Filtering Internet access?

+PAX
Greetings all, and a Merry Christmas!
We're a small monastery. And due to this, we need to implement some Internet filtering. Unfortunately, it's not the basic kind of filtering. Frankly, I'm not sure that all of what we're looking to do can be done. But I'm at a loss about where I can look for this information.
At the moment, we've got a basic network, that you'd find a family home: DSL modem-router, a bunch of Ethernet hubs, and a whole bunch of cables.
The computers are mainly running Fedora Linux. There are 3 windows statioins, and 2 OS X stations.
The perfect solution is to be able to have 1 network, where there are 2 or 3 rooms where the Internet is accessible. And, those who have laptops, that they can bring their laptop to these rooms, and have Internet access, but NOT have access while connected to the network in other places. (Complicated, I know).
If that's not possible, ok. (Frankly, I don't think it is, but am very open to suggestions).
What really do need is to be able to allow an Internet connection, restrict bascially all web-surfing, while allowing e-mail, skype, and updates. The updates are my biggest problem. We already have a rule established on the modem-router that blocks surfing activity at night, but still allows e-mail and skype. Yet, this rule also blocks the apple AppStore updates.
So, I'm wondering if we get OSX server, would this help the situation? Where can I get more info about OSX server's filtering capabilities?
If we can't establish all the blocking that we need, then it'd be great if we could have some type of report of each person's activity.
Thanks for the help!

The original question AND ANSWER, is available here:
https://discussions.apple.com/message/24257220#24257220

Similar Messages

HT5413 Help filtering internet access

+PAX
Greetings all, and a Merry Christmas!
We're a small monastery. And due to this, we need to implement some Internet filtering. Unfortunately, it's not the basic kind of filtering. Frankly, I'm not sure that all of what we're looking to do can be done. But I'm at a loss about where I can look for this information.
At the moment, we've got a basic network, that you'd find a family home: DSL modem-router, a bunch of Ethernet hubs, and a whole bunch of cables.
The computers are mainly running Fedora Linux. There are 3 windows statioins, and 2 OS X stations.
The perfect solution is to be able to have 1 network, where there are 2 or 3 rooms where the Internet is accessible. And, those who have laptops, that they can bring their laptop to these rooms, and have Internet access, but NOT have access while connected to the network in other places. (Complicated, I know).
If that's not possible, ok. (Frankly, I don't think it is, but am very open to suggestions).
What really do need is to be able to allow an Internet connection, restrict bascially all web-surfing, while allowing e-mail, skype, and updates. The updates are my biggest problem. We already have a rule established on the modem-router that blocks surfing activity at night, but still allows e-mail and skype. Yet, this rule also blocks the apple AppStore updates.
So, I'm wondering if we get OSX server, would this help the situation? Where can I get more info about OSX server's filtering capabilities?
If we can't establish all the blocking that we need, then it'd be great if we could have some type of report of each person's activity.
Thanks for the help!

IMO, OS X Server won't be a good solution as a network filter. It might be useful here, but it very likely won't be your most appropriate choice as a network-gateway-router system.
FWIW, I'd suggest pursuing this in a Fedora-focused networking forum, in general. This given that's your most common platform.
Assuming wired networks, you can divide up the access via managed switches and a VLAN, or via physical network segmentation. WiFi is somewhat harder to segment, short of having a guest network and a private network; you'd need access points (APs) with two networks configured, one of which allows a little more access, and the other that's presumably restricted to the local IP address space.
There are gateway routers around which allow several different segments to be maintained, but they're generally starting in the ~US$250 range and upwards, and usually expect a little more knowledge of IP networking and related topics than the residential routers that are in common use.
Here is Apple's network port list.
As for the updates, OS X Server can cache those, as can the Reposado tool on a Fedora system.
A common solution involves a web proxy filter, where all connections must pass through that device. The connections used for the OS X Server or Reposado server itself to download updates would need to be programmed to allow access, but the other local OS X clients could be aimed at the local server. In your case, your filter can block all outbound connections to TCP 80 and TCP 443 entirely, save for the specified servers loading updates from their respective upstream sources.
Email is fairly easy, as you'll probably want to block outbound TCP 25, but allow POP via SSL and IMAP via SSL and allow the submission ports (TCP 486 and TCP 587).
Now for the somewhat bad news: these general approaches can often be bypassed using VPNs and tunnels, so somebody that's knowledgeable can generally get around simple-minded network filters. Which means you can end up blocking more than a little outbound traffic; more than TCP 80 and TCP 443.
Now for somewhat more bad news: Skype uses TCP 80 and TCP 443 (or requires a whole lot of open ports), and specifically to work around filters and blocks and firewalls and related "defenses". Whether you can get that to work by excepting the supernodes, I don't know.
I'd probably sort out what you do and do not want to allow access to as a more general problem, as getting an update server into a DMZ with exceptions enabled is a comparatively small problem — once you achieve the sorts of network blockages you're seeking. None of this stuff is particularly specific to OS X or OS X Server, either.
This configuration will probably involve installing a network gateway with internal filtering capabilities and a network nanny implementation, as well as some work on the internal network configuration. That may well be possible with Fedora, DD-WRT, Tomato or some other similar open source (it's likely best to ask for discussions and tradeoffs of those options elsewhere), and can be implemented with a commercial offering. Your needs here are probably even a little simpler in some ways, as you want and need just a few web connections.

