Re: Is there anybody out there?

BTW Schuyler,

I noticed in some comments that you mention an exception about Windows
Update ... And that it is "broken".  Do you remember what the issues was
that Windows Update was causing, and why you had to write the exception??

# Redirect outbound non-auth web traffic to the local gateway process
# except to windowsupdate.microsoft.com, which is broken.
#
# If MembersOnly is active, then redirect public class as well
#
if [ "$MembersOnly" ]; then
    nonauth="3 4"
else
    nonauth="4"
fi
for port in 80 443; do
    for mark in $nonauth; do
	$redirect -m mark --mark $mark -d windowsupdate.microsoft.com -j
DROP
	$redirect -m mark --mark $mark -p tcp --dport $port  -j REDIRECT \
	    --to-port $GatewayPort
    done
done 

I am trying to track down how I am seeing these computers that have "broken"
through the gateway, and am often seeing numerous "attacks" by various
update services ... Symantec, MacAfee, etc. ... Where they are hammering the
gateway with requests over and over for long periods.

What I end up with is a iptables rule that appears as "half" of the access
permit pair ... Only the NoCat_Inbound rule is there ... But it allows them
to use the Internet somehow.  When I run the access deny command, I get an
error that the NoCat rule doesn't exist ...

Curious ...

And I'll still get in contact this next week to see what we can do!

Thanks!



Scott C. Lemon
 
 

-----Original Message-----
From: [email protected] [mailto:[email protected]]
On Behalf Of Schuyler Erle
Sent: Tuesday, October 14, 2008 12:02 PM
To: Scott C. Lemon
Cc: [email protected]
Subject: Re: [NoCat] Is there anybody out there?

I just want to say for the record that I've been trying to find a maintainer
for this project for years, because I'm no longer seriously involved in
community wireless myself but I know that enough others still are.

Several individuals have volunteered to take over maintenance and then
failed to follow up. If anyone on this list is serious about it (I'm looking
at you, Scott ;) then please contact me.  Thanks!

SDE

* On 13-Oct-2008 at 10:55PM PDT, Scott C. Lemon said:
> I'm curious ... is there anyone still out there using/working on Nocat?
>  
> I've been running the system for years, and have recently been fixing 
> a few bugs and making some changes.  Was curious if anyone was still 
> working with it ... interested in the fixes or changes ...
>  
>  
> Scott C. Lemon
>  
>  
>  
> _______________________________________________
> NoCat mailing list
> [email protected]
> http://lists.nocat.net/mailman/listinfo/nocat

_______________________________________________
NoCat mailing list
[email protected]
http://lists.nocat.net/mailman/listinfo/nocat