Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
16
Installation and Upgrades / Re: Opening firewall ports to another server
« on: February 08, 2011, 11:40:25 am »
Hi,
You need to add a firewall rule to accept connections "From external rules to Zentyal", port 80.
Regards,
You need to add a firewall rule to accept connections "From external rules to Zentyal", port 80.
Regards,
17
Installation and Upgrades / Re: Dans guardian is failing to block https://www.facebook.com
« on: February 08, 2011, 11:26:42 am »
Hi asaidi,
Go to services and add a new service with your HTTPS port.
Regards,
Under "Filtering rules for internal networks," the https service is not listed. I've tried HTTP, http and http software. Non of them seem to be able to block anything.
Where am I missing it?
Go to services and add a new service with your HTTPS port.
Regards,
18
Installation and Upgrades / Re: Opening firewall ports to another server
« on: February 05, 2011, 06:12:34 pm »
Hi,
You should forward a port from the Zentyal Gateway to the web server and add a rule to accept connections to this port.
Regards,
You should forward a port from the Zentyal Gateway to the web server and add a rule to accept connections to this port.
Regards,
19
Installation and Upgrades / Re: Dans guardian is failing to block https://www.facebook.com
« on: February 03, 2011, 03:57:03 pm »
Hi,
Althougth it is a bit tricky, this is currently the only way to block non-HTTP services with Zentyal.
It's hard to do groups-based filtering of HTTPS while maintaining the chains of trust, and it's not currently supported by Zentyal at all. The most similar feature is to filter the services as I explained you in the previous message, but also creating objects with your machines and configuring the filters with them as source objects.
Regards,
1-> I'm not using the firewall of Zentyal in this case.
Althougth it is a bit tricky, this is currently the only way to block non-HTTP services with Zentyal.
2-> I'm giving the permission based on groups, so in an other word I want other people to browse this site.
It's hard to do groups-based filtering of HTTPS while maintaining the chains of trust, and it's not currently supported by Zentyal at all. The most similar feature is to filter the services as I explained you in the previous message, but also creating objects with your machines and configuring the filters with them as source objects.
Regards,
20
Installation and Upgrades / Re: Help!
« on: February 03, 2011, 03:22:34 pm »
Hi,
Do you mean that you have three Internet connections from three different providers?
In that case you can use multiple gateways and balance the traffic between them or configure WAN failover rules to manage connectivity failures.
Take a look at the routing documentation (available in English and in Spanish).
Regards,
Do you mean that you have three Internet connections from three different providers?
In that case you can use multiple gateways and balance the traffic between them or configure WAN failover rules to manage connectivity failures.
Take a look at the routing documentation (available in English and in Spanish).
Regards,
21
Installation and Upgrades / Re: Dans guardian is failing to block https://www.facebook.com
« on: February 03, 2011, 03:12:47 pm »
Hi,
We don't support https filtering with the proxy module, but you can block the IPs in the firewall, for that:
- Create an object for this service
- Use dig or any other tool to get the IPs providing the service
- Add these IPs to the object
- Add a firewall rule for internal networks to block the access to this object
You can also configure DNS to resolve the address to block to a different address, but this is easier to bypass using other DNSs.
Regards,
We don't support https filtering with the proxy module, but you can block the IPs in the firewall, for that:
- Create an object for this service
- Use dig or any other tool to get the IPs providing the service
- Add these IPs to the object
- Add a firewall rule for internal networks to block the access to this object
You can also configure DNS to resolve the address to block to a different address, but this is easier to bypass using other DNSs.
Regards,
22
Installation and Upgrades / Re: Windows 7 Mapped home folder (H:)
« on: February 01, 2011, 01:59:51 am »
Hi,
We have fixed this issue following the recomendations of this and other conversations. Thanks for your comments and suggestions!
There is no new package released yet, while we publish it you can see the changes in trac: https://trac.zentyal.org/changeset/20361
Regards,
We have fixed this issue following the recomendations of this and other conversations. Thanks for your comments and suggestions!
There is no new package released yet, while we publish it you can see the changes in trac: https://trac.zentyal.org/changeset/20361
Regards,
23
Installation and Upgrades / Re: Web server is not accessible from the local network with Zentyal
« on: February 01, 2011, 01:51:09 am »
In the redirection to the internal interface, try using the internal IP address or "Zentyal" as the original destination.
If it doesn't work for you, you'd need to configure your DNS to resolve the address of your webmail service to 192.168.2.133 (or to the internal address of the Zentyal server, but in this case you'll also need to add the internal redirection).
If it doesn't work for you, you'd need to configure your DNS to resolve the address of your webmail service to 192.168.2.133 (or to the internal address of the Zentyal server, but in this case you'll also need to add the internal redirection).
24
Installation and Upgrades / Re: Web server is not accessible from the local network with Zentyal
« on: January 31, 2011, 01:07:26 pm »
Hi,
If you want to use the same URL to connect from both networks (internal and external) you'd need to add a port forwarding rule for each interface (note that you're only forwarding the traffic going to the external interface), or, if your Zentyal Gateway is used as DNS for your machines in the local network (and only for them), configure the domain used to access from external networks to resolve to the IP of your web+mail service.
Regards,
If you want to use the same URL to connect from both networks (internal and external) you'd need to add a port forwarding rule for each interface (note that you're only forwarding the traffic going to the external interface), or, if your Zentyal Gateway is used as DNS for your machines in the local network (and only for them), configure the domain used to access from external networks to resolve to the IP of your web+mail service.
