Untangle Forums

Port Forwarding - Dynamic DNS

mhamilton — Mon, 20 May 2013 03:12:10 GMT

Hello,

I'm having an issue with DynDNS updating. First, I realized that Untangle isn't proactive in updating the DynDNS when WAN-Failover happens. Sometimes, it forgets to do it completely. So, I installed a DynDNS Client on one of our Windows servers.

The reason why this is important, is for port-forwarding ofcourse. Either way, the ports should work because they would be open on both the primary IPs of both the WANs. However, port forwarding only works with only one of the IPs and not with the other. This makes me think I have messed up in the Port Forwarding rules.

I have destined local, protocol, and port set to forward to the internal IP. So why is it that the PF works only on one WAN IP and not the other (whether the other is active or not)

Some help would be great.
Thanks!

invalid password and reload wizard

LegendaryXLVII — Mon, 20 May 2013 03:07:27 GMT

i have been using untangle as my dhcp server/router/firewall for about 11 months now and i'm satisfied with its performance. all of a sudden, i got the brilliant idea that i need to setup a PXE server in my network so i can stop searching for bootable media. i did a lot of reading and made sure i did a backup before touching anything. one of the things i read, mentioned making sure the dhcp server has a bootable option (66 or something).

i finally found something that seemed helpful in my quest, but i wasn't sure about proceeding. i changed from the basic to the advanced mode to get additional dhcp & dns options. at the time i didn't know what i was looking for and tried to go back. for whatever reason, i could no longer log in through the web gui, and i couldn't log in directly from the console.

i read a little more to find out about the reset feature. that did not help reset the password for the web gui. was it for the terminal? after a moment, i decided to reboot the server and was presented with the wizard. i went through the process like normal, and loaded my apps back to it. i didnt know that i should have exported my block list so that was missing when i went back in. i assumed that making my backup was a good idea and tried to load it. the static entries for dhcp were back to normal. i did not log off the web gui for some number of hours. later, i wanted to start adding to my block list again, but i was unable to log back in.

i am not sure what the cause is, but i assume it's when i import my backup because i tried a second time and got locked out of the gui/console again. i am still able to get out to the internet, so my settings are mostly normal i guess, but i am concerned since my password keeps becoming invalid after trying to use my old settings.

i'm new to the forums and never really checked to see whether there was a version update/bug that keeps me from using my backup that i just made last week. any insight that anyone can provide will be helpful. thank you for your time.

Site to Site question

melders — Sun, 19 May 2013 22:58:48 GMT

I have a couple of questions regarding OpenVPN site to site tunnel.

Question/Problem #1:
I have 2 locations that I have a site-to-site tunnel up, the main location is 10.200.0.0/16, the remote location (our colo facility) is 10.220.0.0/16. The tunnel functions properly between these 2 locations, except you cannot access the 10.220.0.0/16 subnet from a connected VPN client (172.16.16.0/24), is there any way to make this function properly? I have routes in my main router pointing 172.16.16.0 pointing to 10.200.1.50 (Untangle for the main location), there is obviously a route in the router at the colo facility pointing 172.16.16.0 to 10.220.1.50 (Untangle for colo facility). I have exported the 10.220.0.0/16 subnet in OpenVPN. What did I do wrong here? or is this not possible?

Question/Problem #2:
At our colo facility, we have a Cisco ASA5510 (10.220.1.2) that has 15+ remote Cisco VPNs connected to it, all with various IPs within the 192.168.0.0/16 subnet. Is there any way for me to be able to reach a remote VPN with say a 192.168.15.0/24 IP from the Main location (10.200.0.0/16)? I am trying to avoid having to setup a Cisco Site to site tunnel.

Any help would be appreciated here. Let me know if I need to create 2 separate threads for these

Thank you in advance for any assistance

user is already logged in from anethor location

prvalva — Sat, 18 May 2013 16:50:21 GMT

after up gradation to the new version now the new problem came that is when user tries to login using captive portal its giving error that user is already logged in from another location, so we are manually doing log out , why this problem is coming?

captive portal user list is not loading

prvalva — Sat, 18 May 2013 16:47:11 GMT

hi in our campus we have 1000 WiFi users who connected with captive portal user group, now suddenly when am trying to create new user name the page is not loading only, i tried to restored the system backup also and rebooted the server also but problem is not solved, pls help me

components.js

chunkd — Fri, 17 May 2013 14:37:56 GMT

Could someone be kind enough to upload or tell me where to download. components.js

Mine is corrupted and don't have a backup of it.

It is located in /usr/share/untangle/web/reports/script

I am running the latest 9.4.0 untangle...

Thank you!

Untangle on a single computer?

MoreDakka — Fri, 17 May 2013 04:27:12 GMT

I'm wondering if this can be installed on windows as a parental control type of program instead as a full router?

Thanks.

Multiple Internal Network Setup

coreybrett — Thu, 16 May 2013 21:10:56 GMT

Multiple Internal Network Setup

I would like to configure an Untangle router to handle 3 different internal networks.
I have read http://wiki.untangle.com/index.php/How_Do_I... and I think I have the general idea down.

First off, I have a dual core Xeon with 6GB of memory and 4 onboard Ethernet interfaces. (Asus P5M2-E/4L) I plan on using the 64bit ISO for installation.

I would like the following�

Internal network A (192.168.76.0) � Office network with desktops and servers, DNS & DHCP provided by my internal Windows servers
Internal network B (192.168.81.0) � Public WiFi, Ideally� DHCP provided by Untangle and DNS by the Windows servers on network A
Internal network C (192.168.117.0) � DMZ for web servers that will be available to clients on A, B and the Internet. I suppose I don�t really need DHCP on the DMZ network if that makes a difference.

