CensorNet 3.1r5 Ethernet bridging patch README

Please read this carefully before applying the patch.

The patch overwrites the following files; so if you have customised them manually in any way, please make backups of them first, before applying the patch:

/usr/local/sbin/start-new-firewall
/etc/hosts.tmpl
/etc/network/interfaces.tmpl
/usr/local/sbin/update_hosts
/usr/local/sbin/update_admin_access
/usr/local/sbin/update_access_rules

The patch also removes any existing kernel sources from /usr/src/linux and compiles a new kernel from scratch. If you have customised the kernel in any way you will have to backup your sources first, and re-apply any customisations after the patch is fully installed.

When applying the patch your browser will report that the upgrade is complete and CensorNet is rebooting. After the reboot, the patch can take upto half an hour to recompile the new kernel from sources, so beware. It might be a good idea to attach a keyboard and monitor to the CensorNet server so that you may see whats going on.

The patch makes CensorNet's public and private interfaces act like a 2-ported switch (or Ethernet bridge) rather than a gateway IP router. This for example means that CensorNet will no longer appear in a traceroute. This is the reason why the following changes also need to be made to your network after applying the patch:

* Set all workstations' "Default Gateway" to point at the gateway address you have configured in CensorNet's "setup" programs "Network Configuration" section. I.e. the gateway for the LAN is now CensorNet's gateway, not CensorNet.

* Any port forwarding rules you have to allow public services and/or feeds from the Internet to the LAN will need to be re-set on your upstream firewall. Instead of pointing the firewall at CensorNet's Public IP address, then getting CensorNet to forward the requests on, point them at the actual destination on the LAN.

For further information please visit the CensorNet Forum.