SquidGuard Default Blacklist SafeSearch settings and Shallalist

BobFather

I have already tried using a rewrite item to do this twice.
Target URL = (google..*/search?.q=.)
Replace To URL = \1&safe=active

Doing this caused something in the configuration to go bad and pfSense started acting like it was just installed.
Installed Packages disapeared, pfSense DropDown GUI reverted to default pfSense GUI, then it just quit working.

Restore of backup wouldn't run, so I reloaded from CD and restored.

I thought I had done something wrong, so tried again and got same results.

Are you positive this should work?
I can try again, but expect to have to reload if the results come out the same as the last 2 times.

I do appreciate the help.
Have everything else working by using Shallalist and Expression Rules.
This would be the "Icing on the cake".

Thanks

choup

I seem to have run into this same Google SafeSearch problem. I have implemented SquidGuard on a regular school K12LTSP server and this works perfectly.

It seems that there is something in the pfSense configuration file that is awry.

using rewrite item:
Target URL = (google..*/search?.q=.)
Replace To URL = \1&safe=active

Causes the system to lose its configuration? To my way of thinking, this sure seems like a bug in how pfSense handles data input in this area.

Has anyone found a fix/workaround for the Google SafeSearch?

Charlie

dvserg

http://forum.pfsense.org/index.php/topic,13074.0.html

choup

DVSERG

Looked at the link you provided, don't know how that resolves the problem, because it is still not working.

I have installed pfSense v1.2.2, reinstalled squid and squidguard packages, installed blacklists, and checked to make sure squidguard was working correctly.

However, once you try to add the rewrite info for Google SafeSearch it blows out, defaults to different web admin theme, loses all package settings and base configuration. Cannot re-load from backups either. If you close and reopen the browser, it won't even let you access the web console.

The only way you're going to see this problem and understand it is for you to try doing it on a system.

Your response to BobFather is the same one I'm trying and it's not working.

"Use 'Rewrite' item for define Google safe search rule"
Example:
Item s@(google../search?.q=.)@\1&safe=active@i
Must be added as
Target URL = (google../search?.q=.)
Replace To URL = \1&safe=active

Thanks for the feedback.

Charlie

dvserg

Looked at the link you provided, don't know how that resolves the problem, because it is still not working.

Exists package manager bug with 'rowhelper' field and \1 \2 \x codes - config will crashed
Neet fix this bug.

choup

Thanks again for the response DVSERG.

Hopefully this bug will get fixed soon, otherwise pfSense is really not usable in an educational environment due to not being able to properly block unwanted content.

Charlie

dvserg

SquidGuard safesearch Google and Yandex(ru/com) update. ! For test ONLY, Not for worked systems !

download 'http://diskatel.narod.ru/pfSense/packages/squidguard_safesearch.zip'
unpack to '/usr/local/pkg'

Changes:

ACL: order
ACL/Default: rewrite
– added sys rewrite 'safesrch_google'

Please test..

dvserg

Any body interested this? ???

choup

You the man! I've been testing the proxy and web filter most of the evening and everything seems to be working like it needs to.

I had a little trouble figuring out how to enable the safesrch_google rewrite, but finally did. The Google SafeSearch appears to be working perfectly as I tried numerous searches for various content.

I now feel a lot more comfortable putting this in an educational environment.

Thank you very much for your hard work here, it is very much appreciated!

Thanks again,

Charlie

dvserg

I want add more search engines what support safesearch.
Any body know, what engines (exclude Google) do it ?

jsg

I am highly interested by this and downloaded the file.
But I need first to make a backup of my pfsense box to try it.

jsg

Hi, I found this : http://www.safesearchlive.com/
They have a list of search engines (some of them is first time I hear about…)

dvserg

@jsg:

Hi, I found this : http://www.safesearchlive.com/
They have a list of search engines (some of them is first time I hear about…)

Thanks

jsg

I just tried your add but I can't get it working.
Do I only have to select the 'rewrite' to google in the default tab and tehn apply to activate Google safe search?
Looking at the log , it looks to be enable:
default {
pass !in-addr !blk_BL_aggressive !blk_BL_dating !blk_BL_downloads !blk_BL_drugs !blk_BL_hacking !blk_BL_porn !blk_BL_sex_lingerie !blk_BL_spyware !blk_BL_tracker !blk_BL_violence !blk_BL_warez !blk_BL_weapons all
redirect 301:http://192.168.1.1:8000/captiveportal-contenu.html
rewrite safesrch_google
log block.log
}

But if I put 'porn' in the search box, I am given a long choice of site. If I happen manually safe=active to the URL , this activate the safesearch thought…

Thanks

jsg

I have played a bit with the regexp string and it looks like either:

squidguard doesn't recognise goole string
squid doesn't use squidguard rewritten url

I also found this:

02.02.2009 12:00:45 : sg_create_config: add rewrites:
success safesrch_google;
error
02.02.2009 12:00:45 : sg_create_config: add Default
02.02.2009 12:00:45 : sg_redirector_base_url: Select redirector base url (301:http://192.168.1.1:8000/captiveportal-contenu.html)
02.02.2009 12:00:45 : sg_reconfigure: save squidGuard config to '/usr/local/etc/squidGuard/squidGuard.conf'.
02.02.2009 12:00:45 : squid_reconfigure: Remove old redirector options from Squid config.
02.02.2009 12:00:45 : squid_reconfigure: Add new redirector options to Squid config.

But I do not know what is this error and where to look for. Other blocking (website) is correctly filtered and redirected to the 301 webpage.

dvserg

@jsg:

I have played a bit with the regexp string and it looks like either:

squidguard doesn't recognise goole string

squid doesn't use squidguard rewritten url

Pls e-mail me. i send to you new XML

dvserg

Package updated. 'Safesearch' option and ACL rules hide/show added.

rafael.cardoso

after update destinations don´t show in rules, just [] shows in acls, ???

dvserg

@rafael.cardoso:

after update destinations don´t show in rules, just [] shows in acls, ???

All ACL rules hidden - click 'Destination ruleset >' string for show

jsg

I tried the new package and got all request to google being redirected to page 301 until I unchecked all rule set.
I loaded again the Shalalist and configured it and filtering is working.
But , Google and other search engines filtering doesn't work. Doing a test with yahoo , it looks the rewriting is not correct

See the url once I put the 'porno' word in the search box:

http://fr.yahoo.com/_ylt=AhltjCPx7r.4zVo89_YwgLmhVM8F;_ylv=0/SIG=1149dkbce/*-http://fr.search.yahoo.com/search?p=porno&fr=yfp-t-501&ei=UTF-8&rd=r1

I think your package is for platform 1.1 and I am running 1.2 (the only one available on mirrors). Would that be the problem?