davephs

Oh I have doubts now, maybe its not fixed? Although I have tried on various PC's. Also what we have in place is a script which completely wipes the AppData\Local\Google\Chrome\User Data\Default Folder at logoff so chrome needs to recreate this next time its used. Maybe this is wiping out other settings that are saved somewhere? Then in terms of user bookmarks these are copied back at login. - In my experience this tends to keep chrome in working order, and cleans out all the rubbish... Try manually deleting this folder on a pc and trying again ? There are no other settings in the GPO orientated around logins, just the usual [TABLE=class: info3] [TR] [TD]showing the welcome page on the first browser launch following OS upgrade set as disabled for the welcome page.[/TD] [TD][/TD] [/TR] [/TABLE]

After exhausting all the above options, I managed to get rid of the welcome page on Win 10 - By enabling the "Disable synchronization of data with Google" gpo. This is what the welcome page was effectively trying to get a user to do, by signing in...

I wonder if anybody out there can help? We have DNSUnlocker, it’s a savage piece of Malware, which, appears to be totally invisible. By this I mean it’s not installed on the PC (Or is it ?) and currently its effecting Google Chrome underlining various links, and displaying popups (Some are very inappropriate) A sample Screenshot is attached, showing the Edugeek homepage, with random words underlined. Anyone have any suggestions on how to remove it? If you “Google” DNSUnlocker, there are various guides that outline removing applications, registry entries, etc, even modifying the DNS settings, however none of this has been found/ tampered with! We are at a loss! Even using Google’s DNS servers the problem persists. Any help would be greatly appreciated. Thanks.

Another Vote for ESET here, I have used it across two schools, one of which I converted from Kaspersky (Which essentially turns your PC into a snail and makes it unusable) The management side of ESET is ok (Its requires little maintenance, just install and forget) - All views are my own, from personal experience .

How is your system configured so that the Command Prompt doesn't pose a serious security risk? Surely if students can access this, then they could potentially wreck the local PC, if not the network ? (Bearing in mind we have no budget to upgrade our switches with VLAN capability, etc.) If you can provide a method where students can access the command prompt without any issues, then we are open to suggestions.

I have tried DosBox unfortunately it doesn't appear to have ping or nslookup commands etc which are required. Is this correct ? The sandbox & Linux Box do sound like possible solutions, but we were hoping to keep it as simple as possible... and if there were a standalone emulator that would be the best way forward ? Do you know of any online based emulators ?

We have a been asked by our Junior IT Teacher to enable DOS (cmd.exe) for students? As apparently this is now part of the curriculum? Have you encountered this? - Obviously we cannot enable the DOS prompt... Are there any emulators out there, we can use instead of the real thing ? Any help would be appreciated... Thank you

As we will have an increased IT budget next year, we are looking for any educational AV suppliers who are prepared to come into our school (in Darlington Co. Durham) to demonstrate what is available to our teaching staff. We are particularly interested in IWB solutions / alternatives, projector to tablet solutions, wireless projectors etc. Anything that will enhance the AV side of teaching. The idea is that staff can view what you have available, then request any items they want from next year’s budget. Any suppliers please pm me or if anyone can suggest any companies that would be great.

Just found this... http://www.amazon.co.uk/DBTech-Huge-Oversized-Digital-Clock-Red-LED/dp/B00BPEXW50/ref=pd_sim_sbs_ce_5 Big enough ?

Unfortunately, this has made no difference. It’s looking increasingly likely that the web browser is somehow corrupt? Is there anyway to totally remove the web browser manually? - Flushing both the registry and application files, as with most Microsoft uninstallers, and reset tools they haven’t worked. My last resort would be to reinstall the operating system, but this appears to be a bit drastic, just to fix IE and active x. Thanks

Internet Explorer 9 will not let me install any active x control - I have tried: Resetting to defaults Re-installing alot of “Googling” I am a full administrator, so it’s not permission related, but the problem persists. Every time the active x control install box appears - Noting happens, it would appear to install, but then a refresh displays the same install box again, and again. - It’s not actually installing the component. If I had a choice I would just use an alternative browser, but to my knowledge Internet Explorer is the only browser capable of using active x controls? Can anyone help? I would prefer this to having to do a re-install of the operating system. Thanks

Thank you for your help.. its finally working, the pc I was using to test the connectivity for some reason wont work but everybody can use the ubuntu box now as the default gateway. The ip forwarding must have been the issue!

