OS windows with firewall??

[esam]

how to allow any user has OS windows update through zentyal??

my rule is      denyـــــــــــــــanyـــــــــــــــــــــــــــــ any

i want them can install windows update automatic.

[FarquahrWindsor]

You might be better going around this another way. As far as I am aware win updates on standard ports 80 & 443.

You might be better blocking all sites with the proxy and filters and allowing only a select few.

[esam]

i am using block not listed domain and url's

[esam]

i am using block not listed domain and url's for each user and i made rule in packet filter from internal to internet   accept======>any=======>any=======>any


but the user still can't update?!!!!

[FarquahrWindsor]

so basically you have your firewall totally open not filters in proxy and still now windows update and you can traceroute these on server then client?
http://windowsupdate.microsoft.com
http://*.windowsupdate.microsoft.com
https://*.windowsupdate.microsoft.com
http://*.update.microsoft.com
https://*.update.microsoft.com
http://*.windowsupdate.com
http://download.windowsupdate.com
http://download.microsoft.com
http://*.download.windowsupdate.com
http://wustat.windows.com
http://ntservicepack.microsoft.com
http://stats.microsoft.com
https://stats.microsoft.com
 

as if everything is open then its prob dns

you do have an internal lan setup don't you?

Esam with the amount of simple queries you have are you not sure that a subscription would solve all your woes.
With the remote connection the zentyal guys would have you up and running in a tick.

[esam]

i have lan 10.0.1.0/25

so my configuration is wrong?

[esam]

i can't use * in filter packet?!!

[FarquahrWindsor]

I dunno esam you are on the right side of the server. Ie your subnet is internal to zentyal.

Sorry dumb question but just to get to basics.

Your firewall is open you don't have any filters and your dns works.

But you still can't update?

[esam]

i made objects' policy for each user with filter profile inside it i let Block not listed domains and URLs is enabled(i put some web sites)

[FarquahrWindsor]

esam go back to basics have no filters everything open. see if update works. bring them back one at a time checking win update.

[esam]

i will check

[esam]

if filter profile default they can update windows but not they can't update...