Block Page

[dwasserman]

The block page must be come from the internal 192.168.2.2 interface.
Do you have double NATing? Westell router and Untangle
Can you post the ipconfig/all frome some workstation?

[dmorris]

I don't think you want to manually override the public IP like that.
I'd set it back to the default.
I'm not sure if that is the issue though.

dwasserman is right - the block page should be coming from 192.168.2.2 - are you hitting a blocked site from behind the internal interface?

[rcafferky]

The block page must be come from the internal 192.168.2.2 interface.
Do you have double NATing? Westell router and Untangle
Can you post the ipconfig/all frome some workstation?

I would suspect that the westell router is providing NAT. I left the DHCP server on for the westell, but turned off the firewall, but the DMZ to static 192.168.1.7 (which is the external interface).. Maybe I need to turn off NAT somehow on my westell, or just disable the dhcp server on the westell router..

I will post an ipconfig /all setting when I'm home from work.

[rcafferky]

I don't think you want to manually override the public IP like that.
I'd set it back to the default.
I'm not sure if that is the issue though.

dwasserman is right - the block page should be coming from 192.168.2.2 - are you hitting a blocked site from behind the internal interface?

Okay, that makes sense. Weird how the block page is coming from the external interface.

Block site from behind the internal interface? I don't know what else I would have behind the internal interface except for the switch.. All my clients are connected to the switch which then is connected to the internal interface...

[dmorris]

I would suspect that the westell router is providing NAT. I left the DHCP server on for the westell, but turned off the firewall, but the DMZ to static 192.168.1.7 (which is the external interface).. Maybe I need to turn off NAT somehow on my westell, or just disable the dhcp server on the westell router..

Personally, I'd just install untangle as a bridge and let the westell do NAT.
Or remove westell entirely if that is an option.

Doing double NAT is gonna be a pain in many aspects. Just wait until you start doing port forwards.

[rcafferky]

Personally, I'd just install untangle as a bridge and let the westell do NAT.
Or remove westell entirely if that is an option.

Doing double NAT is gonna be a pain in many aspects. Just wait until you start doing port forwards.

Unfortunately, I cannot remove the Westell router because I have FiOS. (There is a way to tweak the router for a bridge mode, but sounds like I can just turn the untangle to a bridge?

Which aspect in my network do I need to change in order for the untangle to become a bridge? Also, when I make this change, which device will handle DHCP? Untangle or the westell router?

For some reason, I thought the current configuration I have was a bridge setup.. But it's set up this way through the wizard...

[sky-knight]

You can have either an Untangle bridge or the router do DHCP. Most prefer the router doing that work, but it really doesn't matter you can move that service to any device on the segment.

Here's the strange thing... you show two IPs which means "router". Yet you really should use a bridge. In a bridge configuration the block page will come from the external IP because there IS NO internal IP.

[rcafferky]

You can have either an Untangle bridge or the router do DHCP. Most prefer the router doing that work, but it really doesn't matter you can move that service to any device on the segment.

Here's the strange thing... you show two IPs which means "router". Yet you really should use a bridge. In a bridge configuration the block page will come from the external IP because there IS NO internal IP.

Okay, just so I have this straight... Dwasserman is saying that the internal interface should be blocking in the router configuration.. But when the untangle server is set up as a bridge, the external obviously would do it. .

Can you point me in the right direction to re-configure my current untangle server into a bridge? Double NAT sucks..

[rcafferky]

Sorry, I think I need to try stuff first before blabbering my mouth..

Is this all i need to configure to set my untangle server as a bridge?




Uploaded with ImageShack.us

[dwasserman]

yes, but, you need to reconfigure your internal lan ip address also.
In external Untangle put fixed ip to 192.168.1.2, dg to 1.7
Internal to bridge
And all internal lan in the range 192.168.1.20 to 50 for example