I have completed the instructions provided - it did sound promising, unfortunately it hasn't worked. I still cannot access the internet unless the port and IP information is manually entered (I am starting to think about forgetting about it altogether, and using .pac files instead (But i dont know if they work with IPADS) The output of iptables-save (Below) Thanks # Generated by iptables-save v1.4.10 on Wed Sep 26 15:09:44 2012 *nat :PREROUTING ACCEPT [1192:106550] :INPUT ACCEPT [279:34464] :OUTPUT ACCEPT [60:3608] :POSTROUTING ACCEPT [60:3608] -A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 8080 -A PREROUTING -i eth0 -p tcp -m tcp --dport 3128 -j REDIRECT --to-ports 8080 COMMIT # Completed on Wed Sep 26 15:09:44 2012 # Generated by iptables-save v1.4.10 on Wed Sep 26 15:09:44 2012 *filter :INPUT DROP [1604:671191] :FORWARD DROP [0:0] :OUTPUT ACCEPT [77:4086] :ufw-after-forward - [0:0] :ufw-after-input - [0:0] :ufw-after-logging-forward - [0:0] :ufw-after-logging-input - [0:0] :ufw-after-logging-output - [0:0] :ufw-after-output - [0:0] :ufw-before-forward - [0:0] :ufw-before-input - [0:0] :ufw-before-logging-forward - [0:0] :ufw-before-logging-input - [0:0] :ufw-before-logging-output - [0:0] :ufw-before-output - [0:0] :ufw-logging-allow - [0:0] :ufw-logging-deny - [0:0] :ufw-not-local - [0:0] :ufw-reject-forward - [0:0] :ufw-reject-input - [0:0] :ufw-reject-output - [0:0] :ufw-skip-to-policy-forward - [0:0] :ufw-skip-to-policy-input - [0:0] :ufw-skip-to-policy-output - [0:0] :ufw-track-input - [0:0] :ufw-track-output - [0:0] :ufw-user-forward - [0:0] :ufw-user-input - [0:0] :ufw-user-limit - [0:0] :ufw-user-limit-accept - [0:0] :ufw-user-logging-forward - [0:0] :ufw-user-logging-input - [0:0] :ufw-user-logging-output - [0:0] :ufw-user-output - [0:0] -A INPUT -j ufw-before-logging-input -A INPUT -j ufw-before-input -A INPUT -j ufw-after-input -A INPUT -j ufw-after-logging-input -A INPUT -j ufw-reject-input -A INPUT -j ufw-track-input -A FORWARD -j ufw-before-logging-forward -A FORWARD -j ufw-before-forward -A FORWARD -j ufw-after-forward -A FORWARD -j ufw-after-logging-forward -A FORWARD -j ufw-reject-forward -A OUTPUT -j ufw-before-logging-output -A OUTPUT -j ufw-before-output -A OUTPUT -j ufw-after-output -A OUTPUT -j ufw-after-logging-output -A OUTPUT -j ufw-reject-output -A OUTPUT -j ufw-track-output -A ufw-after-input -p udp -m udp --dport 137 -j ufw-skip-to-policy-input -A ufw-after-input -p udp -m udp --dport 138 -j ufw-skip-to-policy-input -A ufw-after-input -p tcp -m tcp --dport 139 -j ufw-skip-to-policy-input -A ufw-after-input -p tcp -m tcp --dport 445 -j ufw-skip-to-policy-input -A ufw-after-input -p udp -m udp --dport 67 -j ufw-skip-to-policy-input -A ufw-after-input -p udp -m udp --dport 68 -j ufw-skip-to-policy-input -A ufw-after-input -m addrtype --dst-type BROADCAST -j ufw-skip-to-policy-input -A ufw-after-logging-forward -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[uFW BLOCK] " -A ufw-after-logging-input -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[uFW BLOCK] " -A ufw-before-forward -j ufw-user-forward -A ufw-before-input -i lo -j ACCEPT -A ufw-before-input -m state --state RELATED,ESTABLISHED -j ACCEPT -A ufw-before-input -m state --state INVALID -j ufw-logging-deny -A ufw-before-input -m state --state INVALID -j DROP -A ufw-before-input -p icmp -m icmp --icmp-type 3 -j ACCEPT -A ufw-before-input -p icmp -m icmp --icmp-type 4 -j ACCEPT -A ufw-before-input -p icmp -m icmp --icmp-type 11 -j ACCEPT -A ufw-before-input -p icmp -m icmp --icmp-type 12 -j ACCEPT -A ufw-before-input -p icmp -m icmp --icmp-type 8 -j ACCEPT -A ufw-before-input -p udp -m udp --sport 67 --dport 68 -j ACCEPT -A ufw-before-input -j ufw-not-local -A ufw-before-input -d 224.0.0.251/32 -p udp -m udp --dport 5353 -j ACCEPT -A ufw-before-input -d 239.255.255.250/32 -p udp -m udp --dport 1900 -j ACCEPT -A ufw-before-input -j ufw-user-input -A ufw-before-output -o lo -j ACCEPT -A ufw-before-output -m state --state RELATED,ESTABLISHED -j ACCEPT -A ufw-before-output -j ufw-user-output -A ufw-logging-allow -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[uFW ALLOW] " -A ufw-logging-deny -m state --state INVALID -m limit --limit 3/min --limit-burst 10 -j RETURN -A ufw-logging-deny -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[uFW BLOCK] " -A ufw-not-local -m addrtype --dst-type LOCAL -j RETURN -A ufw-not-local -m addrtype --dst-type MULTICAST -j RETURN -A ufw-not-local -m addrtype --dst-type BROADCAST -j RETURN -A ufw-not-local -m limit --limit 3/min --limit-burst 10 -j ufw-logging-deny -A ufw-not-local -j DROP -A ufw-skip-to-policy-forward -j DROP -A ufw-skip-to-policy-input -j DROP -A ufw-skip-to-policy-output -j ACCEPT -A ufw-track-output -p tcp -m state --state NEW -j ACCEPT -A ufw-track-output -p udp -m state --state NEW -j ACCEPT -A ufw-user-input -i eth0 -j ACCEPT -A ufw-user-limit -m limit --limit 3/min -j LOG --log-prefix "[uFW LIMIT BLOCK] " -A ufw-user-limit -j REJECT --reject-with icmp-port-unreachable -A ufw-user-limit-accept -j ACCEPT COMMIT # Completed on Wed Sep 26 15:09:44 2012

The ubuntu box is on a virtual machine - it has two network cards one internal and one external (Bound to a public IP address) I have given it a subnet mask of 255.255.0.0 - and a IP of 192.168.1.1 and I can ping it from another pc in the same subnet. So communication is ok . I can go online if I specify 192.168.1.1 port 8080 in the proxy server settings, but if i set the default gateaway to 192.168.1.1 and no proxy info- I cant go online ? _ So i guess either the transparent bit isnt working ? Or the iptables bit is messed up ? oh, and it even works if i set the proxy info to 192.168.1.1 port 80 - i always thought port 80 was transparent ?

I am using Ubuntu, with Squid (Ver.2.7 STABLE 9) and Dansguardian to provide internet filtering. However I need it to work Transparent, so that users don't have to specify port information etc. I have completed the following: Changed the squid config to: http_port 3128 transparent Added the following rule to IPtables: iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 8080 This will work on port 80, but the strange thing is, I have to specify port 80, otherwise no internet connection can be obtained As my knowledge in Linux is limited, I am now stuck ? Is there something missing ? Can somebody help me? Thanks