Search the Community
Showing results for tags 'smoothwall'.
-
I do have a ticket open with Smoothwall at the moment but I thought I'd ask here as well. The other evening I was prepping to move our VLANs/Routing and DHCP to our Smoothwall S9 box. During this, despite doing this on an empty NIC in isolation I lost connectivity to the Smoothwall. No worries my failover box kicked in. I gave it the classic reboot to attempt to get the master box to take back over. No luck. I managed to plug into the master box and I now see three of my 5 NICs have question marks next to them instead of numbers. They also list missing device on them instead of the Intel Driver. My failover is running fine and I have unplugged the heartbeat link to it to block any config overrides from the broken master. I have tried a reinstall of the Smoothwall image and restoring a backup to it, with no luck. I was half tempted to use my limited Linux knowledge to run APT Upgrade/Update on it to see if that worked, but thought it might invalidate any support. Anyone seen this before and managed to solve it?
-
Morning all, we have been having problems for ages now and can't find what the problem is. We use Smoothwall for our filtering, and Watchguard for our Firewall. On a regular basis (daily, sometimes every other day), we loose connectivity from our smooth wall to our watch guard (shown in Smoothwall as "gateway failed"). After 18 minutes, the connection resumes. This resumes without touching Watchguard or Smoothwall - no reboots required. Luckily Smoothwall have set up a failover port, which kicks in and connects to a different port on the Watchguard during the outage so our end users at worse see a 20 second "blip" which is solved by a refresh. The dropouts happen around the same time of day when staff arrive / start to log on en-mass (between 8 and 9am). To cut a long story short, Watchguard say "they can't see anything wrong" and Smoothwall say "Watchguard are dropping DNS packets". I say this is crazy and we need it fixing! The dropouts only appear during term time, so for example over christmas break we didn't have any users logged on to our domain and we didn't see any dropouts in the logs. If i connect a laptop directly on the WAN link then there are no ping drops. So... could the problem be linked to a rogue machine logging in and doing something funky? Is it one user that runs a certain service which throws things off? Do I need to go and hit the Watchguard with a cricket bat and hope the problem goes away? On a separate note, but an example of weird stuff happening, years ago we had a machine running OS X Lion, and every time that machine connected to our SAN, it sent the SAN in to a panic. We patched the SAN and things seemed ok. Now I'm not saying this is SAN related, but it shows how such a small thing can cause a huge problem. ANY help would be muchly appreciated. -
Did the usual round of windows updates to our domain controllers this weekend - Server 2012 R2. Later we noticed Smoothwall was prompting users for credentials. Had a look in Smoothwall under: Services > Authentication > Directories to find our Active Directory wasn't happy - something to do with Machine Account - password validation. The result was Smoothwall couldn't query AD for any user or group details - hence everyone was getting NTLM authentication errors. Contacted Smoothwall support and as ever great service, after a couple of calls and an hour later we tracked it down to: HKEY Local Machine > System > Current Control Set > Services > SRV > Start (Reg_DWORD) If the DWORD says 3, the server only allows Windows Machines joined to the domain to look at AD, As the Smoothwall is not a Windows machine and we use a Samba connector, for the Smoothwall to be able to authenticate users, the option needs to be set to 2 and then the server rebooted. After the reboot we were back to normal.-
- 1
-
-
- directories
- machine password
- (and 2 more)
-
I work for a school and have recently bought smoothwall. Smoothwall has asked me to setup a radius server to send accounting packets for all the laptops which students are bringing to the school. I am very new to this kind of setup and was looking for some help. So far I have configured NPS on windows 2008. The radius system is registered on AD and have added all the AP's I am struggling at one point where it is asking to install the certificate. Now we have one of the Domain controller which is acting as certificate authority and has a valid Geotrust certificate, which is again present on raidus server but when i configure "Configure an Authentication Method " it is not allowing me to configure it is saying that the certificate is not present. Can i not use the certificate from my existing domain controller by simply importing it to NPS certificate store? I have attached the screen shot of the error Thanks Arpit