Restrict wireless internet access on certain periods of time

Hello,
We need help on setting up a network with some restrictions for the attached clients.
We're quite new at setting up a network at this size.
Used devices:
1x SRP 540 router
1x SG 300-10P managed switch
4x AP 541N accesspoint
What we want to do:
1. Around 100 laptops and desktop computers need wireless internet access, but some of them on limited times during the day.
2. Not all wireless devices are allowed on using the wireless network.
3. There are also wired desktops that don't need restrictions.
4. We need the possibility to restrict most of the wireless devices to access certain websites or use certain applications on those computers to use internet access during the times that the computers are allowed to access the internet.
5. We want to restrict the clients for using torrents or other possibilities of downloading illegal content.
What we were able to do:
1. The accesspoints (AP 541N) are clustered to achieve 1 large wireless network.
2. Only mac-adresses that are listed in the accesspoints are capable of using the wireless network. Other mac-adresses are not allowed to use the accesspoints.
What we tried already:
1. adding the mac-adresses for the accesspoints to the list of "internet access policy" in the router. Internet access seemed still possible during periods the access wasn't supposed to be possible.
2. adding the mac-adresses from all clients in this internet access policy seemed useless. Only 10 Internet Access Policies seem to be possible to program. 8 mac-adresses per policy. Knowing there are (at least) two policies needed to restrict a group of 8 macs to access the internet in 24 hours (because blocking the internet from f.e. 22u in the evening to 6 in the morning is not possible because 6 is smaller than 22 - or 10PM).
Besides, after blocking internet access, we need also to write policies in blocking some websites or keywords.
Thanks already for your guidelines.
Wim

what about the thoughts of radius for authentication which is connected to active directory for your wireless users. Then have those people you must limit access too during the day in their own security group that's only allowed to login to the domain during certain times of the day.
To limit sites or what they can do on the Internet will require a separate solution for content/URL filtering. Then you can make policies and apply to your security groups in active directory block by category, keyword, and so on.
This is all great assuming you can get these clients into AD.
Just a quick thought, hope it helps.
_dschlicht
Sent from Cisco Technical Support iPad App

Cisco AnyConnect SSL VPN no split tunnel and no hairpinning internet access

Greetings,
I am looking to configure a Cisco ASA 5515X for Cisco AnyConnect Essentials SSL VPN where ALL SSL-VPN traffic is tunneled, no split tunneling or hairpinning on the outside interface. However users require internet access. I need to route traffic out the "trusted" or "inside" interface to another device that performs content-filtering and inspection which then egresses out to the internet from there. Typically this could be done using a route-map (which ASA's do not support) or with a VRF (again, not an option on the ASA). The default route points to the outside interface toward the internet.
Is there no other method to force all my SSL-VPN traffic out the inside interface toward LAN subnets as needed and have another default route point toward the filtering device?
OR
Am I forced to put the ASA behind the filtering device somehow?

