Thank you - again - Bryant, Bjorn and others who've chimed in on this.  It sounds like Untangle would work for us (on the PC side, anyway) if we were running AD, but we're not.  We're still using Novell's eDirectory (nee NDS) for our directory services on the PC side.  8e6 does a pretty good job with eDir authentication, so that's a plus for us, but it doesn't have anyway to automatically authenticate a Mac user - and thats a very BIG minus.  Mac users are very unhappy.  As I think I mentioned earlier, it will read Apple's Open LDAP database, but not automatically.  It's that additional (and, sometimes, multiple) login that makes it so annoying.  

Other schools must have this situation, i.e., computers shared with both faculty and students.  How do you differentiate in order to provide the freedom the faculty wants vs. the restriction that CIPA requires for students? 



Vincent Rossano
Information Technology Director
Montpelier Public Schools
Montpelier, VT 05602
(802) 225-8690
>>> On 12/23/2008 at 3:10 PM, Bryant Patten <[log in to unmask]> wrote:
> Dave -
>   I am a big Dansguardian fan and work with a couple of schools that  
> use both Untangle and Dansguardian as a kind of belt-and-suspenders  
> web filter for schools that want to have a high level of web content  
> protection.
> Bryant
> On Dec 23, 2008, at 3:02 PM, David Curtis wrote:
>> I don't think we will switch off of Dansguardian, but if you have an
>> Untangle rep coming up I would be interested in getting some hands on
>> experience.
>> Thanks,
>> Dave
>> -----Original Message-----
>> From: School Information Technology Discussion
>> [mailto:[log in to unmask]] On Behalf Of Bryant Patten
>> Sent: Tuesday, December 23, 2008 2:50 PM
>> To: [log in to unmask] 
>> Subject: Re: Untangle gateway
>> {Since the discussion seems to be continuing on-list, I will respond
>> that way}
>> Hey Vince -
>>   I haven't had done any setups with differentiated filtering that
>> wasn't by IP.  I believe it is designed to work relatively easily if
>> you have an active directory server.  You can set up several different
>> virtual racks - one for each group but I haven't checked that with the
>> new 6.0 version or whether it is included with the new Educational
>> Discount Pack.
>>  I would recommend that you post your question to the Untangle
>> forums.  They are free and have been quite responsive to my questions.
>>  Finally, I am setting up a webinar training for Vermont educators
>> with some Untangle personnel for January.  Let me know if you would
>> like to participate and ask your question directly.  There has been
>> some discussion of having an Untangle training session the afternoon
>> before FOSSVT (which is April 10th) where people could set up and
>> configure an Untangle server.  Any interest?
>> Bryant
>> On Dec 20, 2008, at 4:48 PM, Vincent Rossano wrote:
>>> Bryant,
>>> A couple of months ago, I posted a message looking for info on
>>> Untangle.  You seem to have been the one recommended as most
>>> knowledgeable.  We were, at that time, just getting an Untangle
>>> server up and running and were having some success with it, but we
>>> needed more granular filtering than the free version would allow.
>>> For the last month or so, we've been running an evaluation of 8e6's
>>> product: IR3000.  It looked extremely promising but has, in
>>> practice, been clumsy in handling Mac filtering.
>>> Anyway, my short-version question is this:  can Untangle - in any
>>> version - filter by authentication?
>>> Elaboration:  We cannot effectively filter by IP address because
>>> many of our computers are shared by faculty and students.  What we
>>> had hoped to do was have the filter identify people via LDAP and
>>> have their filter level be based on their status (e.g., student,
>>> staff, faculty).  8e6 was able to do this, but - on the Macs - only
>>> with an annoying separate login routine each time they opened a
>>> browser.  The Mac folks haven't been happy with this - though we
>>> might be able to continue with this aggravation if necessary, but I
>>> can't see paying big (for us) bucks to 8e6 when perhaps we could
>>> achieve the same annoyance level for much less money. :-)
>>> Back to the shorter question: can Untangle meet our needs?
>>> Thanks for any help you can offer.
>>> -Vince
>>> -- 
>>> Vincent Rossano
>>> Information Technology Director
>>> Montpelier Public Schools
>>> Montpelier, VT 05602
>>> (802) 225-8690
>>>>>> On 10/7/2008 at 6:52 AM, Bryant Patten
>>>>>> <[log in to unmask]> wrote:
>>>> Vince -
>>>> I have installed several of these Untangle gateways.  Feel free to
>>>> ping me with any questions and I will track down the answers for  
>>>> you.
>>>> Bryant Patten
>>>> White Nitro, LLC
>>>> [log in to unmask] 
>>>> On Oct 6, 2008, at 9:30 PM, Vincent Rossano wrote:
>>>>> Folks,
>>>>> Anyone out there have any experience with, or know much about, the
>>>>> open source gateway from Untangle?
>>>>> -Vince
>> ______________________________________________________________
>> ______________________________________________________________
>> This email may contain information protected under the Family
>> Educational Rights and Privacy Act (FERPA) or the Health Insurance
>> Portability and Accountability Act (HIPAA).  If this email contains
>> confidential and/or privileged health or student information and you
>> are not entitled to access such information under FERPA or HIPAA,
>> federal regulations require that you destroy this email without
>> reviewing it and you may not forward it to anyone.
>> --
>> This message has been scanned for viruses and
>> dangerous content by MailScanner, ClamAV and Bitdefender  and is
>> believed to be clean.