DanJackson

I am having a massive stock clearance of Fortigate Firewall, UTM and VPN hardware. More info on the Ebay listing links. All units have expired Support and UTM licenses but we will transfer ownership of the serial number of any purchased units to your own Fortinet support account. (If you have one) You do not need to purchase a license to use these as a normal Firewall/Router/VPN server etc. NON WIRELESS MODELS Fortigate 40C - £40 Fortigate 40C - No License | eBay Fortigate 50B - £30 Fortigate 50B - No License | eBay Fortigate 60C - £70 Fortigate 60C - No License | eBay Fortigate 80C - £120 Fortigate 80C - No License | eBay WIRELESS MODELS FortiWiFi 40C - £50 FortiWiFi 40C - No License | eBay FortiWiFi 50B - £40 FortiWiFi 50B - No License | eBay FortiWifi 60C - £80 FortiWiFi 60C - No License | eBay If anyone wants one outside of Ebay just let me know by PM. Dan

Hi All, All the Lightspeed does is accept accounting information from your radius server. You just need the PSK from our Support and get them to ensure that radius ports are allowed outbound through your firewall/vdom. The accounting packet sent from your Radius server will contain info like User, IP, Location in the domain etc depending on how your radius server is set up. The Lightspeed can then process that information and filter that user according to the current rules in place. As for internal network setup and access control lists. Up to you. :-) We leave the DHCP to you, but if you need a new VLAN and create a new subnet internally, we will need to assign the address block to you as all customer TIERs must have unique address blocks. Dan

THE DUDE! All the way for me.

I have given inbound NAT there, from your first question I think you may of actually been after outbound NAT for LAN to WAN? If so then do below. /ip firewall nat add action=masquerade chain=srcnat out-interface=sfp1 Let me know if you need anything else. Dan