Hi Jim,
You can use tunnel default route for vpn traffic:
ASA(config)# route inside 0.0.0.0 0.0.0.0 <inside hop> tunneled
configure mode commands/options:
<1-255> Distance metric for this route, default is 1
track Install route depending on tracked item
tunneled Enable the default tunnel gateway option, metric is set to 255
This route is applicable for only vpn traffic.
HTH,
Shetty

"No internet access" on Guest Wifi

We upgraded our router the other day, we made a backup as well as a txt copy of the config file for copying in various commands to the new router .
We have a Secure wifi for employees and a Guest wifi for visitors. We have a server doing the DHCP(10.27.131.8) for both the secure (10.27.131.0 network) and for the Guest (10.26.131.0 network). The Secure wifi is working as it should be - the Guest however is not. Visitors can connect and get a valid IP address from the 10.26.131.0 network but have no internet access. Everything else has stayed the same - no changes to the AP's.
Again we copied the config from the old to the new with a few minor changes but nothing that should effect the Guest wifi.
I did an ipconfig after connecting to the Guest Wifi and I can get a correct IP address 10.26.131.214, Default GW: 10.26.131.1.
I enclosed the config from my router is anybody could shed some light,
Thanks in advance.
Building configuration...
aaa new-model
aaa authentication login default line local
aaa authentication login vtymethod group tacacs+ line
aaa authentication login conmethod line
aaa authentication login httpmethod group tacacs+ local
aaa authentication enable default enable group tacacs+
aaa authentication ppp default none
aaa authorization config-commands
aaa authorization exec default local group tacacs+ none
aaa authorization commands 1 default group tacacs+ if-authenticated
aaa authorization commands 15 default group tacacs+ none
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 1 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
aaa accounting network default start-stop group tacacs+
aaa accounting system default start-stop group tacacs+
aaa session-id common
resource policy
ip subnet-zero
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 10.26.131.1 10.26.131.100
ip dhcp pool guest
   network 10.26.131.0 255.255.255.0
   dns-server 208.67.222.222 208.67.220.220
   default-router 10.26.131.1
   domain-name guest.X.xxx
interface Tunnel3
ip address 172.17.3.2 255.255.255.0
ip mtu 1400
ip tcp adjust-mss 1360
tunnel source 12.xx.xx.xx
tunnel destination 19x.xx.xx.xx
interface Tunnel55
ip address 192.168.66.10 255.255.255.0
ip accounting output-packets
ip accounting access-violations
ip mtu 1400
ip tcp adjust-mss 1360
tunnel source 12.xx.xx.xx
tunnel destination 12.xx.xx.xx
interface FastEthernet0/0
ip address 12.xx.xx.xx 255.255.255.248
ip nat outside
ip route-cache flow
duplex auto
speed auto
service-policy output physical
interface FastEthernet0/1
description CONNECTION TO SW3
no ip address
duplex auto
speed auto
service-policy output physical
interface FastEthernet0/1.1
description LAN
encapsulation dot1Q 1 native
ip address 10.27.131.254 255.255.255.0
ip flow ingress
ip flow egress
ip nat inside
no snmp trap link-status
interface FastEthernet0/1.20
description GUEST NETWORK
encapsulation dot1Q 20
ip address 10.26.131.1 255.255.255.0
ip access-group 101 in
ip helper-address 10.27.131.8
no snmp trap link-status
interface FastEthernet0/1.200
description Phone VLAN
encapsulation dot1Q 200
ip address 10.5.2.254 255.255.255.0
no snmp trap link-status
interface Serial0/0/0
no ip address
shutdown
interface Serial0/2/0
no ip address
shutdown
interface Serial0/3/0
no ip address
shutdown
ip classless
ip route 0.0.0.0 0.0.0.0 12.xx.xx.xx
ip route 10.5.5.0 255.255.255.0 10.5.2.1
ip route 10.10.0.0 255.255.255.0 172.17.3.5
ip route 10.10.200.0 255.255.255.0 172.17.3.5
ip route 10.25.131.0 255.255.255.0 192.168.66.20
ip route 10.27.129.0 255.255.255.0 172.17.3.5
ip route 10.27.130.0 255.255.255.0 172.17.3.5
ip route 140.xx.xx.xx 255.255.0.0 172.17.3.5
ip route 192.168.2.0 255.255.254.0 172.17.3.5
ip route 192.168.99.0 255.255.255.0 172.17.3.5
ip http server
ip http authentication local
ip http secure-server
ip nat inside source list 2 interface FastEthernet0/0 overload
access-list 2 permit 10.27.131.0 0.0.0.255
access-list 2 permit 10.25.131.0 0.0.0.255
access-list 2 permit 192.168.66.0 0.0.0.255
access-list 2 permit 10.14.0.0 0.0.0.255
access-list 2 permit 10.5.5.0 0.0.0.255
access-list 2 permit 10.5.2.0 0.0.0.255
access-list 5 deny   10.27.131.123
access-list 5 permit 192.168.2.0 0.0.0.255
access-list 5 permit 10.27.131.0 0.0.0.255
access-list 5 permit any
access-list 101 permit tcp any host 10.27.131.8 eq 67
access-list 101 permit udp any host 10.27.131.8 eq bootps
access-list 101 permit ip 10.26.131.0 0.0.0.255 host 10.14.0.6
access-list 101 deny   ip 10.26.131.0 0.0.0.255 10.0.0.0 0.255.255.255
access-list 101 deny   ip 10.26.131.0 0.0.0.255 172.16.0.0 0.15.255.255
access-list 101 deny   ip 10.26.131.0 0.0.0.255 192.168.0.0 0.0.255.255
access-list 101 deny   icmp 10.26.131.0 0.0.0.255 172.16.0.0 0.15.255.255
access-list 101 deny   icmp 10.26.131.0 0.0.0.255 10.0.0.0 0.255.255.255
access-list 101 deny   icmp 10.26.131.0 0.0.0.255 192.168.0.0 0.0.255.255
access-list 101 permit ip 10.26.131.0 0.0.0.255 any
access-list 102 permit icmp 10.25.131.0 0.0.0.255 any
access-list 102 permit ip 192.168.66.0 0.0.0.255 any
access-list 102 permit ip 10.25.131.0 0.0.0.255 any
access-list 102 permit ip 10.27.131.0 0.0.0.255 any

