Restricting site or redirect people who acces a site

Is there any posibility in ClearOS to block some certain websites like facebook ? i mean in this https:// . http:// , facebook.com , facebook.eu , facebook.net and other links that use facebook ?


Or second posbility when someone acces an certain site like http://facebook.com to be automaticaly redirected to other website page were i put ... ?


I mean if i try to enter to facebook.com to be redirected automaticaly to restrictedfacebook.com as example . Is there any posbility ? and how ?

I did fixed like this ...

are 2 things need to be done :

1) to add 3 DNS - 2 of your local provider and another one of Google DNS : 8.8.8.8
2) On the server side : /etc/ppp/ edit the file named : ip-up - example nano /etc/ppp/ip-up and

You add after [ -x /etc/ppp/ip-up.local ] && /etc/ppp/ip-up.local "$@" the /sbin/ifconfig $REALDEVICE mtu 1500 like this down below :



********************************************************************************

[ -x /etc/ppp/ip-up.local ] && /etc/ppp/ip-up.local "$@"

/sbin/ifconfig $REALDEVICE mtu 1500

exit 0

********************************************************************************

Can you test using Clearos 6? or if you wana i can give you acces to my vpn to see why and what happens .

I have i can not understand how wit Clear OS 5 work very well , and wit the Clear OS 6 and Clear os 7 not working ) .


When i am conected i can not view certain websites , witout vpn i can view them ... and wit both vpn or not i can ping , and trecert ...

Were exactly to add that ? Can you give me a more detail to test right now . I am still trying to fix this issue but until now wit no luck .

BUG Clear OS 6 and 7 ...

I did test both of them Clearos 6 and Clearos 7 and the bug and problem it is like this :


If you will conect to VPN PPTP and try to browse some certain websites like: mail.yahoo.com , speedtest.net and a couple of more websites , The websites does not load , simply do not load at all .

I can ping and tracert successfully to the websites but the browser does not load them or produce an error. Ping work , tracert work and even trafic i see it work but page still does not load .


I did try to use the YAHOO DNS , the GOOGLE DNS , and even the provider DNS , still nothing work ... I did change the network ip's to many diferent configurations still nothing fixed this


After a couple of testing i have seen an strage setting about the mtu value wich it is 1400 ...

Does anybody have seen the bug , and did fix it somehow ? I am very shure it is something from the MTU of server side , since witout VPN work all pages and load , and wit the VPN connected does not load , but ping and tracert work ...


So the problem and bug it is the value MTU , but i do not know how to change inside the VPN this setting . It is required : Put that before exit 0 in IPUP. /etc/ppp/ip-up for me.

[root@srv ~]# ifconfig | grep flags -A 1
enp2s0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 5.2.134.213 netmask 255.255.252.0 broadcast 5.2.135.255
--
enp3s0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.2.254 netmask 255.255.252.0 broadcast 192.168.3.255
--
lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
--
pptp0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1396
inet 192.168.2.1 netmask 255.255.255.255 destination 192.168.2.50
--
tun0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1500
inet 10.8.0.1 netmask 255.255.255.255 destination 10.8.0.2
--
tun1: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1500
inet 10.8.10.1 netmask 255.255.255.255 destination 10.8.10.2
[root@srv ~]#

Nick Howitt wrote:

Looks like the ifconfig output has changed in 7.x. Try:<code>ifconfig | grep flags -A 1</code>Also the contents of /etc/clearos/network.conf.

[root@srv ~]# ifconfig | egrep 'Link|Mask'
[root@srv ~]#

Nothing to display .

On the VPN :

Ethernet adapter Ethernet:

Connection-specific DNS Suffix . : srv.consolight.ro
Link-local IPv6 Address . . . . . : fe80::30da:83e1:a3c4:9623%19
IPv4 Address. . . . . . . . . . . : 192.168.0.239
Subnet Mask . . . . . . . . . . . : 255.255.252.0
Default Gateway . . . . . . . . . : 192.168.2.254

PPP adapter VPN Connection Consolight:

Connection-specific DNS Suffix . : srv.consolight.ro
IPv4 Address. . . . . . . . . . . : 192.168.2.50
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . : 0.0.0.0

Nick Howitt wrote:

What is the output of:
<code>ifconfig | egrep 'Link|Mask'</code>

Form your VPN client PC, what is the output of "ipconfig"?

I am very shure it is of the VPN configuration since :

PPP adapter VPN Connection Consolight:

Connection-specific DNS Suffix . : srv.consolight.ro
IPv4 Address. . . . . . . . . . . : 192.168.2.50
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . : 0.0.0.0


Subnet Mask it is wrong , and the Gateway .

How can i change these setings of PPTP VPN the subnetmask and the gateway ?

RAzvan wrote:

Nick i know what you tell me , but i do not understand why the PPTP does not get the gateway .

Nick Howitt wrote:

I am totally confused at this stage and have no idea how you've got to where you are. Really you should not be using a beta product if you don't know what you are doing and cannot troubleshoot.

The PPTP server should be configured with a local and remote IP range (although it is not necessary). By default it is in the same range as your LAN. You've worked out how to change this and extend your LAN (as you now have a /23 subnet on your LAN) yet you don't know how to move your LAN. I find this odd.

How many users are you expecting?

In 6.x, to change the LAN subnet, you go to Webconfig > Network > IP Settings, then for your LAN NIC click edit and change the LAN IP. Then go to Webconfig > Network > DHCP Server and make sure the settings here are consistent with your LAN settings. It is probably better to do this in reverse the order as, when you change your LAN NIC IP, you may lose access to your server unless you manually assign your client an IP address.

When you set up your DHCP server, its IP range must at least exclude your LAN NIC IP and ideally exclude a few more IP addresses to allow you to set up more static IP's on you LAN, for example for network printers.

Only for 10 IP's , 10 stations .

Nick . i do not understand what exactly you try to tell me .

The DHCP is : 192.168.0.1 to 192.168.1.254
Gateway : 192.168.2.254


The PPTP it is : 192.168.2.1 - 49
192.168.2.50 - 99

What you mean exactly ?

Nick Howitt wrote:

I believe a gateway of 0.0.0.0 means it is locally connected, which it is, sort of, to the local LAN.

Please can you sort out your LAN subnetting so that the ClearOS and remote LAN subnets do not overlap and the PPTP IP ranges, which can be in the ClearOS LAN subnet, do not overlap or are not in the remote LAN subnet.

Also how many users/devices are you expecting on your LAN?