of going back in time, you can still play Counter-Strike happily against '0000s of users and it's as good as it ever was.

We're using this here through our Censornet box. It works up to a point. We can unlock videos by adding them to playlists within our Admin account, but the only way students can view those videos, as far as we can tell, is by a direct link to that exact video. We're doing this through Moodle, not necessarily a bad thing as it forces the departments to use it(!), but it would also be beneficial for students to view the Admin playlists, for quick access to videos, but at the moment, you can't browse playlists as it says it's blocked by the administrator of the education account! Anyone got a work around?

Anyone with any ideas?

worked this out... I had added the new DC's IP address in the DHCP settings on the old DC, but it was 3rd in that list. Moving that up to the first in the list fixed the problem.

Crikey! This is a 500GB drive :/

Here's the error I'm getting: Note: This information is intended for a network administrator. If you are not your network's administrator, notify the administrator that you received this information, which has been recorded in the file C:\Windows\debug\dcdiag.txt. The following error occurred when DNS was queried for the service location (SRV) resource record used to locate an Active Directory Domain Controller (AD DC) for domain "y.internal": The error was: "DNS name does not exist." (error code 0x0000232B RCODE_NAME_ERROR) The query was for the SRV record for _ldap._tcp.dc._msdcs.y.internal Common causes of this error include the following: - The DNS SRV records required to locate a AD DC for the domain are not registered in DNS. These records are registered with a DNS server automatically when a AD DC is added to a domain. They are updated by the AD DC at set intervals. This computer is configured to use DNS servers with the following IP addresses: DC1 IP Address DC2 IP Address Domain 2 DC1 IP Address - One or more of the following zones do not include delegation to its child zone: y.internal internal . (the root zone) We've got a forward lookup zone for the y.internal Domain on our x.local DNS server, but it's still not happy

Hello, We're in the middle of building a new Domain on the same physical network as our existing Domain. We're using our active PDC as the DHCP and DNS server for the new Domain at the moment, to avoid any conflicts and it's working well, to a point. There is no trust setup between the two Domains, as far as their concerned, the other Domain doesn't exist. When trying to connect a new client to the new domain, unless the new DC's IP address is manually entered into the DNS servers section in the NIC settings, it can't find the Domain. Can I add an entry into either of the DC's so the clients will resolve the new Domain name without the fiddling?

Thanks for the reply, it was just a SATA in an enclosure, I've had it out and connected directly via SATA, but it doesn't even show in Computer Management

I said to a friend I'd take a look at his portable HDD as it had stopped showing up on his computer, hoping it might be the usb interface, but the drive is making that rhythmic "I'm dead" clicking noise... Has anyone used a data recovery company with any success for a hardware failure? Could/would you recommend anyone?! Thanks, Ben

Thanks for the reply. Are you talking about the "Authorized Users" bit? That seems to only allow the users listed to have full access to youtube (if you were filtering all the users within the school to the EDU site, we're only filtering the student accounts - staff have full access anyway). I've had a fiddle, made a test account and added that to the Authorized Users, but couldn't see how to add videos to the admin account's playlist for the students to view?

How is everyone using this? Have you given your teachers access to the admin account username/password for them to create playlists? I can't see any other way to do it? What's the point of allowing their personal accounts access if they can't add videos to the admin playlist from them?

Our Head's PA just walked into Orange and they gave her the discount there and then, didn't need to do it through the Council.

I'll chip in for a 32 man server. I can't play tonight, out on the road with the band, but I'll have a bash tomorrow/sunday night.

You've got plenty of options actually. If you have the bandwidth, stream the lot to a server, or do full frame rate at the camera while recording to a server when movement is detected at a lower framerate, like 3fps. Either way, they give you flexibility.

Do you not think the graphics look dated? That's the problem these days, PS3 and XBOX hardware is so old that anything that gets made for consoles and PC looks unnecessarily rubbish on the PC "port".

Sorry, I think I've worded it wrong. I'm after the 3d/drop shadow effect more so than the font... Thanks for your help so far though.

Don't suppose any of you clever Photoshop types would know how to make this font or know a place to download it? I've had a bash with drop shadow and the 3d effect in Illustrator, but I don't get close...I think the overlapping shadow is the hard bit, but I'm a bit of an amateur! Thanks in advance!

We've been asked to sign a policy which has this line in it: "Ensure appropriate language is used, at all times, for any comments placed on social networking sites" Should I have to censor my language on social network sites, despite not being "friends" with any staff or student from the school?

We had this problem too. As we only allow staff to use hotmail, we've let them use Chrome instead of IE. I know that's not a solution, but you can lock Chrome down these days with Group Policy, so it's not as bad as it could have been!

S2 owner here. They're excellent. The iPhone is nice and very functional, but the extra screen size is enough to get the S2 alone. Not to mention it's pretty much twice as "powerful" in every department. Oh, and CHEAP! I paid £100 up front, for a 12 month contract at £46 a month, but with my discount, it's £29 a month. No brainer. I get a new phone every 9 months.

iRIP. Sad when anyone passes.