Hi,
I also apologize for my late answer.
I appears your ACL 101 that filters traffic entering the Fa0/1.20 is not correctly written to allow DHCP requests to be processed by the router. The attempt has been made - but it is not correct. In particular, check out the second entry in the ACL 101:
access-list 101 permit udp any host 10.27.131.8 eq bootps
It allows all DHCP messages that are already targeted to 10.27.131.8, the DHCP server. However, such targeted DHCP messages may be used by clients only after they know who the DHCP server is in the first place. Until then, the requests are targeted to 255.255.255.255 and sourced from 0.0.0.0. Such packets are not allowed by any entry in the ACL 101 and are therefore dropped even before the DHCP Relay Agent can process them. That would explain why your clients actually cannot obtain IP address via DHCP in VLAN 20.
We need to add the following entry immediately before or after the existing second entry in the ACL 101:
access-list 101 permit udp any host 255.255.255.255 eq bootps
You may accomplish this by the following sequence of commands directly pasted into the global configuration:
ip access-list resequence 101 10 10
ip access-list extended 101
15 permit udp any host 255.255.255.255 eq bootps
end
The first line will cause the individual entries of the ACL 101 to be internally numbered, starting with the sequence number 10 and incrementing by 10 for each subsequent entry. The second line enters the ACL 101, treating it as a named ACL, allowing us to use the extended editing features. Finally, the third line starting with the sequence number 15 will cause the entry to be added between the existing first (seq no 10) and second (seq no 20) entry. It must be entered including the sequence number, otherwise the line will be added at the end of the ACL.
Would you mind trying out this modification? The former corrections with the NAT I have described earlier must be applied as well.
Best regards,
Peter

Photosmart 7510 web services and efax no internet access

I finally got around to setting up my printer to work wirelessly. Everything seems to be working ok on the home network. I was also able to use the ePrint app on my iPad to print. But...when I select a web service or try to register for efax it tells me the printer does not have internet access. I did a quick check on my printer to give the printer a static IP to reduce problems later. I didn't see any issues with connectivity but may not have known what to look for. I'm not to concerned about the the web service apps but do want to get the efax working. According to the network configuration page I printed, the printer is connected, infrastructure mode, has an IP, and I'm not using MAC filtering. So any help would be greatly appreciated.

