SquidGuard Default Blacklist SafeSearch settings and Shallalist

[BobFather]

I am new to pfSense. 
Used IPCop for several years, but have switched because Configuration is much better with pfSense.
Trying to setup SquidGuard to filter using Shallalist Blacklist.
List seems to be working correctly but I lost the "default" web search filtering that was working before.
With the Default SquidGuard Database It would include the SafeSearch and also redirect actual unacceptable searches before providing results.
Have been searching on how to configure this or keep the default functionality while using a more advanced blacklist.

Any Ideas, or am I missing something simple.
I am very seriously needing this filtering and am open to alternate suggestions.
Thanks

[dvserg]

Inplaced SquidGuard blacklist is replaced with Shallalist Blacklist.
You can use only one blacklist. For restoring inplaced SG blacklist you can reinstall package.

[BobFather]

I have already reinstalled the package to get the search filtering back.
Was wondering how to "include" the search filtering in a more advanced list.
Or is there already a list out there that includes the default "safesearch" features?

[dvserg]

Shallalist Blacklist have searchengines option

[BobFather]

Yes but I can only set it to Allow or Deny.
I don't want to shut the search engine down, just control it.
Somehow the Default Settings before loading a blacklist (have tried Shallalist and several others)
Rewrite the search URL so the search engines run in SafeSearch mode and also seem to filter the Search Expresions directly.  I would like to include this WITH a blacklist.

Have been researching and I think there might be a rewrite rule I can setup under SquidGuard to modify the URL's, but crashed my pfSense box trying to see what would work.  Just finished reloading and restoring my backup.

Thanks for any help or ideas you may have.

[BobFather]

I just blew up my install again.
I am trying to use the Rewrite Rules under SquidGuard to modify the URL's of the searches to include SafeSearch paramagers.

I found these on one of my searches:
s@(google../search?.q=.)@\1&safe=active@i
s@(google../images.q=.)@\1&safe=active@i
s@(google../groups.q=.)@\1&safe=active@i
s@(google../news.q=.)@\1&safe=active@i

but taking the "(google..*/search?.q=.)" as the original match
and using "\1&safe=active" as the modification
is causing my pfSense to crash.

Is this the way to do what I want, or is there another way?
I know on the SquidGuard sight it talks about modifying the configuration file to include customizations,
but I am not familar with what file to modify or where to change it.

[dvserg]

@BobFather:

I just blew up my install again.
I am trying to use the Rewrite Rules under SquidGuard to modify the URL's of the searches to include SafeSearch paramagers.

I found these on one of my searches:
s@(google../search?.q=.)@\1&safe=active@i
s@(google../images.q=.)@\1&safe=active@i
s@(google../groups.q=.)@\1&safe=active@i
s@(google../news.q=.)@\1&safe=active@i

but taking the "(google..*/search?.q=.)" as the original match
and using "\1&safe=active" as the modification
is causing my pfSense to crash.

Is this the way to do what I want, or is there another way?
I know on the SquidGuard sight it talks about modifying the configuration file to include customizations,
but I am not familar with what file to modify or where to change it.

Use 'Rewrite' item for define Google safe search rule
Example:
Item s@(google../search?.q=.)@\1&safe=active@i
Must be added as
Target URL = (google../search?.q=.)
Replace To URL  = \1&safe=active

And etc…

[BobFather]

I have already tried using a rewrite item to do this twice.
Target URL = (google..*/search?.q=.)
Replace To URL  = \1&safe=active

Doing this caused something in the configuration to go bad and pfSense started acting like it was just installed.
Installed Packages disapeared, pfSense DropDown GUI reverted to default pfSense GUI, then it just quit working.

Restore of backup wouldn't run, so I reloaded from CD and restored.

I thought I had done something wrong, so tried again and got same results.

Are you positive this should work? 
I can try again, but expect to have to reload if the results come out the same as the last 2 times.

I do appreciate the help. 
Have everything else working by using Shallalist and Expression Rules.
This would be the "Icing on the cake".

Thanks

[choup]

I seem to have run into this same Google SafeSearch problem. I have implemented SquidGuard on a regular school K12LTSP server and this works perfectly.

It seems that there is something in the pfSense configuration file that is awry.

using rewrite item:
Target URL = (google..*/search?.q=.)
Replace To URL  = \1&safe=active

Causes the system to lose its configuration? To my way of thinking, this sure seems like a bug in how pfSense handles data input in this area.

Has anyone found a fix/workaround for the Google SafeSearch?

Charlie

[dvserg]

http://forum.pfsense.org/index.php/topic,13074.0.html

[choup]

DVSERG

Looked at the link you provided, don't know how that resolves the problem, because it is still not working.

I have installed pfSense v1.2.2, reinstalled squid and squidguard packages, installed blacklists, and checked to make sure squidguard was working correctly.

However, once you try to add the rewrite info for Google SafeSearch it blows out, defaults to different web admin theme, loses all package settings and base configuration. Cannot re-load from backups either. If you close and reopen the browser, it won't even let you access the web console.

The only way you're going to see this problem and understand it is for you to try doing it on a system.

Your response to BobFather is the same one I'm trying and it's not working.

"Use 'Rewrite' item for define Google safe search rule"
Example:
Item s@(google../search?.q=.)@\1&safe=active@i
Must be added as
Target URL = (google../search?.q=.)
Replace To URL  = \1&safe=active

Thanks for the feedback.

Charlie

[dvserg]

Looked at the link you provided, don't know how that resolves the problem, because it is still not working.

Exists package manager bug with 'rowhelper' field and \1 \2 \x codes  - config will crashed
Neet fix this bug.

[choup]

Thanks again for the response DVSERG.

Hopefully this bug will get fixed soon, otherwise pfSense is really not usable in an educational environment due to not being able to properly block unwanted content.

Charlie

[dvserg]

SquidGuard safesearch Google and Yandex(ru/com) update. ! For test ONLY, Not for worked systems !

• download 'http://diskatel.narod.ru/pfSense/packages/squidguard_safesearch.zip'
• unpack to '/usr/local/pkg'

Changes:

• ACL: order
• ACL/Default: rewrite
    – added sys rewrite 'safesrch_google'

Please test..

[dvserg]

Any body interested this?  ???

[choup]

You the man! I've been testing the proxy and web filter most of the evening and everything seems to be working like it needs to.

I had a little trouble figuring out how to enable the safesrch_google rewrite, but finally did. The Google SafeSearch appears to be working perfectly as I tried numerous searches for various content.

I now feel a lot more comfortable putting this in an educational environment.

Thank you very much for your hard work here, it is very much appreciated!

Thanks again,

Charlie

[dvserg]

I want add more search engines what support safesearch.
Any body know, what engines (exclude Google) do it ?

[jsg]

I am highly interested by this and downloaded the file.
But I need first to make a backup of my pfsense box to try it.

[jsg]

Hi, I found this : http://www.safesearchlive.com/
They have a list of search engines  (some of them is first time I hear about…)

[dvserg]

@jsg:

Hi, I found this : http://www.safesearchlive.com/
They have a list of search engines  (some of them is first time I hear about…)

Thanks