I need help tweaking my ASL box. Most of my concern is getting the most out of my internet bandwidth. Second is getting the Pop3 spam filter to work.
First off I have a cable internet access with 384k upstream and 1500kbps down stream.
The cable modem connects to the external side of the ASL box. The internal nic of the ASL connects to my switches in the wall closet.
I have approximately 100 users. I need web virus protection and surf protection. I also need POP3 virus and spam protection as we have external mail servers.
We also need remote access for two users through pptp.
here is my setup :
Nat masquerade internal --> external.
Packet filters:
Https internal --> any
Legolas internal --> any
FTP internal --> any
cpanel internal -->any
Http proxy:
mode = transparent
logging = none
anonimity = none
surf protection = enabled
virus protection = enabled
strings to look for on surf = nudity
BLOCK CONNECT METHOD = disabled
allowed services : http
https
LDAP
SQUID
FTP-CONTROL
FTP
DNS Proxy:
forwards to our isp's dns server
POP3 Proxy:
allowed networks:
internal ---> any
Virus protection = enabled
spam protection = enabled
Spam threshold:
Pass = 2
Quarantine = 3
Whitelists = majority of contacts are listed
Extension filter = got about 21 from William
Expression filter = got stuff like win a prize ect.
SMTP Proxy = disabled
Indent Proxy = disabled
Socks Proxy = Enabled
Intrusion Protection = enabled
Port Scanning detection = enabled
Notification levels = disabled
Local logging = disabled
William suggested that I enable the QoS on the external nic so i did the settings are:
up = 364
down = 1500
Here are the system specs for the ASL box
AMD Athlon 2400+
512MB DDR Memory
40gb 7200rpm hard drive
2 X Dlink 530tx NIC's
First off the Spam protection does'nt catch all the spam some spam still slips by and is not even tagged with the *Spam* tag.I thought spam threshold settings were aggressive.....but stuff still gets through.
Is there anything else I can do to enhance the ASL box settings. I know I did not mention the PPTP settings but I have'nt implemented it yet.
Any help would be appreciated.
Thanks
This thread was automatically locked due to age.