Davit2005, I have below the NAT in code, (IN my case Ether1 connects to My VM Hub in modem mode) add action=dst-nat chain=dstnat dst-port=3074 in-interface=ether1 protocol=tcp to-addresses=10.10.13.4 to-ports=3074 If you need something like dynamic DNS then do the below. /system scheduler add comment="no-ip update every 30 minutes" interval=30m name="no-ip update" on-event=":local DDNSuser "ddnsusername"\r\ \n:local DDNSpass "*********"\r\ \n:local DDNShost "ddnshost.ddns.net"\r\ \n\r\ \n:local CURRip [/tool fetch url="http://myip.dnsomatic.com/index.html" mode=http dst-path=CURRip; :delay 1; /file get CURRip contents; /file remove CURRip]\r\ \nif ([:resolve \$DDNShost] != \$CURRip) do={\r\ \n /tool fetch url="http://dynupdate.no-ip.com/nic/update\?hostname=\$DDNShost&myip=\$CURRip" mode=http user=\$DDNSuser password=\$DDNSpass dst-path=DDNShost keep-result=no;\r\ \n /log info message=("DDNS: Updating \$DDNShost to:\$CURRip")\r\ \n }" policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=may/06/2015 start-time=13:04:13 And for a bit more fun, running the below script will beep the Super Mario theme tune! /system script add name=mario policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive source=":beep frequency=660 length=100ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=660 length=100ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=660 length=100ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=510 length=100ms;\r\ \n:delay 100ms;\r\ \n:beep frequency=660 length=100ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=770 length=100ms;\r\ \n:delay 550ms;\r\ \n:beep frequency=380 length=100ms;\r\ \n:delay 575ms;\r\ \n\r\ \n:beep frequency=510 length=100ms;\r\ \n:delay 450ms;\r\ \n:beep frequency=380 length=100ms;\r\ \n:delay 400ms;\r\ \n:beep frequency=320 length=100ms;\r\ \n:delay 500ms;\r\ \n:beep frequency=440 length=100ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=480 length=80ms;\r\ \n:delay 330ms;\r\ \n:beep frequency=450 length=100ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=430 length=100ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=380 length=100ms;\r\ \n:delay 200ms;\r\ \n:beep frequency=660 length=80ms;\r\ \n:delay 200ms;\r\ \n:beep frequency=760 length=50ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=860 length=100ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=700 length=80ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=760 length=50ms;\r\ \n:delay 350ms;\r\ \n:beep frequency=660 length=80ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=520 length=80ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=580 length=80ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=480 length=80ms;\r\ \n:delay 500ms;\r\ \n\r\ \n:beep frequency=510 length=100ms;\r\ \n:delay 450ms;\r\ \n:beep frequency=380 length=100ms;\r\ \n:delay 400ms;\r\ \n:beep frequency=320 length=100ms;\r\ \n:delay 500ms;\r\ \n:beep frequency=440 length=100ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=480 length=80ms;\r\ \n:delay 330ms;\r\ \n:beep frequency=450 length=100ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=430 length=100ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=380 length=100ms;\r\ \n:delay 200ms;\r\ \n:beep frequency=660 length=80ms;\r\ \n:delay 200ms;\r\ \n:beep frequency=760 length=50ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=860 length=100ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=700 length=80ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=760 length=50ms;\r\ \n:delay 350ms;\r\ \n:beep frequency=660 length=80ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=520 length=80ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=580 length=80ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=480 length=80ms;\r\ \n:delay 500ms;\r\ \n\r\ \n:beep frequency=500 length=100ms;\r\ \n:delay 300ms;\r\ \n\r\ \n:beep frequency=760 length=100ms;\r\ \n:delay 100ms;\r\ \n:beep frequency=720 length=100ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=680 length=100ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=620 length=150ms;\r\ \n:delay 300ms;\r\ \n\r\ \n:beep frequency=650 length=150ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=380 length=100ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=430 length=100ms;\r\ \n:delay 150ms;\r\ \n\r\ \n:beep frequency=500 length=100ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=430 length=100ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=500 length=100ms;\r\ \n:delay 100ms;\r\ \n:beep frequency=570 length=100ms;\r\ \n:delay 220ms;\r\ \n\r\ \n:beep frequency=500 length=100ms;\r\ \n:delay 300ms;\r\ \n\r\ \n:beep frequency=760 length=100ms;\r\ \n:delay 100ms;\r\ \n:beep frequency=720 length=100ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=680 length=100ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=620 length=150ms;\r\ \n:delay 300ms;\r\ \n\r\ \n:beep frequency=650 length=200ms;\r\ \n:delay 300ms;\r\ \n\r\ \n:beep frequency=1020 length=80ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=1020 length=80ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=1020 length=80ms;\r\ \n:delay 300ms;\r\ \n\r\ \n:beep frequency=380 length=100ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=500 length=100ms;\r\ \n:delay 300ms;\r\ \n\r\ \n:beep frequency=760 length=100ms;\r\ \n:delay 100ms;\r\ \n:beep frequency=720 length=100ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=680 length=100ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=620 length=150ms;\r\ \n:delay 300ms;\r\ \n\r\ \n:beep frequency=650 length=150ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=380 length=100ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=430 length=100ms;\r\ \n:delay 150ms;\r\ \n\r\ \n:beep frequency=500 length=100ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=430 length=100ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=500 