Regards,
25
Installation and Upgrades / Re: Windows 7 does not mount samba users home share within a domain (PDC)
« on: January 27, 2011, 06:38:25 pm »
Hi,
We have fixed this issue following the recomendations of this and other conversations. Thanks for your comments and suggestions!
There is no new package released yet, while we publish it you can see the changes in trac: https://trac.zentyal.org/changeset/20361
Regards,
We have fixed this issue following the recomendations of this and other conversations. Thanks for your comments and suggestions!
There is no new package released yet, while we publish it you can see the changes in trac: https://trac.zentyal.org/changeset/20361
Regards,
26
Spanish / Re: Dudas en roundcube
« on: January 25, 2011, 05:40:08 pm »
Hola,
No, no estás trabajando con el archivo equivocado, lo que sucede es que ese, como todos los archivos generados por Zentyal a partir de plantillas pueden ser sobreescritos en reinicios o cuando se guardan cambios.
Tienes dos formas de hacer permanentes los cambios:
La primera opción implica realizar los cambios directamente en la plantilla que se usa para generar la configuración. En tu caso podrás encontrarla en "/usr/share/ebox/webmail/main.inc.php.mas". Ten en cuenta que este archivo será sobreescrito si se actualiza el paquete ebox-webmail.
La segunda opción sería crear un script llamado "/etc/ebox/hooks/webmail.postsetconf" que realice automáticamente los cambios que hacías manualmente en "/etc/roundcube/main.inc.php".
Un saludo,
No, no estás trabajando con el archivo equivocado, lo que sucede es que ese, como todos los archivos generados por Zentyal a partir de plantillas pueden ser sobreescritos en reinicios o cuando se guardan cambios.
Tienes dos formas de hacer permanentes los cambios:
- Modificar la plantilla directamente en vez del archivo de configuración
- Crear un hook que modifique el archivo generado por la plantilla tras guardarlo
La primera opción implica realizar los cambios directamente en la plantilla que se usa para generar la configuración. En tu caso podrás encontrarla en "/usr/share/ebox/webmail/main.inc.php.mas". Ten en cuenta que este archivo será sobreescrito si se actualiza el paquete ebox-webmail.
La segunda opción sería crear un script llamado "/etc/ebox/hooks/webmail.postsetconf" que realice automáticamente los cambios que hacías manualmente en "/etc/roundcube/main.inc.php".
Un saludo,
27
Installation and Upgrades / Re: OpenVPN in Standalone configuration
« on: January 22, 2011, 11:22:36 am »
Hi,
Probably the problem is that your client is using the VPN server as default gateway but this is not configured for that.
If you want to use the VPN server as you default gateway, configure it for that (http://doc.zentyal.org/en/gateway.html).
If you don't, check the configuration of the client and make sure that it continues using your usual gateway after connecting to the VPN.
Regards,
Probably the problem is that your client is using the VPN server as default gateway but this is not configured for that.
If you want to use the VPN server as you default gateway, configure it for that (http://doc.zentyal.org/en/gateway.html).
If you don't, check the configuration of the client and make sure that it continues using your usual gateway after connecting to the VPN.
Regards,
28
Spanish / Re: Instalar en VPS
« on: January 07, 2011, 11:08:17 am »
Hola,
Puedes acceder con cualquier usuario que pertenezca al grupo 'admin', en ubuntu el usuario que creaste durante la instalación debería pertenecer a este grupo. Si no, puedes añadir a cualquier usuario con el comando:
Un saludo.
Puedes acceder con cualquier usuario que pertenezca al grupo 'admin', en ubuntu el usuario que creaste durante la instalación debería pertenecer a este grupo. Si no, puedes añadir a cualquier usuario con el comando:
Code: [Select]
sudo adduser usuario adminUn saludo.
29
Installation and Upgrades / Re: Numerous bugs in 2.0.13
« on: December 30, 2010, 07:44:25 pm »
Hi,
Many thanks for your report!
We already knew some of these issues, i.e. 5) is already fixed. We have taken good note of each problem.
If you find other issues feel free to report them.
Regards,
Many thanks for your report!
We already knew some of these issues, i.e. 5) is already fixed. We have taken good note of each problem.
If you find other issues feel free to report them.
Regards,
30
Installation and Upgrades / Re: Possible with Zentyal?
« on: December 29, 2010, 08:54:41 pm »
Hi,
Ok, I think that I understand your question now, what you want is to connect from a third-party application with the Zentyal LDAP server, isn't it?
In principle you could use any master or slave server, but as you need the mail information you'll have to connect to the slave with the mail module installed.
You can find the needed connection settings in "Users and Groups ->LDAP Settings". Remember also to open the ports in the firewall if needed. A slave Zentyal server has three LDAP instances (frontend, translucent and replica). You should try to connect with frontend (port 389) or replica (port 1389).
Regards,
Ok, I think that I understand your question now, what you want is to connect from a third-party application with the Zentyal LDAP server, isn't it?
In principle you could use any master or slave server, but as you need the mail information you'll have to connect to the slave with the mail module installed.
You can find the needed connection settings in "Users and Groups ->LDAP Settings". Remember also to open the ports in the firewall if needed. A slave Zentyal server has three LDAP instances (frontend, translucent and replica). You should try to connect with frontend (port 389) or replica (port 1389).
Regards,