-
Our Network Manager is trying to get GSuite Hangouts/Meet working inside school We use Smoothwall and LGfL connection. He believes the problem is with LGfL, anyone else using LGfL that can let me know what needs to be done to allow the connection. Best Wishes, Paul
-
Hello, Have created a security group in AD which holds staff laptops (as computer objects not usernames) and this group has been added to Smoothwall under groups so it can be used for BYOD Radius. The issue is that When I try to connect to the wireless network the wireless controller giving the following message AAA Authentication Failure for UserName:host/LAPTOP.DOMAIN.LOCAL User Type: WLAN USER Is it possible to configure Smoothwall to authenticate wireless clients as device instead of username? -
We have had a new Smoothwall S9 installed last Friday and since switching to smoothwall, clients web access is being dropped randomly across the day. The NIC is fine and internal servers / services function. Resetting the NIC in most cases with an ipconfig /release / renew appears to then permit traffic out through the Smoothwall. Before this 0 bytes of traffic are transferred to standard sites like bbc.co.uk / office.com and so on so its not a block issue. All they get is time outs / unable to access / blank white pages. It is driving everyone nuts so if anyone has any inisight on to possible causes that would be appreciated as Smoothwall support is not being overly helpful and our account manager is nowhere to be seen. Thanks in advance. Chris -
Moving away from LGFL Web filtering/Firewall
xicor posted a topic in London Grid for Learning (LGfL)
Hi All we have 3 sites with LGFL and so far we've been using LGFL web filtering but to be honest I'm getting fed up with web screen and the lack of any control over the firewall, some of you might have seen my previous threads about this and despite various promises from LGFL this issue remains several years later and web screen is still looks it was made by a graduate at uni So..... I've decided to slowly move away from my reliance on LGFL's web filtering and firewall and just get my own and have complete control, I'll set the LGFL connection to be completely unrestricted and just use my own firewalls/filtering etc. in your experiences what has worked very well with web filtering and firewall ? Thanks in advance! -
Hello, We've not used the temporary ban feature of Smoothwall in ages because of Covid. I have been asked to ban 3 students. I have added them in to the temporary ban but it's not working. I have also tried with a couple of test accounts that I have access to and those don't work either. Have waited overnight, tried multiple computers, etc Perhaps I'm missing something really obvious bit I've simply followed these instructions: https://help.smoothwall.net/FilterFirewall/Content/4Services/1Authentication/4Temporary%20Bans/BanUser.htm#:~:text=On%20the%20SERVICES%20menu%2C%20under,ban%20expires%20and%20click%20Apply. Any ideas or suggestions would be much appreciated.
-
Hi all, We are steadily moving towards Intuning our PCs - however, some of our staff when trying to browse are getting treat as Students. Looking in the web filter logs, it says the username is the PC's ip address, which indicates that this PC isn't getting authenticated. Now, if they go to something that students can't access, they get prompted to sign in, and can sign in with their credentials (their username and password as stored on local AD, not email and password as per Intune/M365), which is a solution, but i'd rather try to understand how to get Intune logins to naturally authenticate as themselves. We have a directory setup for use with Azure AD, but also have our previous directory set up with Local AD - do we have to change the order of our directories so the Azure AD one is above the IDex directory or our Local AD directory? -
Hello Are they any schools out there who run a large 1 to 1 chromebook deployment and use the Smoothwall Cloud Filter on a separate VLAN? A few years ago we decided to use the cloud filter and the internet speed for the whole school just ground to a halt. We went back to the Connect for Chromebooks app method and all was fine. Over the summer we decided to try the Cloud filter again and the same thing is happening. When we get 500+ chromebooks on, the resource usage on the smoothwall box rises above 10. A simple ping to the IP address of the smoothwall box goes from <1ms to 100ms plus and also timing out. We are at a loss what to try, other than scrapping using the cloud filter again. Any advice or shared experiences would be happily recieved. Thanks in advance. -
