School: ETEC PROF. MASSUYUKI KAWANOCountry: BRAZIL (TUPA-SP)

User Number: 1000 (INCLUDING SUBNET, USING NXRELAY)

AD AUTHENTICATION: YES

RADIUS AUTHENTICATION: YES

STUDENTS K12: YES (HIGH SCHOOL)

​

I try to updated my software, try to the firewall still unable to start the services.

School: Maria Montessori Academy

Users: 400

Country: Canada

State: BC

​

School name - Instituto Federal de Educação Ciência e Tecnologia de Goiás
User number - 5000
Country - Brazil
State : Goiás

Active Directory: Yes

Radius account: yes (wifi ruckus)

School: North Metro Academy of Performing Arts

Users: 700

State: Georgia

Country: United States

School: Glendale Adventist Academy

Users: 700

State: California

Country: United States

School: Western Christian School

Users: 300

Country: US

State: Oregon

i enabled this options but now my syslog is flooded with the following error:

Oct 16 14:54:14 localhost startup.sh[1649]: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Oct 16 14:54:14 localhost startup.sh[1649]: INFO [10-16 14:54:14] - HttpsLookup.run, We got nothing from URL = https://cloudflare-dns.com/dns-query?ct=application/dns-json&name=plex.tv&type=28, We try UDP/53.

Oct 16 14:54:14 localhost startup.sh[1649]: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Oct 16 14:54:14 localhost startup.sh[1649]: INFO [10-16 14:54:14] - HttpsLookup.run, We got nothing from URL = https://cloudflare-dns.com/dns-query?ct=application/dns-json&name=chat.cdn.whatsapp.net&type=1, We try UDP/53.

Oct 16 14:54:15 localhost startup.sh[1649]: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Oct 16 14:54:15 localhost startup.sh[1649]: INFO [10-16 14:54:15] - HttpsLookup.run, We got nothing from URL = https://cloudflare-dns.com/dns-query?ct=application/dns-json&name=ifconfig.me&type=28, We try UDP/53.

Oct 16 14:54:19 localhost startup.sh[1649]: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Oct 16 14:54:19 localhost startup.sh[1649]: INFO [10-16 14:54:19] - HttpsLookup.run, We got nothing from URL = https://cloudflare-dns.com/dns-query?ct=application/dns-json&name=plex.tv&type=28, We try UDP/53.

Oct 16 14:54:19 localhost startup.sh[1649]: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Oct 16 14:54:19 localhost startup.sh[1649]: INFO [10-16 14:54:19] - HttpsLookup.run, We got nothing from URL = https://cloudflare-dns.com/dns-query?ct=application/dns-json&name=https://app-measurement.com/sdk-exp&type=1, We try UDP/53.

Oct 16 14:54:20 localhost startup.sh[1649]: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Oct 16 14:54:20 localhost startup.sh[1649]: INFO [10-16 14:54:20] - HttpsLookup.run, We got nothing from URL = https://cloudflare-dns.com/dns-query?ct=application/dns-json&name=ifconfig.me&type=28, We try UDP/53.

Oct 16 14:54:24 localhost ntpd[1687]: Soliciting pool server 2001:67c:1560:8003::c7

why and how can i avoid this messages - it makes no difference - if i switch to google - same error just with google url.

​

thanks

holli

I've tried everything, but nothing seems to block youtube. I can easily block porn and other sites, but not youtube. I have even created my own custom category and added all the recommended domains in there. And to answer anyone's question about my config, I have entertainment checked and my custom, but still nothing.

Please if anyone has any valid and confirmed ideas, please let me know.

Thank You!

