Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    SquidGuard and blank redirects?

    Scheduled Pinned Locked Moved pfSense Packages
    57 Posts 10 Posters 47.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      dvserg
      last edited by

      Hello flachance.
      I have a little comment about 'sgerror.php':
      This file writed for squidGuard needs. If redirect options in config invalid or not accesible. then content passed SG in the not-dependence SG-rules. And, sgerror.php always accesible for squidGuard and handle all him's redirections.
      Format sgerror.php:
      Main and impotant 'sgerror.php?url=_my_url',  all others included for retrieve client-info from squidGuard ('a n i s t u' - values). ANISTU used for error-page information (nothing any).
      _my_url have 3 forms:

      • http://myself.errorpage or https://myself.errorpage - this only redirect to '//myself.errorpage'
        example: 'sgerror.php?url=http://example.com&…'
      • errcode<space>text ('404 You cant access') - this display generated error page (or inplaced in IE error page)
        example: 'sgerror.php?url=404%20You%20cant%20access&a=...' // << url encoding exists
      • tags 'blank' and 'blank_img' - blank page and blank img for replacing banners(i use this)
        example: 'sgerror.php?url=blank&a=...' - display blank page</space>

      SquidGuardDoc EN  RU Tutorial
      Localization ru_PFSense

      1 Reply Last reply Reply Quote 0
      • C
        ciarocci
        last edited by

        DVSerg,

        The line you gave me looks exactly like the line already in my file unless my eyes are deceiving me.  How is the line different then what I already have?

        flachance,

        Did you have to reboot to make the change from https to http and what version of PFSense are you running?

        Chris

        1 Reply Last reply Reply Quote 0
        • D
          dvserg
          last edited by

          You config have
          redirect https://192.168.1.1/sgerror.php?url=http%3A%2F%2Fwww.kmaconnect.com&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u

          Must be
          redirect https://192.168.1.1/sgerror.php?url=http://www.kmaconnect.com&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u

          Bug already fixed for '%3A%2F%2F'

          SquidGuardDoc EN  RU Tutorial
          Localization ru_PFSense

          1 Reply Last reply Reply Quote 0
          • C
            ciarocci
            last edited by

            Oh, I understand.  You want me to install the newest version of SG.  I'll do that.  Thanks.

            Chris

            1 Reply Last reply Reply Quote 0
            • D
              dvserg
              last edited by

              @ciarocci:

              Oh, I understand.  You want me to install the newest version of SG.  I'll do that.  Thanks.

              Chris

              Language barrier in action  :D

              SquidGuardDoc EN  RU Tutorial
              Localization ru_PFSense

              1 Reply Last reply Reply Quote 0
              • C
                ciarocci
                last edited by

                ;D Yep  ;D

                1 Reply Last reply Reply Quote 0
                • F
                  flachance
                  last edited by

                  No reboot required Chris.

                  1 Reply Last reply Reply Quote 0
                  • A
                    acidrop
                    last edited by

                    hello!

                    I've upgraded squidguard to the latest version and i have pfsense webgui running in https mode.
                    Also squid is in trasparent mode.I've made a block list of domains on squidguard which works but instead of redirecting to a local web server ip it shows a error page like this:

                    https://192.168.1.1/sgerror.php?

                    can anyone tell me how can i avoid this?

                    1 Reply Last reply Reply Quote 0
                    • F
                      flachance
                      last edited by

                      If you read this thread carefully, you'll see that is a problem that others have run into.  There is something in this package that does not re-direct properly when you have your webGUID set to HTTPS.  I am not aware of any work around.

                      dvserg, have you been able to reproduce this behavior?  Do you have any idea what's going on with that?  ???

                      Thanks!

                      1 Reply Last reply Reply Quote 0
                      • C
                        ciarocci
                        last edited by

                        I believe dvserg has fixed this issue, but I have not tried the newest version yet.  It almost sounds to me like acidrop hasn't put anything in the Default Redirect section of the default tab.  Have you entered in a URL in that section acidrop

                        Chris

                        1 Reply Last reply Reply Quote 0
                        • A
                          acidrop
                          last edited by

                          hello ciarocci!

                          first of all i've read all articles but i didn't fully understood what's going on.. :)
                          secondly yes i've put in default redirect an url (a local web server address which points to a page that says: "this page is blocked by your admin") but instead of this appears the error that i told you before…

                          1 Reply Last reply Reply Quote 0
                          • C
                            ciarocci
                            last edited by

                            acidrop, try putting your pfSense webGUI back on http and see what happens.  You may have to apply changes again in SquidGuard after you do that.  There might still be a problem with this working in HTTPS?  DVSerg?  I myself am unable to change my webGUI to port 80 because it just won't change no matter how many times I apply the change, but that is another issue and others have said they have no problem doing that.  Give that a try and report back.

                            Chris

                            1 Reply Last reply Reply Quote 0
                            • A
                              acidrop
                              last edited by

                              hi

                              I tried that and if i put webgui at port 80 everything works ok.Just on https is the problem….
                              Also i have another issue which isn't something new...when i restart pfsense squidguard service doesn't start
                              automatically although it's enabled..i have to press apply again to make it work

                              1 Reply Last reply Reply Quote 0
                              • D
                                dvserg
                                last edited by

                                Hi all
                                Still, the problem remains with HTTPS?
                                Please say - this problem bof modes: on transparent and on non-transparent?
                                –-
                                To acidrop - yes, this bug exists and i know about.

                                PS thanks all for replaying.  :)

                                SquidGuardDoc EN  RU Tutorial
                                Localization ru_PFSense

                                1 Reply Last reply Reply Quote 0
                                • A
                                  acidrop
                                  last edited by

                                  hi dvserg !

                                  I've checked it on both transparent and non transparent mode and the problem is the same.

                                  1 Reply Last reply Reply Quote 0
                                  • C
                                    ciarocci
                                    last edited by

                                    Confirmed.  On HTTPS the errors still persist.

                                    1 Reply Last reply Reply Quote 0
                                    • D
                                      DarknessBBB
                                      last edited by

                                      Same problem for me :(

                                      1 Reply Last reply Reply Quote 0
                                      • A
                                        acidrop
                                        last edited by

                                        the error is now corrected…de-install squidguard and install again..you will see a new option on the general settings: Redirect mode

                                        1 Reply Last reply Reply Quote 0
                                        • C
                                          ciarocci
                                          last edited by

                                          Awesome, the redirects work as planned.  One thing to note, the redirects do not work if you put them in the "Destinations" section.

                                          1 Reply Last reply Reply Quote 0
                                          • D
                                            dvserg
                                            last edited by

                                            @ciarocci:

                                            Awesome, the redirects work as planned.  One thing to note, the redirects do not work if you put them in the "Destinations" section.

                                            How does it happens? Example exists?

                                            SquidGuardDoc EN  RU Tutorial
                                            Localization ru_PFSense

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.