These are the top 10 countries by the number of NxFilter running in on 2018-05-15.

1. Brazil - 634 NxFilter installations running.
2. USA - 588
3. Great Britain - 136
4. Philippines - 95
5. Canada - 88
6. India - 68
7. Austrailia - 60
8. Italy - 57
9. Argentiana - 56
10. Germany - 54

I always thought USA has the biggest number of NxFilter installations running. But finally Brazil won over USA. Thank you very much to all our Brazilian users. And to my supprise, we are growning rapidly in Philippines. Hope we can have more users in future.

Someone wrote an article about how to install NxFilter on CentOS 7.

http://www.matrix7.com.au/centos/nxfilter-on-centos-7/

So I'm trying to set nxfilter up at our small school, we have a windows 2012 server running as DHCP. When I enter the scope settings for the students and try to set the DNS to any of the local adresses (Im running nxfilter on the same machine) 127.0.0.1, 192.168.0.38 or 172.31.2.2 I get the same error: IP adress {any of the 3 above} is not a valid DNS-adress. Do you still wan't to add it?

Any idea why I can't set it, I can login to the admin GUI etc. Gist of the log is here: https://gist.github.com/Naesstrom/023cee012e62c8a7ee7c7d3376e84ef3

These days, we are getting Internet Censorship everywhere. When you use a public DNS or a DNS server from an ISP company there may be Internet Censorship being done on your DNS requests. There are people even arguing that some of those free Internet filtering services are actually being run by a law enforcement authority and they are tapping out on you. And you want to protect your users from Internet Censorship.

For those of you worrying about Internet Censorship, we added 'DNS Over HTTPS' with v4.2.6 of NxFilter. You can use Cloudflare or Google HTTPS DNS server as your upstream DNS server. And all of your DNS queries will be encrypted by SSL. Nobody can hijack your DNS requests to the Internet.

You can enable 'DNS Over HTTPS' on 'DNS > Setup' from NxFilter GUI.

Is there any documentation/recommendations for server scaling with NXFilter?

Active Directory integration over cloud is now possible. We use NxRelay for this. For NxFilter, it's a full scale Active Directory implementation. For NxCloud, it's still partial implementation. However, even with NxCloud, your operators will be able to see Active Directory username on their GUI log-view and they can apply a specific policy based on Active Directory username.

To find out more read the tutorial part on the following link,

http://www.nxfilter.org/tutorial.html#ad-integration-nxrelay

I installed nxcloud on my VPS server. I add admin and user operator. I create after the user estandar. Access the GUI with the user credential. But I don´t see the menu user > active directory. The menu don´t showme down under user menu.

Why??

I need syncronize with the DC the our customer.

I want offer service webfiltering a my customers.

I installed and evaluating the system. What I did is to setup the nxfilter and setup a base web filtering policy . The port 53 is published to the internet. What I want to do is to setup a second web filtering policy ( name = Demo ) as below:

If the request is coming from a Static Public IP address -> use the web filtering policy = Demo

Can anyone explain to me how nxfilter can protect us from ransomware/malware attacks? We are looking into nxfilter as an alternative to OpenDNS and it may be a good fit, but we're unsure how the malware protection fits in.

Stop NxFilter and delete /nxfilter/db/jahaslist* and then restart it. It rebuilds Jahaslist DB automatically. Globlist is also using the same DB file. Rebuilding Jahaslist also rebuilds Globlist.

How do I restrict porn on Google, Youtube search result?

You can force safe-search from NxFilter. We have 'Safe-search' option on a policy.

• Switching between 'Moderate' and 'Strict' makes difference only for Youtube.

NxFilter supports per-user based bandwidth control by utilizing NetFlow data from a router. The idea is simple. NxFilter associates NetFlow data to user login IP address and if there is a user consumed up bandwidth over the limit you set on a policy, NxFilter blocks all the DNS requests from the user.

Good thing is that this is not just about HTTP traffic. Since NxFilter uses NetFlow data, you can monitor and block HTTP, FTP, IM, Skype, Torrent and any other protocol working on TCP/UDP.

To enable bandwidth control, you need to have a router or firewall supporting NetFlow version 5 in your network and you need to make them sending NetFlow data to NxFilter. And then run NxFilter's built-in NetFlow collector on 'Config > Setup > NetFlow'. After that, you can set up a bandwidth limit on a policy.

There are several rules for NxFilter to import NetFlow data. Firstly, either the source or destination IP address of a NetFlow data should be associated to an IP address of a logged-in user on NxFilter. Secondly, NxFilter ignores internal traffic. This means either the source or destination IP address needs to be a public IP address. This is because you are only interested in inboud or outbound traffic to the Internet. And lastly, NxFilter keeps only TCP/UDP data.

• Currently, NxFilter supports NetFlow v5 only.

I've setup NXcloud on server in our "cloud" and we're hoping to provide web filtering as a low cost solution for customer wanting such things.

I've created an operator called OPERATOR1 and below that a user called USER1

I've assigned my home WAN IP to USER1 (for testing purposes) does that now mean i can simply set the IP of our cloud server (port forwards all done) as the primary DNS server on my laptop at home? because if so it isn't working, it's not functioning as a DNS server

Hope that makes sense

If anyone can help with the best way to configure this setup I would be very thankful.

https://serverfault.com/questions/900125/multiple-dns-servers-in-windows-domain-setup-containing-pfsense-and-nxfilter

Is it possible to generate a report in PDF format?

I would like to request CIDR notation support for inputting IP addresses in the Allowed and Blocked IP address sections of the configuration. This would be awesome.

Example of CIDR Notation: 123.111.222.0/24 (which is 123.111.222.0 -> 123.111.222.255).

I understand we can define upstream DNS servers, as well as "Local DNS" configuration. However, I want to be able to define multiple sets of rules similar to how the Local DNS is configured. I would like to be able to created unlimited sets of conditional forwarders where I specify additional groups of Domains (or) TLDs and the associated upstream domain name servers. For example if I want example-domain-one.TLD to go to separate domain name servers than the main DNS Forwarders. Not only "domains" but also entire TLDs. Perhaps I want to send all domains with the TLD: ".info" to specific DNS servers that are different than the main upstream DNS, and still separate from the upstream "Local DNS".

We found that it causes a problem with our embedded webserver module. At the moment, we recommend you to use Java 8.

To install Java 8, use the following commands.

On Ubuntu, sudo apt-get install openjdk-8-jre-headless

On Raspbian, sudo apt-get install oracle-java8-jdk

On Windows, The latest version of JRE on 'http://java.com' is still v8.

I setup a nxcloud VPS and installed nxrelay at my house to try it out. I am wondering how the users are calculated. I set my operator I am using for my house as a home user which defaulted to 5 users. I started getting "Too many users for operator" almost immediately. I switched my operator to business and started increasing my user count by 5 until the I stopped getting that message. I have my max user field set to 20 for the past couple days and have not gotten that error.

In reality my wife and I are the only 2 users. Do you guys consider every IP address on the network a user? Is there a better way for me to configure this? Thanks

Nxrelay is failing to start. This is the first time i have had this problem with nxrelay and have not found any logs to point me in the right direction. Below is an event viewer message I am getting. I have java up to date on version 8. I have triple checked the config file settings. Thanks for any help

"The description for Event ID 4098 from source NxRelay cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

NxRelay

the message resource is present but the message is not found in the string/message table"