God damn I've been going through the works with this one. I'll try to keep this short but with vital information. We use Smoothwall as our filtering. We also have LGFL as our ISP. We have a few IP address ranges. One IP address range works, the other one does and doesn't at the same time. It's driving me crazy. So I'm going to reference A: good IP range, B: bad IP range. A IP range goes through Smoothwall and allows/blocks what we want B IP range goes through our Smoothwall and allows/blocks SOME of what we want B IP range has been fiddled with to get this working - I've been ensuring transparent/none transparent is working well, Have tried application and computer based proxy settings (manual/auto and even setting 801 as the port so it's unfiltered) Messing with exemptions but nothing as worked so far What's even stranger - A IP range can ping Google DNS. B range IP address cannot. Doing a tracert to Google's DNS stops at our gateway. Which is the same Gateway to our Smoothwall as the Good IP address range. They stil have internet and is still filtered by Smoothwall! I've been in contact and they are stating it might not be them on this one. Would be happy if anyone can give some insight! -
We've identified that the 'Smoothwall Cloud Filter' Extension is causing the below printing problems in chrome whereby the print preview will show as blank. When turning off the extension the issue is resolved, We have logged with Smoothwall but was wondering if anyone has encountered the problem/has a solution? -
Codecademy Learn SQL behind Smoothwall
J_Worth posted a topic in Internet Related/Filtering/Firewall
Hello everyone, Trying to get Codecademy Learn SQL but it is refusing to work. Looking into it in more depth it would appear that our Smoothwall proxy is blocking WebSockets (both WS and WSS). How can I allow WebSockets through the Proxy? If I set my work computer to bypass the Guardian/Proxy then it functions as expected. Many thanks in advance. Kind regards, -
Hi All, We have an issue with our Smoothwall UTM - We recently set up a VLAN for our guest wireless using the DHCP of the Smoothwall box - It works fine, except when you try to access internal resources (The school website, our exchange server etc) I tried setting up some exceptions but nothing seemed to work. Any ideas anyone? Something obvious I'm missing? -
Hi everyone, We are in the process of moving to the new Frog platform from Frog 3. If anyone has used it before you will know that youtube is a big part of its resources. Overall, we have youtube blocked for non-sixth form students. Is anyone aware of a way to allow defined videos to be viewed, but block youtube overall? Seems pretty impossible but you might surprise me. We use Smoothwall to block youtube. Any help is appreciated. Thanks, Rob
-
Hi, Just installed Smoothwall and have OpenVPN for remote access. Whats the workaround for running Open VPN without 'run as administrator' for standard users ? Cheers in advance ; ) -
We are a Smoothwall school but this may be reflected on other filters. Last year, I was able to finally get this working but Google changed their API URLs and it stopped working again. What should happen is when on the Google page, you click the microphone icon or say "Ok Google", it will pop up a different page that listens for speaking and translates that into words that will be searched. But since the API changes, it doesn't. With our Smoothwall, we added a new category for Google URLs to allow explicit allows so no-authentication was required. When I look at the filter while testing, everything looks good for the filter. We do SSL inspection and I do believe it is related to it. What is strange is on our public wireless, we disabled SSL inspection and it works fine. So I am wondering if anybody has this working and if so, what URLs do you have allowed for Google? If not, can somebody test and see if they can get it working? Our SpecEd department would really like to use this feature for some kids. Thanks!
-
Net-Ctrl is an established iboss reseller and over the last few months we have been replacing a lot of competitive solutions. Our current customers have found iboss to be easier to use than the market leaders (you know who they are!) that the solution creates less false positives, and is much faster on high speed (100Mbps +) networks. If you’re currently not happy with your WebFilter we would like to you to a one-on-one webinar with an iboss specialist to get a better understanding of the solution. They will go through the iboss offering, provide a tour around the dashboard, discuss how it compares to other products on the market and answer any questions. This is a great way to understand the solution, and how it differ to others available on the market. If this is of interest, please PM me with some suitable times and dates and we will aim to accommodate your schedule. In addition, we're currently offering some great discounts into education, for some ideas on pricing please get in touch.