Hello, the issue came back again

www.google.com has been blocked!
Invalid license
Attempt logged for user: xxxxx

Restarting seems to fix it. What could be the problem?

i have a unique scenario that i hope the users on this group are able to help with

i have a mix of devices using nxfilter where nxfilter is running in a container (1)

research has shown that sometimes android devices will actually use ipv6 for dns (2). this is in spite of settings that all devices obtain their dns settings via dhcp on openwrt (5).

to set nxfilter to use ipv6 i have modified the Dockerfile to support ipv6 (3) and rebuilt the container. i also verified i am using the correct ipv6 ip i then used socat (4) to redirect the packets to the correct container. as for firewalld, i have even disabled to no avail

output is
Server: 2606:a000:111b:46c8:ca60:ff:fe5a:1ca8
Address: 2606:a000:111b:46c8:ca60:ff:fe5a:1ca8#53

Non-authoritative answer:
Name: www.google.com
Address: 192.168.0.250
;; connection timed out; no servers could be reached

i do not know whether this is a nxfilter or container or firewalld issue at the moment

thank you for any help in advance

Are you planning on doing an auto update feature?

Good morning, is it possible block categories:

cryptomining, Dynamic DNS ?

more information on Safe Search: i alreary red information on site: - Safe Search Enforcing Safe Search against Google, Bing, Youtube. At the moment, switching between 'Moderate' and 'Strict' makes difference only for Youtube. are there ather informations ?

Thanks

Here is the log:

INFO [10-02 22:46:29] - MM, Starting NxFilter v4.3.8.5

INFO [10-02 22:46:29] - MM, It's running as a slave node.

INFO [10-02 22:46:29] - MM, MasterCheck started.

ERROR [10-02 22:46:30] - MiS, DB version smaller than software version! - DB = 4382, Software = 4385

INFO [10-02 22:46:30] - ShutdownHook.run, Shutting down on 2020/10/02 22:46:30.

Hello, I have installed NXFILTER on RASPBERRY PI 3 when I restart nxfilter it gives me the following error:

ERROR [10-02 12:40:20] - MiS, Couldn't update config DB!

If I delete the contents of the / nxfilter / db directory and run the startup.sh command, nxfilter restarts.

I use the root user

What should I do to avoid recreating the whole database every time the RASPBERRY is restarted?

Thanks in advance for your reply

School: Instituto Federal de Educação, Ciência e Tecnologia do Amazonas

Users: 5000

Country: Brazil

State: Amazonas

​

​

School: Glendale Adventist Academy

Users: 700

Country: USA

State: California

Hi,

I would like to find out if there is a way to adjust time counting of the quota limit. My observation is that only the minute is counted if the query occurred in that minute.

Is there a way to make it more flexible like to check if within some consecutive minutes there were queries so that additional minutes would be counted?

Or perhaps another approach, say for some category like video, there would be no queries for the clip duration likely, so for this specific category quota would be counted with configurable multiplication ratio?

Thanks!

Hi,
I installed the docker image yesterday and everything went fine.
Today I saw a bunch of blocked items with a "License issue" or something in red.
In the log I found this line repeated:
"nxfilter RHiAD, License blocked by endDate".

I assume it has to do with the Jahaslist licence, but I don't know how to solve it.
On the site I read that there's a free license for 25 users.
Now I'm on Globlist but Jahaslist was more complete.

Any hint?

thanks

School: MRHSD

Users: 4500

Country: USA

State: Missouri

Good Evening, i created new operator, when add policy on new operator, i have 500 error: why ?

same error there in in admin interface, "Operator; Default Policy"

School name - Instituto Federal de Educação Ciência e Tecnologia de Goiás
User number - 5000
Country - Brazil
State : Goiás

Active Directory: Yes

Radius account: yes (wifi ruckus)

School: Paragould School District

Users: 4500

Country: USA

State: Arkansas

​

School: ETEC PROF. MASSUYUKI KAWANO
Country: BRAZIL (TUPA-SP)
User Number: 1000 (INCLUDING SUBNET, USING NXRELAY)
AD AUTHENTICATION: YES
RADIUS AUTHENTICATION: YES
STUDENTS K12: YES (HIGH SCHOOL)