HHDs (Hoarding Hard Drive)

Why on Earth did I store these 3 HDDs? I really can't tell...
They are over a decade old, and all of them combined might amount to something close to 14 GB of storage
I did use them on really old boxes around here, mostly, IIRC, on OpenBSD and as an Endian Firewall test boxen, but that might have been, easily, about a decade ago or so.

Migrations Are A Bitch

Completely and totally covered by work.
Right now migrating 3 servers from a remote office to "the cloud"...
Taking a VPN (OpenVPN) and a Nagios monitor server fron two stand alone boxes onto a virtual, petite, dirt cheap Ubuntu Server on Digiral Ocean...
Things went sorta smooth, setting up and getting up & running the OpenVPN server was pretty much straight forward (this is the first time I setup an OpenVPN server from zero, i've used an Endian Firewall before).
Migrating Nagios was also pretty pretty easy (from another Ubuntu Server), simply copied the config files, and edit the /etc/nagios3/nagios.cfg file, and presto.
Will keep polishing things off the next few days...

Extra packages on Endian 2.4.1 (1)

A couple of extra RPMs I have been installing latelly on this brand new UTM box.

http://archives.fedoraproject.org/pub/archive/fedora/linux/core/3/i386/os/Fedora/RPMS/info-4.7-5.i386.rpm
http://archives.fedoraproject.org/pub/archive/fedora/linux/core/3/i386/os/Fedora/RPMS/wget-1.9.1-17.i386.rpm
http://packages.sw.be/iftop/iftop-0.16-0.2.el4.rf.i386.rpm

All of these installed without any problem via

rpm -ivh

Install iftop on the Endian Firewall

I love iftop, it is the answer, the inmediate answer, to the most asked question "who the fuck is turning the network to molases".
So after reading this Install VMWareTools On Endian Firewall Community 2.2 RC3, I decided to try and install some RPM extras on the firewall.

So, I got the iftop RPM package from DAG, this one:

http://dag.wieers.com/rpm/packages/iftop/iftop-0.16-0.1.fc3.rf.i386.rpm

Setup things a bit tidy on the Endian:

~ # mkdir local.rpms
~ # cd local.rpms/

And then used wget, that I already installed using the instructions from the first link, downloaded the RPM, and tested if I could install it or if there was a dependency:

~ # rpm --test -ivh iftop-0.16-0.1.fc3.rf.i386.rpm
warning: iftop-0.16-0.1.fc3.rf.i386.rpm: Header V3 DSA signature: NOKEY, key ID 6b8d79e6
Preparing...                ########################################### [100%]

No dependencies, everything went A Ok, so simply install and enjoy:

~ # rpm -ivh iftop-0.16-0.1.fc3.rf.i386.rpm 
warning: iftop-0.16-0.1.fc3.rf.i386.rpm: Header V3 DSA signature: NOKEY, key ID 6b8d79e6
Preparing...                ########################################### [100%]
   1:iftop                  ########################################### [100%]

Endian: Transparent Proxy on Green (make it work)

These last few days have been really busy, I'm currently migrating one of the office network setups to a UTM solution.
I'm installing and testing the Community (that is the free and unsupported ;) ) edition of the Endian Firewall.

Had a lot of problems to get the built in proxy Squid to get up and running in transparent mode, whatever I tried, it always belched this error message while trying to browse any page:

Sorry, you are not currently allowed to request:
<...Some website URL here...>
from this cache until you have authenticated yourself.

This request could not be forwarded to the origin server or to any                               
parent caches. The most likely cause for this error is that:                                  
The cache administrator does not allow this cache to make direct connections to origin servers, and              
All configured parent caches are currently unreachable.                            

Transparent mode, on the Green interface is the Holy Grail, no setup on any client at all, all the HTTP traffic goes thru the Proxy, and whatever limit or filter you wish to apply on it, but, after a default install, it refused to let the clients reach the internet, a real and major PITA.

Googled like a MF and read just about what ever I can get my hands on, even rebooted the Endian Firewall box, just to see if that would work.
In the end, found the solution, and I'm posting hoping someone might find it interesting as well.

To enable it, goto Proxy, after enabling it, set transparent for Green, Save an reinit, and then goto the 'Defautl Policy' tab, and click on "Create a rule", and set it like on the screenshot.

Authentication on transparent proxy?? RESOLVED! - Lots of hope on this one, but nothing
The requested URL could not be retrieved - Lots of hope on this one, but nothing
Beta 2.2 "Content Filter": msg#00010 - This is the closest
SOLVED [Fwd: Help with AV y Content Filter]
Proxy no longer allows access
Squid/DansGuardian not functioning together for "Standard" users.
Content Filter does not start when enabled so proxy denies access to all web pages