-
Hi, We have setup a radius server on Windows 2008 r2 and smoothwall express 3.0 we want to use radius auth on smooth wall and so set that up. How ever when we try and go thru smoothwall it challenges us for the username and password as it is meant to do but then it keeps on challenging us time and time again and then denies access to smoothwall. It as if the user name and password are in correct, however when we set up a radius test on our ruckus controller(it has a radius test feature) it works. Is there something we are missing to do? Is smoothwall express and win2008r2 not happy together? Do we need to MOD smoothwall in another way? Thanks in advance Stuart
-
Hi, weve just recently had these installed by our network provider for which they were configured aswell. the problem is - our cachepilot is on a 172.16.1 range and is pingable across all other vlans but it cant be accessed as a proxy server on port 8000 any else apart from the vlan it is a memebr of. therefore how can i route port 8000 across the other vlans?? thanks, ITHelp
-
Hi, I am looking for a small Hardware firewall to be used at home. I will be looking at buying 2. It needs to be about the same size of an ADSL router & fanless. I would like it to have all the basuc firewall stuff and i would like basic content filtering as well, but will look into ones without. I used to have smoothwall express running on an computer. I dont want a computer running 24 x 7 though. I have looked at the sonicwall TZ Series, i have used these before. Do Smoothwall make such an item? What else is out there? Thanks
-
Hi, I'm hoping one of the smoothwall experts out there can help with a small problem we have. We just upgraded our internet access and previously had our email server straddling both the internal and external networks - two NICs one internal and one external. Our cisco router was then directly connected to our Smoothwall box and the external NIC of our email server, allowing email webclient access both internally and externally. I want to move our email server behind our Smoothwall box and just open up the necessary firewall ports on Smoothwall to allow external access to email. I've configured an external alias on Smoothwall, using a 2nd static ip from the range allocated, then set up port forwarding to forward http and https traffic onto our mail server's internal ip. Now when I try to access the mail server using the alias ip from outside of the network I get a 404 Not found. Looking at the access logs on the mail server, the external traffic is not getting through, and looking at the realtime firewall logs on the Smoothwall box I can see why - entries from my external ip (with strange port numbers - e.g. 31225) are being blocked, however the destination ip is the internal ip of our mail server and the port is correct (443). My question, finally, is why would an http request be hitting smoothwall with a strange port number, rather than 443 as one would expect, and why would the logs show the destination as the internal ip of our mail server, since the firewall rule is not being matched - hence the block. I'm sure I'm missing something obvious here - any help gratefully received. -
As discussed at EGconf'10 - here's a few screenies of my sequinned assistant.. I mean respected colleague Nile visiting a fakeAv site. Of course he was running firefox on linux at the time, so had little chance of getting infected seriously - although Wine was perfectly willing to run it! Rather than bore you with the stuff I put together for our internal team, I'll give you guys the raw material. I suggest you use a screenshot of this, combined with your REAL av whatever you use - and let users know the difference. If you close the site before you get to the final phase, you are generally safe. If you want to harmlessly trigger your real desktop AV in order to get a screengrab, you can use the EICAR test file: http://www.eicar.org/anti_virus_test_file.htm this is a small, harmless file that *should* trigger a positive in any AV engine. If yours doesn't complain to your vendor. I have certainly seen it trigger Clam, Kaspersky, Bitdefender and Sunbelt. Few extra bits: How did we find this site? Well we searched for "Rima Fakih pole dancing" - some ex-Miss USA with an.. embarrassing.. old home movie. This is how these guys operate - they pimp on popular search terms. Today you'll find some on "red dead treasure map" though the cleanup is well under way there. The Virustotal PDF is a printout of an analysis I sent to virustotal when we were looking at aforementioned pole-dancer.. it was certainly a couple of days into the outbreak, and as you can see, the nature of the malware has rendered many of the "big names" ineffective. In fairness, running that same exe now, a couple of weeks later, gets 38/41 coverage, with Fortinet being the only relatively major casualty. fakeav.zip
-
Are there any built-in URL filters for translation websites in Smoothwall? A lot of students are now using them to try and bypass our filtering, most of the time when they click on the results they still get blocked by weighted phrases, but it would be nice to block some of the translation websites.