Network_Diag.png

I currently have two separate Untangle installations (one for internal and one for WiFi) but would like to consolidate to a single server for two reasons.

One� QOS, I need my VOIP traffic prioritized over all other traffic.
Two� At some point in the future, I may want to use the web caching application and don�t want to pay for it twice.

I am thinking that I will use the �Internal� interface for network B, the �DMZ� interface for network C and the �ethX� interface for network A. Is that a sensible plan?

I am not quite sure about the DHCP & DNS. Is it possible to enable Untangle�s DHCP on only a particular interface, or is packet filtering the recommended way to control it?

Can I configure the DHCP clients on B & C to obtain the address of my DNS servers on A via Untangle�s DHCP?

Attached Images

Network_Diag.png (51.5 KB)

Directory Connector w/Lite

Lahru — Thu, 16 May 2013 18:58:24 GMT

I have a Windows Domain at home that I use for experimentation and training myself for my professional life. I'd like to use it with untangle to lock down internet access for my kids, (parental control), by setting this up as an in-line proxy. Right now the kids have their own network accounts, but I need a simple to use interface so I can train my wife on how to open/close things as needed, and so far this looks good.

I am thinking of using the Lite version of Untangle and purchasing the Directory Connector Application/Module.
I have 2 questions:
Can I do this with the Lite version?
Do I have to buy the Policy Manager too?

Upgrading from 9.0.2 32-bit to 9.4.0 64-bit

bassichonda96 — Thu, 16 May 2013 14:01:26 GMT

Here's my game plan to do this upgrade tomorrow night. Wondering if anyone has any suggestions, or do you think it's a pretty solid game plan.

Current Server: Dell 1950 (6 NICs), Untangle 9.0.2 32-bit, 16GB RAM (see my problem???) :-)
Goal: Upgrade to Untangle 9.4.0 64-bit.

1. Backup 9.0.2
2. Upgrade all packages and plugins to latest (9.4.0)
3. Backup 9.4.0
4. Clean install of 9.4.0 64-bit
5. Restore backup from 9.4.0 32-bit upgrade

Another question I have, just because I'm curious... can you install 9.4.0 and restore using a backup from 9.0.2? I'm thinking this would be a bad idea since the plugins versions would not match and certain things could break. I'm fairly new to this community so any guidance is greatly appreciated.

ISP Static IP

joe43wv — Thu, 16 May 2013 12:55:44 GMT

I was working on a clients setup yesterday trying to setup a static IP so they have have VPN support. When I put the static ip on the router and connect it straight to the internet everything works. If I connect it to the untangle box nothing works. If I put the static ip on the WAN port on the untangle box nothing works.Here is my setup.

Cable modem
Untangle box
router

The router I am using is a Cisco RV180 VPN router. I have the router setup to handle the client VPN setup. When the untangle and router are setup as DHCP they pull 75.x.x.x from the ISP. The IP address we need to use is 208.x.x.x. I have the external port connected to the cable modem and the internal port setup to bridge to internal. What am I doing wrong?

High Ping times intermittently throughout the day

BadBoyHouse — Thu, 16 May 2013 11:24:15 GMT

We're getting high ping times when carrying out ping tests to various websites.

Normally a ping time would be <40 but intermittently and frequently throughout the day we're getting ping times of >700. Obviously web browsing slows down when the high ping times occur.

The Untangle attack blocker isn't shedding any light so far - scores of around 80 are about the highest.

We ran virus scans etc on all workstation and these all came up clear.

My suspicion is that there is a workstation that is either accessing a specific site (although popular video sites are blocked) and this is maintaining a connection to a site therefore causing the high ping.

The web filter doesn't show anything obvious and there aren't any workstations with excessively high bandwidth's.

The next step will probably be running a ping whilst the times are high and then unplugging network cables from one workstation at a time.

Has anyone else come across a problem like this?

IIS Logs

andrew50 — Wed, 15 May 2013 20:34:30 GMT

This is a minor issue that has been bugging me for a while...

My webserver is IIS and sits over on a separate DMZ interface. The DMZ interface is set up with a primary IP address of 192.168.5.1 and my web server is 192.168.5.20 with a NAT policy giving it an external IP.

When someone from my internal interface accesses a website IIS logs the IP as 192.168.5.1 instead of the user's LAN ip.

What do I have setup wrong?

Web Admin

andrew50 — Wed, 15 May 2013 20:00:44 GMT

Been having this issue a while...

Can't access the web admin using UT internal IP, but if I use the FQDN I have assigned to it the site always comes up. Seems like it will work right after restart once, but never twice.

Any pointers on where to start?

Windows DNS server errors, slow name resolution through Untangle

johndball — Wed, 15 May 2013 18:38:32 GMT

I've been using two Windows AD-integrated DNS servers for well over a year in my lab without issue. The primary DNS server forwards unresolved requests to OpenDNS' servers at 208.67.222.222 and 208.67.220.220.

I recently deployed a dedicated Untangle box in my lab in front of my DNS servers. I configured this Untangle box like I have done with so many other Untangle boxes to forward any DNS requests from my two DNS servers to ANY DNS server but block any DNS requests coming from any other computer on the internal network (to prevent bypassing OpenDNS' filtering by inputting a public DNS server on the local machine).

Up until this point there was no problem with name resolution but since deploying UT, I'm getting a lot of errors in my DNS servers' logs that are all pretty much "the DNS server received a bad packet from (OpenDNS IP). The header was an incorrect length". I'm also seeing really bad resolution times to the point it times out.

I'm almost certain this has something to do with UT seeing the problems only started once I deployed UT. I'm not seeing this in my work lab (same setup as my house but older UT version) and I'm not seeing this at a non-profit where I deployed UT (same setup but again, older UT version).