Beiträge von ffischer

  • FritzBox und Endian keine Verbindung

    Ich kenne das von den normalen Fritzbox kisten, habe wo anders eine etwas ältere als Modem in Verwendung weil der neue Speedport nicht korrekt als Modem verwendet werden kann.
    Da kann der Router dahinter "Sophos" keine Verbindung auf bauen mit der Fritzbox ja, dort gab es eine Möglichkeit per UI in der Fritz auf Modem Betrieb umzuschalten.

    Ich kenne nun das UI der FritzBox nicht die du hast, sollte aber sicherlich machbar sein.
    Ein Howto habe ich auch gefunden , ob das noch funktioniert müsstest probieren.

    http://www.kdgforum.de/viewtopic.php?f=67&t=25330&p=369244#p369244

  • Migration zu Endian 3.0 Verfügbar!

    So eben erreichte uns folgende E-Mail.

    Endian Team informs you that the upgrade to the new UTM 3.0 release is now available just for Mercury and Macro series hardware appliances as well as for UTM Software and Virtual appliances.
    To upgrade your systems (active maintenance mandatory) : open a support ticket requesting for guided migration procedure.
    We remind you that Endian UTM 3.0 release will be available for Mini series hardware appliances starting from end of February.
    To discover more visit Everything You Need to Know About Endian UTM 3.0

  • https-proxy

    Also die Sophos kann( zumindest ist es aktivierbar )
    HTTPS Proxy.

    Hatte das mal aktiv, merkte aber schnell, so einfach ist das nicht, viele Seiten wurden im Chrome beim aufrufen "rot" dargestellt.
    Genau getestet habe ich das noch nicht wirklich.
    Man kann immerhin Zertifikate hinterlegen, ich denke die prüft er nach. div. CAs sind schon mit dabei.

    wie schon erwähnt Man-in-the-middle lässt grüßen :)

  • Endian Community 3.0 FINAL DOWNLOAD ISO

    endian_efw3-0-b-e_04.jpg

    Download EFW Community 3.0 FINAL
    MD5 f2e744604bdb0b45575704cd798c7590


    Download EFW Community 3.0 SRPMS
    MD5 7810c45e5f91a2ccfb863aaedc3f20ed


    Für alle die sich jetzt wundern, warum beim Download das File immer noch -devel- beinhaltet,
    gab es diese Erklärung von Endian:

    Zitat

    Yes it is because 3.0 Community will be always bleeding edge so made by
    devel channel.
    But devel channel now is not the trunk development channel but a frozen
    branch.

    Details zu den Änderungen:

    ** Improvement
    * [UTM-829] - UTM-828 Disable direct client communication when
    multiple processes is enabled
    * [UTM-811] - Optimize memory usage of urlfilter categories by
    removing those which are not used
    * [UTM-810] - Optimize memory usage by using 'file' instead of
    'hash' for urlfilter lookup tables
    * [UTM-739] - Connections page for VPN users: backend
    * [UTM-733] - Reflect in GUI transitioning states of IPsec
    connections
    * [CORE-685] - Make Apply, Notification and Error box grow with
    content
    * [CORE-629] - Update Intel network drivers
    * [CORE-553] - Configurable logs for trusted timestamping


    ** Bugfix
    * [UTM-806] - When clamd is not running when c-icap is starting
    and needs clamd, c-icap does not have a virus
    engine and let all pass.
    * [UTM-805] - Squid need also to be restarted when a file in
    /etc/squid/squid.conf.d/ changed
    * [UTM-804] - c-icap does not start when clamAV is enabled
    instead of Panda Antivirus
    * [UTM-803] - ClamAV safebrowsing is still enabled also if
    disabled
    * [UTM-798] - c-icap uses a very large amount of memory
    * [UTM-795] - Providers associated to a scope are lost, syncing
    * [UTM-782] - Virus engine for amavis is failing due to
    unexpected exit code 255
    * [UTM-775] - Duplicated lable in DNS Routing page
    * [UTM-771] - Error signing a certificate request
    * [UTM-742] - Disabling IPsec Net-to-Net connection displays
    the status as if it was Connected or Connecting
    * [UTM-728] - Application Control works only with source ANY
    * [UTM-702] - HTTP Proxy issues
    * [UTM-698] - Unable to download the content filter signatures
    * [UTM-697] - IPsec 3.0 migration missing
    * [CORE-472] - Remote authentication reply can contain binary
    values
    * [CORE-462] - Swap partition dimension reorganization
    * [CORE-423] - Wrong baud rate on software appliance
    * [CORE-316] - Values of default settings files are not read
    when job uses get_config()
    * [COMMUNITY-53] - /var/log/fifo/dansguardian is not a fifo
    * [COMMUNITY-45] - ISSUU slow with Internet Explorer
    * [CORE-591] - Logrotate removes archives older than 7 days
    automatically for most daemons
    * [CORE-672] - Emi commands ignores all but the first param of a
    param list after the first request
    * [CORE-651] - In System Status some sub categories disappear
    when navigating to VPN connections
    * [CORE-644] - Some log files are not rotated
    * [CORE-642] - Kernel kmalloc traceback in /var/log/messages
    * [CORE-639] - Log timestamping doesn't use correctly the
    pattern variable
    * [CORE-638] - Freezings and reboots caused by out of memory
    * [CORE-631] - Default gateway is lost after adding an uplink on
    the same interface the main one is using
    * [UTM-595] - OpenVPN user migration
    * [UTM-593] - OpenVPN server GUI
    * [UTM-591] - OpenVPN server backend
    * [UTM-590] - VPN authentication management (service) GUI
    * [UTM-589] - VPN authentication backend GUI
    * [UTM-588] - VPN user groups GUI
    * [UTM-587] - VPN user groups support for remote providers
    * [UTM-586] - VPN user groups support for local backend
    * [UTM-585] - VPN user groups backend
    * [UTM-527] - Outgoing IP address configuration for each domain