Hello @BM84 ,
Welcome to the HP forums.
I understand that you are getting an error message from your Photosmart 7510.
I would like to help.
For the web services portion, you could try setting a manual DNS.
I find Googles DNS works well with the printers.
Primary: 8.8.8.8
Secondary 8.8.4.4
The following post by happytohelp01 has the steps to set this up with pictures,
Efax 7510 still won't work after turning off/on ePrint several times
If you still can not get the eFax to work, please check the following post by PrintApper.
eFax users - please read
Please call our Cloud Services at 855-785-2777.
If you live outside the US/Canada Region, please click the link below to get the support number for your region. http://www8.hp.com/us/en/contact-hp/ww-phone-assist.html
Hours:
Mon-Fri. 8am - 11pm, Sat. 9am-8pm - EST
Mon-Fri. 7am - 10pm, Sat. 8am-7pm - CST
Mon-Fri. 6am - 9pm, Sat. 7am-6pm - MST
Mon-Fri. 5am - 8pm, Sat. 6am-5pm - PST
Aardvark1
I work on behalf of HP
Please click “Accept as Solution ” if you feel my post solved your issue, it will help others find the solution.
Click the “Kudos Thumbs Up" on the right to say “Thanks” for helping!

Having issues with WRT350n - "No internet Access"

I am having issues with the WRT350n where I am getting an "No internet access" message. When I look at the wireless network connection I can see the wireless router and it says "connected" but when I scroll my mouse over the icon, it reads "No internet access". I try to access a webpage and it will not work. I originally had it connected and working properly in my home. However, I removed it and tried connecting in my office and started experiencing this problem. I did not run the setup using the CD provided. I just unplugged it from my home network and reconnected it to my office network, of course with a few passphrase changes and wireless MAC filters only allowing certain PC's to be able to access the internet. I double checked all MAC addresses of each device that I entered into the table and they are correct. All devices see the wireless network but cannot access the internet. Any suggestions? Should I re-run the installation using the CD?

A router once it is powered on it will always broadcast a wifi signal and will allow you to connect to the network with or without the internet connection. Once of the best way to know if the router is working ok, wire a computer directly to the router with a cable and check if you are able to go online that way. if it is working then better check that wireless mac filter, disable it first, then see if the internet will go thru. If wired to the router it is not working, then better run that setup cd again.

WRT54GS Internet Access Restriction Policies

I am finding it challenging to correctly define Internet Access Restriction
policies on my Linksys WRT54GSv4 wireless router. Documentation does not
describe multiple policies being enabled. I think that multiple policies
should be from most restrictive to least, but I am not sure.
I wish to deny Internet access from my child's WII and PSP from 10:30 PM to
6:30 AM. Also, I want to filter all hosts for blocked words and blocked
sites.
Currently, I have three policies:
1) Child_Evening --
WII and PSP MAC Filter
10:30 PM to 11:55 PM
Deny
2) Child_Night --
WII and PSP MAC Filter
12:00 AM to 6:30 AM
Deny
3) SiteWord --
IP Range 192.168.1.2 - 254
Block Various Sites
Block Various Words
I would like input as to the correct use of multiple Internet Access
Restriction policies

create an Internet Access Policy:1. Internet access Policy - 1
2. Enable.
3. Child Access(Name of the policy)
4. Deny range 192.169.1.252
5. 10:30 PM to 11:55 PM - Everyday
6. Blocked Services - All
7. Port Range Start - 1 ; End - 61000
8.Save Settings
9.Rebooting....
You deny all access through by all services to any sites.
Create the same policy with different number and name to deny access from 12:00 AM to 6:300 AM..
Url Filtering Policy to deny adult sites, they're too much with different url address.You can deny most of them,but not all.
Good Luck!!!!!
Message Edited by gochev_george on 03-16-200702:47 AM
Message Edited by gochev_george on 03-16-200702:54 AM
Thanks
Kind Regards
ing.George Gochev
DSL and Telecommunications Engineer

Guest Internet access in the Enterprise

We have set up guest internet access in our enterprise using GRE tunneling with a PIX. I'm trying to determine the best way to do authentication for users on this guest network.
I think I can do RADIUS (using ACS) with the PIX as an NAS. Question is can I use a different type of server (such as MS IAS)? Can I use either one to utilize an existing MS Active Directory database?
If I use radius on the pix for authentication, a login prompt pops up when a user tries to use the web. Is there a way to redirect users to a web page first and have the login embedded on the page? This is done in hotels now and I don't know if there's a Cisco solution for this.

