<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type"> <title></title> </head> <body bgcolor="#ffffff" text="#000000"> Dimitri, I was playing with censornet yesterday and was having the same type of issues. This is what cured mine. At the CCT after original setup; I did a lan probe of workstations I imported my users from active directory I reset the admin area and that took care of getting into the web interface, granting it is enabled in the initial setup along with the access passwords. 1 screwup I had was I had the NICs backwards. Even though I was in bridge mode the iptables still looks at which nic is which as far as internal and external. Something I'm going to check on and maybe some already has, is using iptables/ebtables to port forward 80 traffic to port 8080. I came across this web site that talks about it. <a class="moz-txt-link-freetext" href="http://freshmeat.net/articles/view/1433/">http://freshmeat.net/articles/view/1433/</a> Go to the section on transparent redirection. I replaced 3128 with 8080. HTH Mark David Whitmer wrote: <blockquote cite="mid20060425233628.12551.qmail@web31603.mail.mud.yahoo.com" type="cite"> <blockquote type="cite"> <pre wrap="">Hi to all. I was wondering if anyone's using Censornet. I've installed the latest version on CentOS 3.6. No matter what I try, I can't get it to work. Some info.: I'm using iptables to connect/protect my LAN and DMZ. The interfaces are eth0 (public), eth1 (private, 192.168.100.1/22), and eth2 (DMZ, 192.168.1.1/24). I've given the Censornet box the address 192.168.100.14/22. It's in bridged mode. I believe I have everything configured correctly. Censornet finds and configures the 3COM nics. I've tried different wiring combinations between the LAN, router private interface, and the two Censornet interfaces. Depending on the wiring, I get a) connected to the internet without being authenticated or, b) not connected or, c) (if I specify a proxy in the Web browser, which I'd rather not do) prompted repeatedly for uname and pw without ever connecting; if I cancel the prompt, I'm told I don't have authorization to use the Web. Grrrrrrr! Is anyone using the current version of Censornet in a setting like mine who can show me the error of my IT ways? The help would, as always, be greatly appreciated. Dimitri </pre> </blockquote> <pre wrap=""> Dimitri, Along with checking the Censornet forums, have you also tried their FAQ? (<a class="moz-txt-link-freetext" href="http://www.censornet.com/faq/">http://www.censornet.com/faq/</a>) Have you tried to access the Internet directly from the Censornet box itself, to make sure it can access the Internet okay? We're not yet using the latest version of Censornet, but at least with ours, you DO have to set the proxy address and port information in web browsers. (Though with K12LTSP, I can just set that once in all.js rather than every individual PC.) By default, Censornet expects web browsers to connect to it on port 8080 (in your case, 192.168.100.14:8080). When the browser first connects, you'll be prompted for a username & password. Here you enter a username & password created through Censornet web-based admin interface. If you just press cancel instead (your option (c) I think), then it will deny web access to that computer. That's the way Censornet is designed to work... it's an authenticating proxy with filtering. Much of its web-access restrictions and reporting are based on usernames. Brian mentioned the Censornet forums. I believe that in the past, setting up transparent proxy-based filtering has been often discussed on their forums. In short, Censornet isn't designed to do that, though it can be "hacked" to make it work that way. I hope this helps! David Whitmer Media and Technology Director Calvary Schools of Holland (Michigan) __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around <a class="moz-txt-link-freetext" href="http://mail.yahoo.com">http://mail.yahoo.com</a> __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around <a class="moz-txt-link-freetext" href="http://mail.yahoo.com">http://mail.yahoo.com</a> _______________________________________________ K12OSN mailing list <a class="moz-txt-link-abbreviated" href="mailto:K12OSN@redhat.com">K12OSN@redhat.com</a> <a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/k12osn">https://www.redhat.com/mailman/listinfo/k12osn</a> For more info see <a class="moz-txt-link-rfc2396E" href="http://www.k12os.org"><http://www.k12os.org></a> </pre> </blockquote> <pre class="moz-signature" cols="72">-- Mark Gumprecht MSAD3 Unity, Maine 04988 <a class="moz-txt-link-abbreviated" href="mailto:gumprechtm@msad3.org">gumprechtm@msad3.org</a></pre> </body> </html>