New Internet Filter
-
- Community Administrator
- Posts: 34418
- Joined: Sat Jan 20, 2007 2:53 pm
- Location: U.S.
New Internet Filter
I've received a email that says that the Internet Filter used by our Cisco 800 series firewalls will be changing this coming week. The new filter appears to be called zPath.
I have no idea what the time table for everyone else is.
I have no idea what the time table for everyone else is.
Have you searched the Help Center? Try doing a Google search and adding "site:churchofjesuschrist.org/help" to the search criteria.
So we can better help you, please edit your Profile to include your general location.
So we can better help you, please edit your Profile to include your general location.
- aebrown
- Community Administrator
- Posts: 15153
- Joined: Tue Nov 27, 2007 8:48 pm
- Location: Draper, Utah
Re: New Internet Filter
I got the same letter. Although it's good to know, in case anything goes wrong, it doesn't seem like a big deal -- the same basic filtering rules (e.g., YouTube is blocked) are still in place.russellhltn wrote:I've received a email that says that the Internet Filter used by our Cisco 800 series firewalls will be changing this coming week. The new filter appears to be called zPath.
I have no idea what the time table for everyone else is.
- pete.arnett
- Member
- Posts: 257
- Joined: Thu Dec 23, 2010 7:33 am
- Location: Sunny South Florida, USA
Re: New Internet Filter
It appears headquarters will be updating the way we look-up websites with a different type of Domain Name System (DNS) service by adding features such as phishing protection, and content filtering
- Mikerowaved
- Community Moderators
- Posts: 4734
- Joined: Sun Dec 23, 2007 12:56 am
- Location: Layton, UT
Re: New Internet Filter
I didn't get a letter, but saw the notification when logged into tm.lds.org.aebrown wrote:I got the same letter.
So we can better help you, please edit your Profile to include your general location.
-
- Community Administrator
- Posts: 34418
- Joined: Sat Jan 20, 2007 2:53 pm
- Location: U.S.
Re: New Internet Filter
Did your firewalls get converted already? I don't see a notice in my TM.Mikerowaved wrote:I didn't get a letter, but saw the notification when logged into tm.lds.org.
From the screen shot of the block page, it appears you can request changes. That's something I don't see with the current block screen.
Have you searched the Help Center? Try doing a Google search and adding "site:churchofjesuschrist.org/help" to the search criteria.
So we can better help you, please edit your Profile to include your general location.
So we can better help you, please edit your Profile to include your general location.
-
- Community Moderators
- Posts: 11460
- Joined: Mon Mar 17, 2008 10:27 pm
- Location: US
Re: New Internet Filter
My notice came via email, although I have no idea if that is because I am the STS or because I am subscribed to Tech messages at my LDS Account. For some reason I usually don't get messages sent to the STS (although I am shown as one), so I suspect the latter.
I did not get anything by logging into tm.
I did not get anything by logging into tm.
- pete.arnett
- Member
- Posts: 257
- Joined: Thu Dec 23, 2010 7:33 am
- Location: Sunny South Florida, USA
New Internet Filter
Several stakes, in sunny Florida, notices came via email
- jeromer7
- Member
- Posts: 228
- Joined: Thu May 17, 2007 12:46 pm
- Location: Bellevue, Nebraska
Re: New Internet Filter
The email I got said the change "for meetinghouses in your stake" (we're just south of Omaha, NE) would be "between February 10 and February 14, 2014."russellhltn wrote:I have no idea what the time table for everyone else is.
-
- New Member
- Posts: 5
- Joined: Thu Jan 27, 2011 9:59 pm
- Location: Scappoose, OR
Re: New Internet Filter
I am an STS in Oregon. Our 881W firewall's were updated last week to use the new zPath filtering. One of my buildings is showing that filtering is not working (tm.lds.org -> Usage Statistics tab) so I called GSC to trouble shoot. They told me that there are problems with 'running tests' on the new filtering and that they have a ticket open with engineering to fix it. They checked the 881W in my problem building and said that it was running zPath as expected, even though it shows as failing to have filtering. A restart of the router did not clear the problem.
I did receive the "Meeting House Internet Change" email discussed in this thread, but what is not outlined in the email, and what I didn't realize until speaking with GSC, is that zPath is a DNS based filtering solution. DNS based filtering is easy to subvert unless additional steps are taken to only allow specific DNS server IP Addresses. This next step will be taken with zPath on March 9th, 2014. At that time only these two DNS servers will be permitted - 8.34.34.92, and 8.35.35.92. None of this was outlined in the email but is critical information to anyone who has configured their computers with static IP Addresses; which also means you had to specify your DNS servers.
All of my FHC computers and Clerk computers are configured with static IPs, and will stop talking on the internet if I don't go in and update the DNS server IPs to the new values prior to March 9th, 2014.
I did receive the "Meeting House Internet Change" email discussed in this thread, but what is not outlined in the email, and what I didn't realize until speaking with GSC, is that zPath is a DNS based filtering solution. DNS based filtering is easy to subvert unless additional steps are taken to only allow specific DNS server IP Addresses. This next step will be taken with zPath on March 9th, 2014. At that time only these two DNS servers will be permitted - 8.34.34.92, and 8.35.35.92. None of this was outlined in the email but is critical information to anyone who has configured their computers with static IP Addresses; which also means you had to specify your DNS servers.
All of my FHC computers and Clerk computers are configured with static IPs, and will stop talking on the internet if I don't go in and update the DNS server IPs to the new values prior to March 9th, 2014.
- jeromer7
- Member
- Posts: 228
- Joined: Thu May 17, 2007 12:46 pm
- Location: Bellevue, Nebraska
Re: New Internet Filter
This confirms my research. I had a unit Admin computer fail the filter test during their finance audit last week. This was strange since my stake computer passed that audit step. The stake computer uses DHCP while the unit computer uses a static IP.
In looking at the TCP/IP settings of the two machines, I noticed they had different DNS IPs with the stake machine having the two listed in the previous post.
Anyone using static IPs will want to get the DNS changed in the TCP/IP settings. I found that until you do, not only will you get the big “X” for the filter test, but you also can get to gambling.com. So there is NO filtering!
In looking at the TCP/IP settings of the two machines, I noticed they had different DNS IPs with the stake machine having the two listed in the previous post.
Anyone using static IPs will want to get the DNS changed in the TCP/IP settings. I found that until you do, not only will you get the big “X” for the filter test, but you also can get to gambling.com. So there is NO filtering!