• SquidGuard Not starting on NetGate SG1000 v2.4.3

    3
    0 Votes
    3 Posts
    556 Views
    KOMK

    Squidguard requires squid to be installed first, I believe, since it modifies squid's configuration.  It's also not really a service.  It's a helper application that gets spawned by squid in realtime for every URL being processed.

  • Question: E2Guardian prevent using ip address on browser

    11
    0 Votes
    11 Posts
    1k Views
    P

    @ravegen:

    @marcelloc:

    @ravegen:

    I see the Deny IP- Deny Access to any ip based url.  But if I choose this, I cannot use the Normal Group (default) type where I also need to use that to filter base on ACLS.

    Just select the option I'm telling you and test. This is for sure the option you are looking for.

    If I select this option, I can still filter base on ACLS ?

    You are applying a group based setting… If you want other users to have access via IP then throw them into another group after setting up some way of authenticating the users. Simplest is IP.

  • Unblock applications on E2Guardian

    7
    0 Votes
    7 Posts
    2k Views
    P

    @ravegen:

    susamlicubuk,

    I do not know what ip are used by dropbox application or yahoo messenger application or our 3rd party application.  So I also asked where will I find those since in the realtime tab, I do not see those client user blocked.

    It's not blocked, per say. Like I mentioned in the other thread, it's due to the programs not trusting  the certificate from E2 Guardian… Don't enable MITM until you understand networking enough to run packet captures and make exceptions..

  • E2Guardian using * for subdomain

    6
    0 Votes
    6 Posts
    909 Views
    P

    @ravegen:

    pfsensation,

    so theres no need to specify subdomains ?

    For this particular case, and in my testing. There wasn't a need, as Dropbox only seemed to care about its main domain. Dropbox.com.

  • E2Guardian: Failed to negotiate ssl connection to client

    12
    0 Votes
    12 Posts
    3k Views
    P

    @ravegen:

    so to block dropbox, skype, yahoo messenger is to mitm ssl disrupting connection and to allow them under mitm ssl connection is to place them on exemption, right?

    Pretty much, yes. Although if you completely want to block them, use banned list and don't rely on the SSL pinning to block it as the developers of the platform can change things.

  • Control the traffic for each user.

    Moved
    3
    0 Votes
    3 Posts
    657 Views
    marcellocM

    Squid can use captive portal authentication. this will help lightsquid get complete http/https report.

  • E2Guardian translation key missing

    1
    0 Votes
    1 Posts
    464 Views
    No one has replied
  • 0 Votes
    3 Posts
    1k Views
    A

    This is exactly the setup I would like to configure as well.

    Effectively it looks like we would need to be able to set IPSEC as the applicable interface within squid, but that doesn't seem to be an option. Has anyone else been able to get this working effectively?

  • Lightsquid password error

    2
    0 Votes
    2 Posts
    1k Views
    A

    Hi,

    I had the same problem on SG-3100. I have checked logs and got info:
    2018-05-16 19:59:52: (mod_auth.c.525) password doesn't match for / username: admin, IP:

    so for test I renamed user from admin to testadmin and works.

    It seems that webGUI is not changing password for default user admin :-(

    Best regrads,
    Andcza

  • Rc.filter_configure_sync: [squid] Installed but disabled

    3
    0 Votes
    3 Posts
    679 Views
    R

    yes squid is enabled and started as seen on pfsense gui

  • Inbound load balancing using HAProxy

    6
    0 Votes
    6 Posts
    981 Views
    F

    Thanks very much for explaining this to me! Very much appreciated! :)

  • Squid (or another proxy) for chain-proxy for several resources

    3
    0 Votes
    3 Posts
    443 Views
    M

    cool, thanks! will look onto it

  • Squid

    4
    0 Votes
    4 Posts
    688 Views
    KOMK

    but if you put me where I should do those configurations I'd appreciate it.

    That depends on your OS.  For Windows, in the proxy definition dialog there is a 'Bypass for local addresses' checkbox or something similar.

  • Problem blocking youtube with squidguard

    2
    0 Votes
    2 Posts
    2k Views
    E

    Hi, in my opinion you need to create a new list in Target categories called Denied sites, writte youtube.com (Domain List) and youtube.com/ (URL List), then you need Denied the list in Groups ACL. APPLY in General Settings.

  • PFSENSE, Squid + SquidGuard User based ACL´s

    2
    0 Votes
    2 Posts
    990 Views
    KOMK

    I don't think so.  Here is what you have to work with when using a squidguard ACL:

    Enter client's IP address or domain or "username" here. To separate them use space.

    Example:
    IP: 192.168.0.1 - Subnet: 192.168.0.0/24 or 192.168.1.0/255.255.255.0 - IP-Range: 192.168.1.1-192.168.1.10
    Domain: foo.bar matches foo.bar or *.foo.bar
    Username: 'user1'
    Ldap search (Ldap filter must be enabled in General Settings): ldapusersearch ldap://192.168.0.100/DC=domain,DC=com?sAMAccountName?sub?(&(sAMAccountName=%s)(memberOf=CN=it%2cCN=Users%2cDC=domain%2cDC=com))

  • Squid NTLM Authentication

    Moved
    2
    0 Votes
    2 Posts
    762 Views
    No one has replied
  • SSL Certificate Deamon Children?

    1
    0 Votes
    1 Posts
    458 Views
    No one has replied
  • Squid (Forward) Proxy - Setting Outbound Interface/Gateway

    3
    0 Votes
    3 Posts
    6k Views
    D

    I had the same issue. After searching I found a solution, I don't remember who posted these or I'd give them props. You'll need something like this in your Squid advanced options:

    acl vpn_clients src 192.168.1.0/24 tcp_outgoing_address xxx.xxx.xxx.xxx vpn_clients

    You'll also need a way to update the outgoing address if it's not static. I have a cron job to run this:

    #!/bin/sh # Variables VPN_IFACE=ovpnc1 SQUID_CONFIG_FILE=/usr/local/etc/squid/squid.conf # Get current IP address of VPN interface VPN_IFACE_IP=$(ifconfig $VPN_IFACE | awk '{print $2}' | egrep -o '([0-9]+\.){3}[0-9]+') # Check if VPN interface is up and exit if it isn't if [ -z "$VPN_IFACE_IP" ] then         exit 0; fi # Check current IP for VPN interface in squid.conf file VPN_CONFIG_IP=$(grep -m 1 "tcp_outgoing_address" $SQUID_CONFIG_FILE | awk '{print $2}' | egrep -o '([0-9]+\.){3}[0-9]+') # Check if the config file matches the current VPN interface IP, and if so exit script if [ "$VPN_IFACE_IP" == "$VPN_CONFIG_IP" ] then         exit 0; fi # Replace the previous IP address in the squid.conf file with the current VPN interface address sed -ie 's/'"$VPN_CONFIG_IP"'/'"$VPN_IFACE_IP"'/' $SQUID_CONFIG_FILE # Force reload of the new squid.conf file /usr/local/sbin/squid -k reconfigure
  • Using Squid with Limiters To Restrict Bandwidth

    1
    1 Votes
    1 Posts
    382 Views
    No one has replied
  • HAProxy Web site OWA collision

    7
    0 Votes
    7 Posts
    1k Views
    P

    You my friend are officially on my Christmas card list. Thank You !!
    If you like Siberian Husky puppys, there will be a live stream of them in June.
    If you have a donation button somewhere point me to it.

Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.