The following documents lists all the supported Databases,
http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/acs33/user/d.htm

JetPack 4G LTE connects but "no internet access" message

Would appreciate any help.
My JetPack 4G LTE mi-fi connects to the internet (3G or 4G) and shows that my devices are connected to it. However, I cannot get on the internet.
1) I have three different devices - two laptops and a smartphone. All three have the same problem.
2) I have a Sprint Mi-Fi that I use for a different business. All three devices can and do connect to that device and work properly on the internet during the same sessions in which they cannot connect on the Verizon JetPack. So it is not the devices I am trying to connect with.
3) The exact same thing has happened several times over the course of about 4 days and in two cities and two states - all three devices unable to connect via JetPack but connect fine through Sprint Mi-Fi. So it is not location or local network issue.
4) LED display on JetPack, in all instances, show a strong 3G or 4G (depending on where I am) signal and also that all three devices are connected.
5) Message on laptop wireless area shows connection but says "no internet access".
6) Under the wireless status or details, it says (on the list of info): "IPv4 no internet access" and "IPv6 no internet access".
7) I have done a battery pull with no effect.
8) I have done a factory reset (power up, remove cover, press reset button until long green light and short green light) with no effect.
9) After both battery pull and factory reset, I still show connected to 3G, all three devices connected, no internet access, and all three devices then work on the Sprint mi-fi.
10) Symptoms started about 4 days ago and have not changed since - it is not a come-and-go problem. It is not working at any time.
I am hoping to gosh to avoid a long ordeal with tech-support at Verizon. This is a company-issued device, so I could ask my company to take it up with Verizon, but I work remotely and access to the IT department is not that simple either. thought I would see if I am missing something simple. I hope I've given enough info for someone brighter than myself here can spot something I could do.
Thanks in advance for any help.

Thank you for your response. I am having trouble logging back into this site to respond (I never created a User ID and don't know my cell phone number as it is a mi-fi and not a cell). I reregisterd for the forums only under a slight ID variation and will continue to do so for this dialog. Thanks very much.
The back of the Jetpack says SSID: "MiFI4620L Jetpack 89B4". I am currently using the device (since the problems began last week) in zip codes 49504 and 49503 - same symptom both places.
Thanks again.

Internet access problems and viewing video on internet

I have very limited interet access most of the time. I get a message: "You are not currently in an area that can handle data communication. ..." I have no problem with email and other features of the phone during this time. The signal at the top of my phone says "GSM". When I am able access the internet, it give me a different signal (can't remember what that is, however). Even then, I cannot view most video clips, such as YouTube clips. They will not load all the way. It states, "Error has occurred in attempting to play media." Help!

I have unlimited internet access, so that's not the problem. Right when I got the phone, I replaced the original data card with a 4G card and enabled mass storage. I have (since my first post) had more access capability by enabling the WiFi (da) which finds my wireless connection at home. I've also been able to view a video clip, not successfully all the way through, however. During viewing, the phone appears to crash, i.e. the screen goes white and then it takes 3-5 minutes for it to reboot. This has also happened when the phone has not even been being used. Also, as I was surfing the net, the phone asked if I wanted to enable Javascript which I did. Is there anything else that I need to enable or do to the phone in order to have a more pleasant experience using the internet and viewing video clips?

Internet Access to Portal located in DMZ

I've seen questions on the forum regarding gaing Internet access to the Oracle Portal located in the DMZ. This answer does not resolve the issue of having multple DADs to access your portal like abc.com and xyz.com. For that see note:162044.1 on metalink. http://metalink.oracle.com.
If you registered a domain name e.g. abc.com and have the portal up and running in the DMZ. Your local network should be accessing the portal just fine. Your computer name for example is portal. The URL translates into http://portal.abc.com. You opened the ports in the DMZ to allow access and wonder why you get partial portal pages, no login, etc. It's becase users can't resolve the DNS entry for portal.abc.com. Call your ISP and get an "A Record" entry. After a few hours and propogation of the A Record, users on the Internet can successfuly access your site. This A Record should be free.
Good luck
Kellan

Hi,
You've to open the ITS for internet for accessing things from Portal too. As I've told you in previous post, the request goes directly to ITS server (http://itsserver.com/scripts..) and not as (http://myportal.com/scripts..). The idea of having it via Portal will be to mask the URL of ITS , which will not be visible (except for time you click on iview which will display in status bar). In any case, you can directly acces ITS as what you've told, however you give the proxy.
Regards,
Siva
P.S: Award points if you find this useful.

