URL Blacklist squidGuard

[aGeekhere]

http://dsi.ut-capitole.fr/blacklists/download/blacklists_for_pfsense.tar.gz
This one is the only one that I know of that is still being maintained.

[javerleo]

@ageekhere said in URL Blacklist squidGuard:

http://dsi.ut-capitole.fr/blacklists/download/blacklists_for_pfsense.tar.gz
This one is the only one that I know of that is still being maintained.

Thanks, but it is not working.

The output:

Begin blacklist update
Start download.
Download archive http://dsi.ut-capitole.fr/blacklists/download/blacklists_for_pfsense.tar.gz
Download complete
Unpack archive
Scan blacklist categories.
Found 63 items.
Start rebuild DB.
Copy DB to workdir.
Reconfigure Squid proxy.
Blacklist update complete.

However, when checking "Common ACL" tab, one can see that the categories are not there.

Some clue?

[aGeekhere]

@javerleo Under Target Rules List click the + button

[kirshman]

For my machine i had to use
http://dsi.ut-capitole.fr/blacklists/download/blacklists_for_pfsense_reducted.tar.gz
the full size one wouldn't load all the way, so it wouldn't filter certain categories.

[javerleo]

@ageekhere said in URL Blacklist squidGuard:

@javerleo Under Target Rules List click the + button

Thanks, but that is not the problem. The categories list is empty.

[javerleo]

@kirshman Thanks for the suggestion, but I have the same issue with the reducted file.
The categories are created in the /var/db/squidGuard directory, but then they are not available in the SquidGuard tabs.

[javerleo]

At least a recent copy of Shallalist tarball would be useful.

Somebody?

[Reeko]

@javerleo Hi. I'm currently using this blacklist. You need to build the database here:

If the categories are not showing under "Common ACL" then press the "Restore Default" and download it again.

You could put the same URL here:

Check the "Blacklkist" option to enable the black list system.
If, after all this, the categories still are not showing, try to update the pfsense, or reboot the system.

[Rhuan]

@ageekhere said in URL Blacklist squidGuard:

http://dsi.ut-capitole.fr/blacklists/download/blacklists_for_pfsense.tar.gz

Obrigado! Estava a procura de uma lista que funciona-se, já que a Shallalist foi descontinuada.

[hrqconceicao]

@rhuan Tb enfrentei esse problema. Tomara que não descontinuem essa. Eu gostava da Shallalist :(

[dolson11]

Anyone have any luck getting this to work?

THanks

[Rhuan]

@dolson11 said in URL Blacklist squidGuard:

Anyone have any luck getting this to work?

THanks

Usei a lista acima sugerida pelo @aGeekhere e deu certo.

[dolson11]

@rhuan I still cant get it to show the categories

[dolson11]

I am really surprised that netgate does not offer a list. because the advertise that is has pfsense but its really of no use without a active list. Someone needs to start a new business and charge $20 a month for list access.

[Rhuan]

@dolson11
Utilizo o Squid + SquidGuard.
Veja como fiz.

Vá em: Services > Proxy filter SquidGuard > General settings

Depois seleciono Blacklist e clico em Download para baixar a lista e categorias.

Agora clico em Groups ACL e crio uma.

Logo abaixo, veja que as categorias da lista aparecem pra mim.

Espero ter ajudado!

[dolson11]

@rhuan I think I am missing something. It downloaded ok

[Rhuan]

@dolson11

Vi que foi apresentado uma mensagem de erro. Você precisa adicionar a rede que seu SquidGuard vai trabalhar, ex.: 10.10.0.0/23

Nesta rede (LAN) que as políticas de acesso serão empregadas.

[dolson11]

@rhuan Still no luck .... I must be doing something wrong.

[senseivita]

Hey guys, on OPNsense there another one:
http://pgl.yoyo.org/adservers/serverlist.php?hostformat=nohtml
I don't know if the format can be used as is or if it needs to be converted. It also parses categories so I assume it has all the fields needed to work and should be n't be too hard toeverything in there to work and shouldn't be that hard in a Bash script, or from what I hear trivial in Python. I don't know Python myself so…yeah.

I already checked, it looks like the categories are nothing but lists in folders:

Knowing that you can easily use one of the many lists there are, e.g;

Many with their own classifications, for example; Steven Black's. grep or awk or whatever is the easiest to remove the bad IP address-per-entry these come with put 'em in category folders, tar it, rsync it into a local web server, point pfSense to it. Maybe even add to the script to trigger the Squidguard update, there are some examples in the ACME package if I remember correctly. :) They should serve at least as hints to places in the filesystem.

Another option that comes to mind, is transforming the already-in-pfSense lists from pfBlockerNG but, I've never found it easy dealing with any native package-related thing on pfSense. They have some sort of obfuscation or inexplicably obvious oversight, I can't tell exactly what, but will make you miserable.

The file from l'Université Toulouse 1 appears to have additional files for heuristics or something (somebody will correct me, I hope), but the domain lists are on every category/folder whereas the others aren't, so I think it's a safe bet you'll be fine without them. Good luck!

[pontoexe]

O único link que consegui encontrar que ainda está funcionando na nova versão do pfsense é esse aqui:

http://dsi.ut-capitole.fr/blacklists/download/all.tar.gz