Nxcloud and Nxrelay

[Lenin]

I have a question regarding the implementation of nxcloud with nxrelay.

Is it possible to identify the user's private IP address and display it in the dns request log?

I verified that the external IP is displayed, and the filtering occurs correctly using nxproxy.

[support200]

Yes. It's possible. That's why we use NxRelay. You can associate those private IPs to users. You also can see their Windows username if you use CxLogon.

[Lenin]

Perfect, I installed Nxrelay on a Windows desktop and configured it. I can see in the GUI console that the agent's signal arrives successfully, however even tying the internal IP of the machine running NXrelay to the user registered in Nxcloud, only the External IP is displayed.

Where am I sinning?

The Scope is as follows:

NXcloud in the cloud

Local PFsense Firewall

Windows computer with NXrelay running.

[support200]

On which GUI, did you see the external IP? If it's admin GUI, that's natural as for admin the external IP would be meaningful but for operator, private IP would be what he wants to see. Did you try the oprator GUI? Can you show me a capture image of your operator GUI?

[Lenin]

The External Ip is displayed in both the Admin Tab and the Operator Tab.



the Intelinove user is configured with NXrelay, while the user vostro is another pc that is on the same network

.

[support200]

Who's vostro_Debi? Do you run NxProxy and NxRelay both on the desktop?

[Lenin]

Vostro Debi is a notebook, when I run NXproxy on it I have the result according to the prints I sent.

NXrelay I'm running it on another computer, I don't run nxrelay and nxproxy on the same machine, I even believe that due to port issues both will not go up.

[support200]

Then you don't get traffic from NxRelay. Did you click the TEST button on its GUI if you run it on Windows?

[Lenin]

It is and the NXrelay configuration the test shows ok.

[support200]

How did you send DNS queries to you NxRelay then? Did you try to send some DNS queries to NxRelay or set your NxRelay as the DNS server for some PC?

[Lenin]

I defined the NXcloud IP as the priority DNS of the modem where the machines are connected. I removed the Firewall to further simplify the configuration.
I have a carrier modem pointing exclusively to the NXcloud DNS.

And two machines connected to the WiFi of this modem, one that has NXrelay and the other that was previously using NXproxy.

[support200]

NxRelay is a DNS server. You have to use it as a DNS server for your local network. And Local DNS is a upstream DNS server for NxRelay. 192.168.0.1 is a DNS server?

[Lenin]

With your last guidance things became clearer, I managed to configure and now in the Operator GUI I see the user name and the private IP of the machine.

It turns out that I am blocking the porn category in the policy that is applied to the user but it doesn't seem to work. I can still access these sites.

What am I missing now?

[support200]

NxRelay has its own cache. Try to use Whitelist with Admin Block for testing. Or restart NxRelay and test it again.

[Lenin]

I tried twice and was unsuccessful.

Another question is it normal in the operator GUI not to show the number of connected users / IPs?

In the Admin GUI this information appears.