Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - darrengreer

Pages: [1] 2
1
Installation and Upgrades / Re: 3.4 RADIUS won't start
« on: April 21, 2014, 06:40:33 pm »
Check https://forum.zentyal.org/index.php/topic,21168.msg82736.html#msg82736

While that thread didn't fix it directly, a reference from that led to the following forum post, that did fix the issues.  Thanks!!

https://forum.zentyal.org/index.php/topic,21499.15.html

2
Installation and Upgrades / Re: 3.4 RADIUS won't start
« on: April 21, 2014, 04:04:52 pm »
I've recently upgraded, and am experiencing the same issue.  Has anyone found a resolution to this?

3
I'm running the latest 3.3.

I have proxy logs configured, and can see logging happening in /var/log/squid3, however, when I go to Maintenance -> Logs -> Full Report, the report is empty.  No matter what date sample I select, there are no results.  Any clue where I should look to see what might be misconfigured?

Thanks!

4
I've configured a filter profile, and then created 3 time period based access rules (See attachment).  If I put the the rules in the appropriate order with the "deny" rules above the allow rule, everything is blocked, despite the time periods that have been defined.  The only way that things are allowed, is if I put them in the order in the attached screenshot, which I believe is incorrect as it will always allow access.

Are the time periods not active in the current release?

Thanks

5
Found the solution to the ipv6 breaking DNS issue.  After some research, I found an obscure thread for Debian that mentioned modifying the bind9 config to force ipv4 lookups only, using the following config line:

Code: [Select]
//-4 = to use ipv4 only.
So, my new bind9 config looks like:

Code: [Select]
root@firewall:# cat /etc/default/bind9
# run resolvconf?
RESOLVCONF=no=
# startup options for the server
OPTIONS="-4 -u bind"

After a quick reboot, all appears to be well.  Thanks for the IPV6 tip!!

6
I'll keep googling for an answer as to why the dns services fail with ipv6 fails, appreciate the tip.  Hopefully this will solve it :)

If anyone else knows why I can't disable ipv6 cleanly, would appreciate feedback.

Here are the errors I would receive:

Code: [Select]
2012/10/17 18:55:06 ERROR> RESTClient.pm:289 EBox::RemoteServices::RESTClient::request - 500 : Can't connect to api.cloud.zentyal.com:443

LWP::Protocol::https::Socket: getaddrinfo: Name or service not known at /usr/share/perl5/LWP/Protocol/http.pm line 51, <GEN0> line 3.
2012/10/17 18:55:06 ERROR> run-pending-ops:62 EBox::RemoteServices::Run::Pending::__ANON__ - Can't perform the request: 500 : Can't connect to api.cloud.zentyal.com:443

LWP::Protocol::https::Socket: getaddrinfo: Name or service not known at /usr/share/perl5/LWP/Protocol/http.pm line 51, <GEN0> line 3.
2012/10/17 18:55:06 ERROR> RESTClient.pm:289 EBox::RemoteServices::RESTClient::request - 500 : Can't connect to api.cloud.zentyal.com:443

LWP::Protocol::https::Socket: getaddrinfo: Name or service not known at /usr/share/perl5/LWP/Protocol/http.pm line 51, <GEN0> line 3.
2012/10/17 18:55:06 ERROR> run-pending-ops:62 EBox::RemoteServices::Run::Pending::__ANON__ - Can't perform the request: 500 : Can't connect to api.cloud.zentyal.com:443

LWP::Protocol::https::Socket: getaddrinfo: Name or service not known at /usr/share/perl5/LWP/Protocol/http.pm line 51, <GEN0> line 3.
2012/10/17 18:55:06 ERROR> RESTClient.pm:289 EBox::RemoteServices::RESTClient::request - 500 : Can't connect to api.cloud.zentyal.com:443

LWP::Protocol::https::Socket: getaddrinfo: Name or service not known at /usr/share/perl5/LWP/Protocol/http.pm line 51, <GEN0> line 3.
2012/10/17 18:55:06 ERROR> run-pending-ops:62 EBox::RemoteServices::Run::Pending::__ANON__ - Can't perform the request: 500 : Can't connect to api.cloud.zentyal.com:443

LWP::Protocol::https::Socket: getaddrinfo: Name or service not known at /usr/share/perl5/LWP/Protocol/http.pm line 51, <GEN0> line 3.

And doing an nslookup from the shell would produce:

Code: [Select]
root@firewall:/var/log/zentyal# nslookup zentyal.com
;; Got SERVFAIL reply from 127.0.0.1, trying next server
^C
root@firewall:/var/log/zentyal# nslookup tetrago.com
;; Got SERVFAIL reply from 127.0.0.1, trying next server
^C

7
Thanks for the tip, however, once I disable ipv6, most network services appear to fail.  It seems as though all DNS lookups stop functioning.  Tried multiple reboots.

Thoughts?

8
All,

I've been hoping to enable transparent proxy for some time now, but each time that I do, certain sites will hang, and never load in the browser.  Google.com, zentyal.org among others.  The odd part is that I'll live stream the logs, and I can see the request about 30-45 seconds after initial request.  This happens on multiple machines, so I doubt this is my computer.

When I disable transparent proxy, all is well.  Like I said, it doesn't do it for all sites.  Google.com and bing don't work, but then ask.com does.  Very odd.

Any help??

9
The new proxy module has still not being released in the beta repositories, we will announce when this is ready, should be soon.

Awesome news!  Although my kids will be disappointed ;)

10
Do you mean answer you got (second post in this thread) is not clear enough?

No, to the 3 post, where I clarify that I AM running the version (beta) that will be release in September, and whether the ability is in the beta now?

11
Bumping... Anyone?

12
Thanks :)

13
Installation and Upgrades / Re: HTTP Proxy Time + Filter Options?
« on: July 08, 2012, 06:47:59 pm »
Yes, as I stated at the top of my post, I am reposting here, as I am running the beta, it makes more sense that I ask here.

14
Installation and Upgrades / HTTP Proxy Time + Filter Options?
« on: July 08, 2012, 03:04:11 pm »
Greetings all, reposting in the beta forums...

I have Zentyal running in my house, and I'm using it to filter my kids access.  I have two objects for them (Young/Older), and I have different levels of filter (strict/very strict) for the two, using object policy filter.  I'd like to also have an object policy that restricts when those objects can connect through the transparent proxy, but Zentyal complains when I try to do both filter and time.  Is there a way around this?  In my other post someone mentioned this is a feature in the upcoming release, which I am running, so was hoping someone could point me in the right direction.

Maybe create a new object for each, and set that up for time based access, and move it up in the priority?  Something else?

Thanks!

15
I should have specified, I am running the current beta that is going to be released in September.  Is that feature enabled in the beta yet?

Pages: [1] 2