length=100ms;\r\ \n:delay 100ms;\r\ \n:beep frequency=570 length=100ms;\r\ \n:delay 420ms;\r\ \n\r\ \n:beep frequency=585 length=100ms;\r\ \n:delay 450ms;\r\ \n\r\ \n:beep frequency=550 length=100ms;\r\ \n:delay 420ms;\r\ \n\r\ \n:beep frequency=500 length=100ms;\r\ \n:delay 360ms;\r\ \n\r\ \n:beep frequency=380 length=100ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=500 length=100ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=500 length=100ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=500 length=100ms;\r\ \n:delay 300ms;\r\ \n\r\ \n:beep frequency=500 length=100ms;\r\ \n:delay 300ms;\r\ \n\r\ \n:beep frequency=760 length=100ms;\r\ \n:delay 100ms;\r\ \n:beep frequency=720 length=100ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=680 length=100ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=620 length=150ms;\r\ \n:delay 300ms;\r\ \n\r\ \n:beep frequency=650 length=150ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=380 length=100ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=430 length=100ms;\r\ \n:delay 150ms;\r\ \n\r\ \n:beep frequency=500 length=100ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=430 length=100ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=500 length=100ms;\r\ \n:delay 100ms;\r\ \n:beep frequency=570 length=100ms;\r\ \n:delay 220ms;\r\ \n\r\ \n:beep frequency=500 length=100ms;\r\ \n:delay 300ms;\r\ \n\r\ \n:beep frequency=760 length=100ms;\r\ \n:delay 100ms;\r\ \n:beep frequency=720 length=100ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=680 length=100ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=620 length=150ms;\r\ \n:delay 300ms;\r\ \n\r\ \n:beep frequency=650 length=200ms;\r\ \n:delay 300ms;\r\ \n\r\ \n:beep frequency=1020 length=80ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=1020 length=80ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=1020 length=80ms;\r\ \n:delay 300ms;\r\ \n\r\ \n:beep frequency=380 length=100ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=500 length=100ms;\r\ \n:delay 300ms;\r\ \n\r\ \n:beep frequency=760 length=100ms;\r\ \n:delay 100ms;\r\ \n:beep frequency=720 length=100ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=680 length=100ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=620 length=150ms;\r\ \n:delay 300ms;\r\ \n\r\ \n:beep frequency=650 length=150ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=380 length=100ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=430 length=100ms;\r\ \n:delay 150ms;\r\ \n\r\ \n:beep frequency=500 length=100ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=430 length=100ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=500 length=100ms;\r\ \n:delay 100ms;\r\ \n:beep frequency=570 length=100ms;\r\ \n:delay 420ms;\r\ \n\r\ \n:beep frequency=585 length=100ms;\r\ \n:delay 450ms;\r\ \n\r\ \n:beep frequency=550 length=100ms;\r\ \n:delay 420ms;\r\ \n\r\ \n:beep frequency=500 length=100ms;\r\ \n:delay 360ms;\r\ \n\r\ \n:beep frequency=380 length=100ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=500 length=100ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=500 length=100ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=500 length=100ms;\r\ \n:delay 300ms;\r\ \n\r\ \n:beep frequency=500 length=60ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=500 length=80ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=500 length=60ms;\r\ \n:delay 350ms;\r\ \n:beep frequency=500 length=80ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=580 length=80ms;\r\ \n:delay 350ms;\r\ \n:beep frequency=660 length=80ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=500 length=80ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=430 length=80ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=380 length=80ms;\r\ \n:delay 600ms;\r\ \n\r\ \n:beep frequency=500 length=60ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=500 length=80ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=500 length=60ms;\r\ \n:delay 350ms;\r\ \n:beep frequency=500 length=80ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=580 length=80ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=660 length=80ms;\r\ \n:delay 550ms;\r\ \n\r\ \n:beep frequency=870 length=80ms;\r\ \n:delay 325ms;\r\ \n:beep frequency=760 length=80ms;\r\ \n:delay 600ms;\r\ \n\r\ \n:beep frequency=500 length=60ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=500 length=80ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=500 length=60ms;\r\ \n:delay 350ms;\r\ \n:beep frequency=500 length=80ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=580 length=80ms;\r\ \n:delay 350ms;\r\ \n:beep frequency=660 length=80ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=500 length=80ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=430 length=80ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=380 length=80ms;\r\ \n:delay 600ms;\r\ \n\r\ \n:beep frequency=660 length=100ms;\r\ \n:delay 150ms;\r\ \n:beep frequency=660 length=100ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=660 length=100ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=510 length=100ms;\r\ \n:delay 100ms;\r\ \n:beep frequency=660 length=100ms;\r\ \n:delay 300ms;\r\ \n:beep frequency=770 length=100ms;\r\ \n:delay 550ms;\r\ \n:beep frequency=380 length=100ms;\r\ \n:delay 575ms;"

The reason safe search is hard to block is due to filters being unable to read https packets without deep packet inspection (SSL Scanning). There is a solution whereby to sum it up you put in your local DNS forwarders a Forward Lookup Zone for google.com and create a CNAME within to point "www.google.com" to "nosslsearch.google.com". Once you have all Google requests going to None SSL Google your filters will work to however you may have them set up. An article from Google for this can be found here - https://support.google.com/websearch/answer/186669?hl=en