CacheGuard Help

I’m thinking of changing my internal network IP range. As CG is my DHCP server, would I be safe in running a “find and replace” on the latest saved CG.conf file, replacing say "10.0.10" with say "10.0.12" and loading the new.conf? I appreciate I may break many other things outsid...

Assuming an internal server at 10.0.10.11 provides FTP services, the following external rules seem appropriate: firewall external add Ftp21 allow tcp any rweb any 21 nil 10.0.10.11 21 firewall external add Ftp990 allow tcp any rweb any 990 nil 10.0.10.11 990 The following rule, defining a common pas...

Thanks Charles. I look forward to the patch and will move on to option 2, with any questions arising, posted in a new topic.
So pleased we got past this hurdle.

Many thanks Charles, that works

I did, as confirmed at 08:41 today "After applying the forwards you advise above, from the external network, 192.168.155.1:80 and https://192.168.155.1 still give me nothing, whilst 192.168.155.1:8090 is fine to get to the WebGUI." Any advice on how to temporarily "relax" CG so t...

I confirm that throughout this topic my network is (@) --- [InternetRouter] ----- (192.168.155.1) [CG] (10.0.10.254) ----- (10.0.10.11) [WindowsServer] The Windows Server is on the internal LAN only, so has no connection to my internet router, other than as above thru’ CG. As you advise not to use t...

Thanks again David, I'm learning more about CG. My internet router has a DMZ that allows me to allocate the external IP of CG to bypass the firewall and NAT of that router. So no port forwarding necessary on the internet router. Is that correct and sensible? Yes my nmap scan was from a PC in the ext...

As VMware Tools are not permitted in the CG appliance, so no “Shut Down Guest” option exists, can the appliance just be "Powered off" or is there a better way?

I confirm the Windows Server 2016 Essentials is on the same LAN as the CG’s internal NIC. Working with your option 1 above and that code applied, I have done an nmap scan of CG’s external NIC and the only ports open are 22 and 8090, not 80 and 443. Following is the relevant extract from Textual Conf...

Thanks David, that solves the "copy/paste" challenge nicely.