OK!  :)

@Moosecall:

I followed the steps listed in the wiki, it breaks at step 3 running the second php test script.  I am only following the steps for 2.0 setup as the firewalls that will be using it are 2.1.  I did try having a firewall pull from it but as expected no joy.

The server is a fresh install of Ubuntu 12.04 lts server, that is doing nothing else.  I installed apache, git and php.

You sure the git clones were successful?

They must be independent. It's more work but that is what is required. Each ACL must define the exact list of actions for each category.

It does work on ALIX, not for caching but for access control only (with squidGuard).

Memory is the biggest drawback on those

In pfSense an interface without any rules is already blocking everything by default. pfBlocker is smart enough to understand this. If an interface (e.g. WAN) has no rules, then pfBlocker does not bother to add block rules.
Maybe that is the difference between your WANs?

I looked at squid.conf and it's using only error_default_language directive.

I found only another squid directive for error pages:

http://www.squid-cache.org/Doc/config/error_directory/

But it doesn't help to solve the problem that you told us.

I think the only solution is to modify the files at /usr/local/etc/squid/errors/en/ (en, if you use English) and put a redirect code to an alternative URL. Example:

This will show http://www.yourdomain.tld/access_denied.html to the user.

So Lightsquid is saying the file i am downloading is cached. But when i redownload the file i get no speed boost, and the file is coming from the internet. But lightsquid is saying the file is 98% Cached. Headscracther for me! ty

Yes, you can do that.

If you're a Gold Subscriber we did a video presentation on Squid, Squidguard, and Lightsquid last Friday and it was mentioned how to set that up. It should be up for download soon.

SquidGuard can be set to "deny" by default, add in your own whitelist on top of that and it does what you're wanting. Though it'll be more work than you might initially suspect.

I think Snort was causing this for some reason.  When I removed the package I was able to install the Export Client utility without trouble.

Looks like the issue was with Squid. Setting my log rotation to blank instead of 28, LightSquid and Sarg are showing more than one day's worth of traffic.

@dvserg:

But http://squid-web-proxy-cache.1019090.n4.nabble.com/Squidguard-redirect-and-https-td4662707.html

The problem is not Squid nor HTTPS.

The problem is that the HTTP protocol has a standard that allows
redirection and the HTTPS protocol does not.
The HTTPS protocol was designed to be secure and does not allow
any type of interference.

The link refers to squid2, without SSL interception possibility.

I'm using squid3-devel package with SSL interception (SSL Bump, man-in-the middle based). It's intercepting SSL without any troubles.

http://translate.google.com/translate?hl=en&sl=es&tl=en&u=http%3A%2F%2Fforum.pfsense.org%2Findex.php%3Ftopic%3D73007.msg402349%23msg402349

Google https pages with https links are also intercepted. But when I click the link the redirect page is not opened. However, opening the page in a new tab or window browser the redirect page appears.

Curious! It's FireFox 27.0.1 fault? I just tried with Chromium 32.0.1700.107 and I've got the redirect page!

The following Lookups would benefit anyone with a Local Mail Server.

Mail Server DNSRBL Lookups

SenderScore
Spamhaus Blocklist
SPAMcop Blocklist
multirbl RBL Lookup
MXToolbox

                [](https://senderscore.org/lookup.php?lookup=<?php echo $ipaddr; ?>&ipLookup=Go)                 [](http://www.spamhaus.org/query/bl?ip=<?php echo $ipaddr; ?>)                 [](http://www.spamcop.net/w3m?action=checkblock&ip=<?php echo $ipaddr; ?>)                 [](http://multirbl.valli.org/lookup/<?php echo $ipaddr; ?>.html)                 [](http://mxtoolbox.com/SuperTool.aspx?action=blacklist%3a<?php echo $ipaddr; ?>&run=toolpage)

The Emerging Threats Rules have P2P rules. Snort doesn't have anything in that Category.

If you use a file then it could be replicated across locations and you will always have a config file with you.

Why not opt for both? Do as the core team wants and put an extra option in the GUI for creating a snort conf file.

[SOLVED]

1. Commented lines:

  402         #file_put_contents($conf_file, $conf);   403         #file_put_contents(SQUID_LOCALBASE . '/etc/squid' . SQUIDGUARD_CONFIGFILE, $conf); # << squidGuard want config '/usr/local/etc/squid' by default

https://github.com/pfsense/pfsense-packages/blob/master/config/squidGuard/squidguard_configurator.inc

2. Modified pass line at:

/usr/pbi/squid-i386/etc/squid/squidGuard.conf /usr/pbi/squidguard-squid3-i386/etc/squidGuard/squidGuard.conf

3. [Apply] button to reconfigure squidGuard without writing a new squidGuard.conf

In general I only need to modify my lists. So, the trick will work without troubles for me.

Try doing the following:

Go to Services > Proxy Server > Access Control
Then, in the Unrestricted IPs, type in the Roku's IP Address and test this out to see if it works.

As for HAVP, under the HTTP Proxy tab, go to the whitelist and enter in *.netflix.com to exclude the site from scanning the site for viruses.

I too had a problem with pfS2.1-x64 with clamAV not starting and havp crashing.  After reading other posts I tried using the command "freshclam" from the console and got a gid/uid error for the /var/db/clamav directory.  I issued the command "chmod -R 0777 /var/db/calmav" and tried freshclam again with success.  I then issued the command "service calmd start" with success.  It has now been running for 4 hours. . . After posting this message I got to looking at the /var/db directory and noticed that most directories listed have a root:wheel ownership as opposed to clamav which has a havp:havp ownership.  I hope this info might be of some help.