Is it possible to be connected with a 3G modem for internet access and a WiFi router for printer sharing at the same time?

For our only internet access we have a 3G wireless modem. I have since purchased a WiFi printer and router to connect all the comptuters to in the house. The PCs have no problem with using both the 3G connection and the WiFi signal at the same time to print, however, the MacBook Pro will not connect to the 3G network and the router, it will drop the internet access from the modem and attempt to connect via WiFi (which has no internet access). Is there a solution that is available to remedy this? I attempted to create an adhoc printer network, however, the macbooks again will not print off of this, only the PCs. And I'm getting a bit frustrated overall with this.

The 3G wireless modem is on one of the PC's correct?
Why don't you pass the Internet through the Ethernet port to the router via Cat5 cable, then have that transmit a Wifi signal that everything else can use, then connect the printer to the router for print sharing?
You would have to turn off the wifi on the comptuer with the 3G modem as it's physically connected to the router and can't connect to the other machines as they are all connected to the router for sharing.
The Mac has the ability to pass, Internet Sharing in the System Preferences.
Do you have software for the Mac to run the 3G modem?

Safari and firefox stop working after a few minutes of browsing, regardless of what site I'm on. I have to restart my computer to get internet access again but it only works for a few more minutes, then I have to restart again. Please help!

Safari and firefox stop working after a few minutes of browsing, regardless of what site I'm on. I have to restart my computer to get internet access again but it only works for a few more minutes, then I have to restart again. I don't get a spinning ball, it just stops working at whatever page it's on. I can close the program just fine but when I re-open it, either safari or firefox, it freezes trying to load the hompage. This started a few days ago after trying to stream a movie on my computer. I'm on a Mac Air OS X Version 10.6.8 and have downloaded all updates. When I go into finder, it says I have over 80 gigs available. Is there some other memory cache that I need to check? Thanks so much for your help.

ejwoodall wrote:
It's not a router problem as I explained in my post. If it was a router problem then I wouldn't have the problem everywhere I go. It is an issue with the software.
Then I guess the millions of people running 10.5.7 with no issues are just hallucinating that their machines are working fine?
I'm not trying to belittle your issues; you're certainly having them and I know first hand how annoying an intermittent AirPort issue can be. (In fact, mine was due to an AirPort driver bug that no one else seemed to suffer from.)
The single best diagnostic you could do is take your system running 10.5.7 to an Apple Store, and try using their in-store network.
If your machine performs flawlessly, it may be a router issue.
If your machine has connectivity issues there, it may be a hardware problem with your machine.
There have been numerous people in multiple threads over the years who swore that an update was buggy because things used to work, but returned later to sheepishly admit that they took their machine in, a problem was found and fixed, and now their Mac works flawlessly with the newer software.
But simply reinstalling 10.5.5 in no way means the explanation of how firmware bugs may be at play here is incorrect.
In the context of that explanation, all you've done is possibly reinstall software that asks to add "2 + 3."

Wireless internet access issues

Hi All,
Now that I have the back up battery issue resolved and my mac works again, need some help with my airport connectivity.
I have a circa 2000 Imac DV, using OS 9.1. I just purchased and installed an airport card. I used to use dial up internet access and am now trying to access the internet via my Verizon wireless DSL. The little telephone icon appears on the tool bar. Is this correct?
The computer won't recognize my secure WEP DSL password and seems to try to access the internet via the PPP connection.
I have a secure WEP internet connection. Just a few days ago a friend of mine was able to access the internet from my DSL via her new powerbook. Her computer accepted my WEP password.
Do I need to make any system configuration changes to turn off the PPP connectivity to use my airport card?
Thanks, Ken

kweiss66, Welcome to the discussion area!
You are in completely the wrong discussion area. You need to post your question in the iMac CRT (G3) discussion area.

Filtering Internet access?

Similar Messages

Maybe you are looking for