Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Proxy server - access control - blacklist problem

    pfSense Packages
    5
    18
    17.5k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      dvserg
      last edited by

      Why you not use "Destinations" in SquidGuard ?
      Possible define self destinations and allow/deny this too.

      SquidGuardDoc EN  RU Tutorial
      Localization ru_PFSense

      1 Reply Last reply Reply Quote 0
      • J
        josey
        last edited by

        hm, dont know didnt even think about that, and now try and it can block

        but this with blacklist worked in 1.2 alpha versions

        1 Reply Last reply Reply Quote 0
        • J
          josey
          last edited by

          @dvserg:

          Why you not use "Destinations" in SquidGuard ?
          Possible define self destinations and allow/deny this too.

          nope, not working.

          tryed and nothing, want block added domains, and to be even more bad, blacklist seems to stop working …

          1 Reply Last reply Reply Quote 0
          • D
            dvserg
            last edited by

            @josey:

            blacklist seems to stop working

            Possible view errors. logs. messages ?

            SquidGuardDoc EN  RU Tutorial
            Localization ru_PFSense

            1 Reply Last reply Reply Quote 0
            • J
              josey
              last edited by

              nope, nothing in log, no errors, proxy just stop to block ???
              i think i can try to reinstall PFS from start, but i have already done that, and same thing…

              1 Reply Last reply Reply Quote 0
              • D
                dvserg
                last edited by

                @josey:

                nope, nothing in log, no errors, proxy just stop to block ???
                i think i can try to reinstall PFS from start, but i have already done that, and same thing…

                Can you call from putty

                /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf -d

                Must be 3 last lines

                2008-11-10 16:42:37 [80344] squidGuard 1.2.0 started (1226324557.820)
                2008-11-10 16:42:37 [80344] recalculating alarm in 1043 seconds
                2008-11-10 16:42:37 [80344] squidGuard ready for requests (1226324557.980)

                SquidGuardDoc EN  RU Tutorial
                Localization ru_PFSense

                1 Reply Last reply Reply Quote 0
                • J
                  josey
                  last edited by

                  hm, yes it is started …
                  nothing, it seems that i must accept that this cant work...

                  1 Reply Last reply Reply Quote 0
                  • D
                    dvserg
                    last edited by

                    @josey:

                    hm, yes it is started …
                    nothing, it seems that i must accept that this cant work...

                    Sorry my question.
                    You say 'this cant work' - this is mean: squid not worked OR not filter sites?
                    What you squid/squidGuard services state?  Started or NO ?

                    SquidGuardDoc EN  RU Tutorial
                    Localization ru_PFSense

                    1 Reply Last reply Reply Quote 0
                    • J
                      josey
                      last edited by

                      im talking about squid which works great (sometimes stops to block but reboot fix things) and manually entered domains to black list which are not blocked by squid…

                      here whatever i add on this page it wont work ...

                      and when i add here squid stops to block, but service is running…

                      1 Reply Last reply Reply Quote 0
                      • D
                        dvserg
                        last edited by

                        I do, how you say

                        • adding site to squid blacklist
                        • create (only!)  squidGuard Dest item with this site

                        Result - all success blocked

                        SquidGuardDoc EN  RU Tutorial
                        Localization ru_PFSense

                        1 Reply Last reply Reply Quote 0
                        • F
                          fribert
                          last edited by

                          I've defined my own destinations here as well, no problem.
                          Created destination with my own URL's listed

                          Under default blocked the destination
                          Under specific ACL's blocked the destination

                          Works like a charm.

                          The blacklist URL is for downloading a blacklist from a publisher.

                          1 Reply Last reply Reply Quote 0
                          • J
                            josey
                            last edited by

                            ok then,
                            please put print screen of your configuration, and put, uumm,,,

                            www.google.com to blacklist

                            thanks

                            1 Reply Last reply Reply Quote 0
                            • P
                              phantom_cod3r
                              last edited by

                              Hello,

                              I'm having the same issue with Squid; where the black list is not working. I have set "www.google.com" into the black list, and ALL" web traffic gets blocked by Squid even browsing to the GUI itself of PFsense "Localhost" gets blocked, even though I have checked the bypass proxy for local addresses.

                              I also tested this on the latest platform on PFsense "pfSense 1.2.3-RC1" and the Squid is worst on this one, the tabs are no longer present, there are drop down menus; which are not working on Internet Explorer only on firefox, in addition to the black list not working.  ???

                              Attached you will find the info of my platform and tests performed. Any help would be appreciated. Thanks!

                              untitled1.JPG
                              untitled1.JPG_thumb
                              untitled.JPG
                              untitled.JPG_thumb
                              untitled_config.JPG
                              untitled_config.JPG_thumb
                              untitled_version.JPG
                              untitled_version.JPG_thumb
                              untitled_version_pkg.JPG
                              untitled_version_pkg.JPG_thumb

                              1 Reply Last reply Reply Quote 0
                              • C
                                chudy
                                last edited by

                                you can always use the Custom Options under General Settings of Proxy Server:
                                for sample sites: www.youporn.com www.pornhub.com

                                acl blocksite url_regex youporn pornhub; http_access deny blocksite
                                ```this will only blocked if squid sees in URL youporn or pornhub now what if client will ping youporn.com and use the ip addess in exchange of domain name(youporn.com)…
                                then use dstdom_regex. But its slower than url_regex.
                                

                                acl blocksite dstdom_regex youporn pornhub; http_access deny blocksite

                                
                                now its up to you to decide. ;)
                                
                                This problem is just in GUI but squid 2.6 will always work as it should be. For more info about acl and http_access deny visit the wiki page of www.squid-cache.org
                                
                                In black list have you tried```
                                google;youporn;pornhub
                                ```it should be with ;
                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.