carl0s

Googling, thanks. ipcop.org seems very slow from where I am.

I'm thinking the same. Although I have a non-working box here now so I'm tempted to try smoothwall now The developer that I seem to remember having a cock attitude isn't involved in that anymore from what I just read anyway. re: untangle. I dunno. After just trying out Endian I'm tempted to give Untangle another whirl now as well. I have patched some cables through so I can leave the box here while I play instead of keep going back and to to the shed everytime I install a new system on it. Another thing with Untangle that I couldn't see/find was any kind of Aliases, i.e. Kids = 192.168.253.14,192.168.253.18 .. pfSense lets me use aliases like that and then use them in firewall rules.

hmm. This Endian thing is no good. Not intuitive at all and I just can't get simple outbound NAT working.. No Internet access now except from this server here with its own public IP. d'oh!

Now downloading Endian 2.2-beta3 http://www.endian.com/

No PPTP on IPCop. I don't need this, but I would rather evaluate something I could use for customers. Not seeing much mention of web content filtering either. hmm. Wonder what else is out there as a pre-packaged firewall/gateway system like these.

Don't know about the no more nails. Works well on skirting boards and suchlike. Doesn't try as instantly as CA but it's a whole lot quicker than Araldite. You wouldn't struggle to sell those mats for probably more money than you think...

Well, I think I've decided I don't like it. I'm not sure if it's because I feel dumbed-out by it, or if it's because I can't be arsed trying to manually get IMSpector in place, and manually overcome the lack of scheduling/time based firewall rules*. I was going to persevere and try to alter the inbuilt "no rack" policy default to block-all rather than pass-all. This would have allowed me to do time based filtering in the free version, because although you can't create multiple racks & use policies to apply them to different machines @ different times etc, there is an inbuilt "no rack" to go alongside your configured rack. The problem is that this "no rack" config is an allow-all setup, rather than an allow-nothing setup. Anyway, I would have to get off my arse and go into the shed ("comms room" ) and plug a screen into the machine to enable ssh so I could have a play from inside here. No ability to turn on ssh through the admin console has just taken me over the dumbed-out line for today. Note to self: Use a spare hard drive next time I'm gonna look at some other things now. I never have actually tried IPCop. I'll try it now. I remember reading some posts probably 4-5yrs ago from the Smoothwall developer which left a very sour taste in my mouth so I won't be going down that route. *without paying. Although for up to 10 protected IPs it's only $225/year. Acceptable for business use I reckon.

I think my problem was that I was seeing what I could do through the GUI interface, rather than through the console. With an outside list like you're using, and configuring through the console I guess it will do what I wanted. Thanks for the heads up.

That stuff is super-glue (CA) with accelerator so you can put it on thick and fill gaps. It does seem to work better than expected

Sure, why not. I might not use it yet but it's good info to have

I remember the problem now. You had to maintain a list of blocked urls, and that list started off empty. Has that changed now then? That's more url blocking rather than content filtering IMO. I realise that most 'content filtering' systems probably do just use massive outside maintained url lists, but I was looking for something that intercepted and filtered the content, or at least an existing outside-maintained category based url blocklist.

I'm pretty certain I had a go at this and got nowhere. I seem to remember it doesn't actually do content filtering, maybe just malware removal. Can't remember, but it wasn't possible when I tried. pfSense forums confirmed it wasn't possible at the time.

They look like the original optional-extra Supra Pure-Sports mats, which I have too. I think they're in the same boat as OEM side skirts (rare).

meh. You need the Pro package to do scheduling/time based firewall rules. It's part of the Policy Kit could do a crontab entry, but this is a step backwards from pfSense. So I have gained a web filter and lost time restrictions

Well that's no fun. It just works. Where's the nerdyness in that? http://www.porn.com is blocked! I haven't actually done anything other than install the Open Source library rack/package set. It's all switched itself on and blocking/protecting/filtering. but of course, I'm allowed porn. It's the kids who aren't. Time to try to make some changes

Missus is in bed still, gonna install this thing now and have a play. First problem I ran into yesterday, is that the fancy admin tool shown in the video.. it's a Java Web Start application, and there is no javaws for Linux x86_64, which meant I couldn't look at the online demo system. Have workaround now though.

Cool. Thanks chaps.

Hmm. Thanks guys These 7 or 10 bolts.. how the hell am I going to get to them? Do I need to remove the undertray and go at it from beneath? Mine's facelift so there's a chance those screw holes are totally different. Facelift has the twin electric fans. I can just look at my new fan shroud I suppose, that might help. Easy job then or not?

Can someone give quick instructions for changing the fan shroud? I have a facelift car, original one is cracked on top. I was told there's no need to pull out the radiator or bumper off. How do I do it easily then? thanks.

I hoped I would catch your attention 'cause I know you use Smoothwall

Somebody over at the forums is working on IMSpector integration.

I just hope it's not too dumbed-down. There are always specifics that I get used to using which might not be present. For example with pfSense I have a schedule set, so that kids computers don't work on the Internet after a certain time. Haven't seen any mention of IMspector yet either for logging and swear-filtering MSN Messenger. On the other hand, pfSense doesn't show me a list of currently connected VPN users, or allow me to boot them off or see their assigned IP address. This system does. That doesn't matter to me personally (I use win2k3 RRAS), but I have a client using pfSense too and it's been an issue there. pfSense really is a router/firewall rather than an allround application type gateway I suppose, so there's no spam filtering. I might give this thing a proper look. edit: sorry, virus scanning is included in Free as well. But you can pay for Kaspersky if you want. I guess it's using ClamAV or something similar.

That's a web interface. The system is Linux based (suspect.. haven't seen confirmation of that, but apparently you can install it as packages onto a Debian or Ubuntu system). You download the ISO, let it format the hard disk and install itself onto a PC. They have some Vmware virtual appliances (whatever they are..) to download at: http://www.untangle.com/index.php?option=com_content&task=view&id=290&Itemid=1148 It seems that everything is included in free except for the clientless-vpn portal and antivirus, but OpenVPN is included in free, as is the spam filter etc.

(I realise I am way behind the times BTW, this thing apparently isn't new)

I just came across this. The management interface looks rather snazzy and overall it looks really quite interesting. I'm not sure what limitations the 'free download' has, i.e. how much functionality you get without paying, but I'm gonna give it a whirl I think. I currently use pfSense, and I have a couple of sites using Astaro. I've looked at reviews/demos of various others like RouterOS, Smoothwall and IPCop. Anyway I clicked an advert over at lwn.net and ended up at this site: http://www.untangle.com/ Check out the video: http://www.untangle.com/video_overview/ Looks interesting doesn't it.