New Internet Filter

Discussions about Internet service providers (ISPs), the Meetinghouse Firewall, wired and wireless networking, usage, management, and support of Meetinghouse Internet
Post Reply
russellhltn
Community Administrator
Posts: 34421
Joined: Sat Jan 20, 2007 2:53 pm
Location: U.S.

New Internet Filter

#1

Post by russellhltn »

I've received a email that says that the Internet Filter used by our Cisco 800 series firewalls will be changing this coming week. The new filter appears to be called zPath.

I have no idea what the time table for everyone else is.
Have you searched the Help Center? Try doing a Google search and adding "site:churchofjesuschrist.org/help" to the search criteria.

So we can better help you, please edit your Profile to include your general location.
User avatar
aebrown
Community Administrator
Posts: 15153
Joined: Tue Nov 27, 2007 8:48 pm
Location: Draper, Utah

Re: New Internet Filter

#2

Post by aebrown »

russellhltn wrote:I've received a email that says that the Internet Filter used by our Cisco 800 series firewalls will be changing this coming week. The new filter appears to be called zPath.

I have no idea what the time table for everyone else is.
I got the same letter. Although it's good to know, in case anything goes wrong, it doesn't seem like a big deal -- the same basic filtering rules (e.g., YouTube is blocked) are still in place.
User avatar
pete.arnett
Member
Posts: 257
Joined: Thu Dec 23, 2010 7:33 am
Location: Sunny South Florida, USA

Re: New Internet Filter

#3

Post by pete.arnett »

It appears headquarters will be updating the way we look-up websites with a different type of Domain Name System (DNS) service by adding features such as phishing protection, and content filtering
User avatar
Mikerowaved
Community Moderators
Posts: 4734
Joined: Sun Dec 23, 2007 12:56 am
Location: Layton, UT

Re: New Internet Filter

#4

Post by Mikerowaved »

aebrown wrote:I got the same letter.
I didn't get a letter, but saw the notification when logged into tm.lds.org.
So we can better help you, please edit your Profile to include your general location.
russellhltn
Community Administrator
Posts: 34421
Joined: Sat Jan 20, 2007 2:53 pm
Location: U.S.

Re: New Internet Filter

#5

Post by russellhltn »

Mikerowaved wrote:I didn't get a letter, but saw the notification when logged into tm.lds.org.
Did your firewalls get converted already? I don't see a notice in my TM.

From the screen shot of the block page, it appears you can request changes. That's something I don't see with the current block screen.
Have you searched the Help Center? Try doing a Google search and adding "site:churchofjesuschrist.org/help" to the search criteria.

So we can better help you, please edit your Profile to include your general location.
lajackson
Community Moderators
Posts: 11460
Joined: Mon Mar 17, 2008 10:27 pm
Location: US

Re: New Internet Filter

#6

Post by lajackson »

My notice came via email, although I have no idea if that is because I am the STS or because I am subscribed to Tech messages at my LDS Account. For some reason I usually don't get messages sent to the STS (although I am shown as one), so I suspect the latter.

I did not get anything by logging into tm.
User avatar
pete.arnett
Member
Posts: 257
Joined: Thu Dec 23, 2010 7:33 am
Location: Sunny South Florida, USA

New Internet Filter

#7

Post by pete.arnett »

Several stakes, in sunny Florida, notices came via email
User avatar
jeromer7
Member
Posts: 228
Joined: Thu May 17, 2007 12:46 pm
Location: Bellevue, Nebraska

Re: New Internet Filter

#8

Post by jeromer7 »

russellhltn wrote:I have no idea what the time table for everyone else is.
The email I got said the change "for meetinghouses in your stake" (we're just south of Omaha, NE) would be "between February 10 and February 14, 2014."
WillClaridge
New Member
Posts: 5
Joined: Thu Jan 27, 2011 9:59 pm
Location: Scappoose, OR

Re: New Internet Filter

#9

Post by WillClaridge »

I am an STS in Oregon. Our 881W firewall's were updated last week to use the new zPath filtering. One of my buildings is showing that filtering is not working (tm.lds.org -> Usage Statistics tab) so I called GSC to trouble shoot. They told me that there are problems with 'running tests' on the new filtering and that they have a ticket open with engineering to fix it. They checked the 881W in my problem building and said that it was running zPath as expected, even though it shows as failing to have filtering. A restart of the router did not clear the problem.

I did receive the "Meeting House Internet Change" email discussed in this thread, but what is not outlined in the email, and what I didn't realize until speaking with GSC, is that zPath is a DNS based filtering solution. DNS based filtering is easy to subvert unless additional steps are taken to only allow specific DNS server IP Addresses. This next step will be taken with zPath on March 9th, 2014. At that time only these two DNS servers will be permitted - 8.34.34.92, and 8.35.35.92. None of this was outlined in the email but is critical information to anyone who has configured their computers with static IP Addresses; which also means you had to specify your DNS servers.

All of my FHC computers and Clerk computers are configured with static IPs, and will stop talking on the internet if I don't go in and update the DNS server IPs to the new values prior to March 9th, 2014.
User avatar
jeromer7
Member
Posts: 228
Joined: Thu May 17, 2007 12:46 pm
Location: Bellevue, Nebraska

Re: New Internet Filter

#10

Post by jeromer7 »

This confirms my research. I had a unit Admin computer fail the filter test during their finance audit last week. This was strange since my stake computer passed that audit step. The stake computer uses DHCP while the unit computer uses a static IP.

In looking at the TCP/IP settings of the two machines, I noticed they had different DNS IPs with the stake machine having the two listed in the previous post.

Anyone using static IPs will want to get the DNS changed in the TCP/IP settings. I found that until you do, not only will you get the big “X” for the filter test, but you also can get to gambling.com. So there is NO filtering!
Post Reply

Return to “Meetinghouse Internet”