Warning Potential Route Subnet Conflict

[docdom]

Is there a place that I can go that recommends tried and proven hardware to use to build an Untangle box? The specs in the first post of this thread are what I built my current test box with from spare parts I had lying around in my office.

I just purchased (2) of each parts listed below (except NICS) to build 2 Untangle boxes for my companys Main and Satelite offices to be installed between the ISP Modem and internal networks to handle all routing, Site to Site VPN, spyware blocking, ad blocking, antivirus, firewall. I will be installing Untangle Standard Pay for 1-150 users on the Main Office Untangle box.

Intel Core i3-2100 Sandy Bridge Dual Core CPU
Intel BOXDH77KC LGA 1155 Motherboard
Wester Digital RE4 250GB SATAII Enterprise Hard Drive
G.Skill 4GB (2x2GB) DDR3-1333 Memory Kit
Corsair TX650 80 Plus Bronze Power Supply
(4) Intel Gigabit CT PCI Express NICS

Thoughts, feedback, comments??

I know some of the hardware is overkill...

[dbunyard]

There is this but it's not overly maintained: http://wiki.untangle.com/index.php/H...atibility_List

Your best bet if you want something that's proven is check out one of the re-sellers like Rob (sky-night) or simply buy the box directly from Untangle.

I'm curious though what are your internet connection speeds at each office and how many users at each? That's a huge factor in determining the hardware requirements.

Otherwise though I don't see any issues. Intel stuff is rock solid for the most part.

[docdom]

Thanks.

I have Comcast 30/30 mbps Business class at both locations with static IP at both sites. Can increase that up to 150 mbps if need be.

I have 30 employees at the Main office and I have 5 employees at the satelite office which is where the second Untangle box will go for site to site vpn.

Most important reason I'm doing this is to install our property management client software directly on their workstations which will access our SQL database through the VPN running on Server 2008 at my Main office. Also need them to access a shared drive on the Server 2008 system.

Right now I have all my offsite employees accessing our property management software through RDP.

Works fine but would rather have a VPN for my satelite office with direct access to the company network. I could then eliminate the Server 2008 R2 at the satellite office and convert that to a storage server to be installed at the main office.

Thoughts? See any problems with doing that?


Sent from my PC36100 using Tapatalk 2

[dbunyard]

You should be good to go then, I don't see any issues with your builds. I would probably go ahead and install the 64bit version of Untangle just so you can upgrade the RAM later if needed and not have to re-install.

Any plans to do SPAM blocking on the boxes?

[docdom]

Just understood your request for user data above so I edited my above reply, see above regarding main office users. Still ok?

Yes, spam is a big problem and will be using Spam Blocker. I'm running Spam blocker Lite on my Untangle test box now.

Where can I get x64 version? Didn't notice a choice for x86 and x64 version when I d/l Untangle. Or is x64 for pay version only?

Sent from my PC36100 using Tapatalk 2

[dbunyard]

You still look good. That hardware should be more than sufficient. This is good as it gives you room to grow.

SPAM blocking does add quite a bit of overhead but with only 30 users I don't think you will have an issue with that and the boxes you are building.

You can get the x64 version from SourceForge: http://sourceforge.net/projects/unta...8Cruiser.1%29/

[docdom]

Now that I think about it, spam blocking will be for 45-50 users because I have 15-20 offsite employees using Outlook on my main office Server through RDP. Those emails would be filtered through the Untangle box.

Thanks for the x64 link, I will be sure to install it on the new boxes.

Do you know how to require a password for the VPN client on the remote PC to connect? I right clicked the OpenVPN icon in the taskbar and select Change Password and enter a password in New and Repeat fields then save and get a SSL fatal error pop up then I click ok and VPN client closes...

Don't want unathorized user connecting to VPN if one of my employees walked away from their workstation or a janitor cleaning office after hours attempted to login. Would feel much better having the VPN client password protected to connect to main office.

Sent from my PC36100 using Tapatalk 2

[dbunyard]

You still won't have a problem I don't think.

As for the password there currently isn't a way. The OpenVPN deployment on Untangle is strictly certificate based. There are a few "hacks" on this but these are not supported and are likely to break on upgrade. I swear there was a feature request open on this topic but I can't seem to find it.

[docdom]

Thanks, will just have ensure employees are logging off Windows or locking workstation when not in use

Sent from my Transformer Prime TF201 using Tapatalk 2

[dbunyard]

[Windows key]+L