Will BdrMgr do this?
John Ratzlaff
about it. I'm using Iware (a defunct IP-to-IPX gateway product) which
provides me with 3 vital services: 1) it allows me to grant or restrict
access to the Web by Netware group or user; 2) it allows me to block IP
addresses by group or user; and 3) it keeps a log of all IP addresses
visited by user and time. Does BdrMgr supply all these functions? If so,
how? What I mean is, does it supply its own Winsock.dll (as does Iware)
and if so, does it require the use of Client32 no later than v 2.2 (as
does Iware)? Thanks for any help. - JR
Joe Guenther
> In addition to this, BM can also give you the possibility to take
> advance of the proxy caching features, to speed up the internet
> connection, BUT these features are limited when used in association to
> the IPX/IP gateway.
>
We have used BM 2.1 on NW4.11 and the IPX/IP gateway for Internet until now.
I am now in the process of doig a new BM server with BM3.5. Should we then
drop the IP Gateway from our clients?
1) How do we then access the Internet? Set the gateway in IE to point to
the private IP address of the BM server?
2) will the BM logs still remain ... logging every site visited by whom,
when ... The logging issue is VERY important for us as a school. It was my
impression that we need to keep the IP gateway in order to maintain the
logging capability. If we can log with out the IP gateway - great. But we
must!! be able to see who visited what on the Internet.
thanks
--
Joe Guenther
<>< <>< <>< <><
Network Administrator
Black Forest Academy - GERMANY
CSL
Hi Joe,
> We have used BM 2.1 on NW4.11 and the IPX/IP gateway for Internet until now.
> I am now in the process of doig a new BM server with BM3.5. Should we then
> drop the IP Gateway from our clients?
It is strongly recommended that you drop the gateway.
> 1) How do we then access the Internet? Set the gateway in IE to point to
> the private IP address of the BM server?
If you have a single segment LAN, yes.
In other words, in control panel, network, tcpip properties you will have to
configure the default gateway and the DNS information.
Your browser can be configured to use the private IP address of the BM server as
proxy IP address and port 8080.
> 2) will the BM logs still remain ... logging every site visited by whom,
> when ... The logging issue is VERY important for us as a school. It was my
> impression that we need to keep the IP gateway in order to maintain the
> logging capability. If we can log with out the IP gateway - great. But we
> must!! be able to see who visited what on the Internet.
you can still have logging and you can restrict the access even further.
This is what you will need to have:
- set the default packet filters by loading brdcfg and secure the public
interface (ONLY). This will prevent your users from bypassing the security by
just accessing directly the internet
- configure the HTTP proxy with authentication. If your users are all using
NEtware clients you will be able to have them seamlessly authenticate to the
proxy by just running the clntrust.exe program during the login script.
- enable access rules.
- configure the browsers to use the HTTP proxy of BM.
That's it.
I recommend that you set up a test BM3.5 server and play with it for a while.
BM3.x is substantially different from BM2.1.
--
Cat
Novell Support Connection Volunteer