SquidGuard Default Blacklist SafeSearch settings and Shallalist

choup

DVSERG

Looked at the link you provided, don't know how that resolves the problem, because it is still not working.

I have installed pfSense v1.2.2, reinstalled squid and squidguard packages, installed blacklists, and checked to make sure squidguard was working correctly.

However, once you try to add the rewrite info for Google SafeSearch it blows out, defaults to different web admin theme, loses all package settings and base configuration. Cannot re-load from backups either. If you close and reopen the browser, it won't even let you access the web console.

The only way you're going to see this problem and understand it is for you to try doing it on a system.

Your response to BobFather is the same one I'm trying and it's not working.

"Use 'Rewrite' item for define Google safe search rule"
Example:
Item s@(google../search?.q=.)@\1&safe=active@i
Must be added as
Target URL = (google../search?.q=.)
Replace To URL = \1&safe=active

Thanks for the feedback.

Charlie

dvserg

Looked at the link you provided, don't know how that resolves the problem, because it is still not working.

Exists package manager bug with 'rowhelper' field and \1 \2 \x codes - config will crashed
Neet fix this bug.

choup

Thanks again for the response DVSERG.

Hopefully this bug will get fixed soon, otherwise pfSense is really not usable in an educational environment due to not being able to properly block unwanted content.

Charlie

dvserg

SquidGuard safesearch Google and Yandex(ru/com) update. ! For test ONLY, Not for worked systems !

download 'http://diskatel.narod.ru/pfSense/packages/squidguard_safesearch.zip'
unpack to '/usr/local/pkg'

Changes:

ACL: order
ACL/Default: rewrite
– added sys rewrite 'safesrch_google'

Please test..

dvserg

Any body interested this? ???

choup

You the man! I've been testing the proxy and web filter most of the evening and everything seems to be working like it needs to.

I had a little trouble figuring out how to enable the safesrch_google rewrite, but finally did. The Google SafeSearch appears to be working perfectly as I tried numerous searches for various content.

I now feel a lot more comfortable putting this in an educational environment.

Thank you very much for your hard work here, it is very much appreciated!

Thanks again,

Charlie

dvserg

I want add more search engines what support safesearch.
Any body know, what engines (exclude Google) do it ?

jsg

I am highly interested by this and downloaded the file.
But I need first to make a backup of my pfsense box to try it.

jsg

Hi, I found this : http://www.safesearchlive.com/
They have a list of search engines (some of them is first time I hear about…)

dvserg

@jsg:

Hi, I found this : http://www.safesearchlive.com/
They have a list of search engines (some of them is first time I hear about…)

Thanks

jsg

I just tried your add but I can't get it working.
Do I only have to select the 'rewrite' to google in the default tab and tehn apply to activate Google safe search?
Looking at the log , it looks to be enable:
default {
pass !in-addr !blk_BL_aggressive !blk_BL_dating !blk_BL_downloads !blk_BL_drugs !blk_BL_hacking !blk_BL_porn !blk_BL_sex_lingerie !blk_BL_spyware !blk_BL_tracker !blk_BL_violence !blk_BL_warez !blk_BL_weapons all
redirect 301:http://192.168.1.1:8000/captiveportal-contenu.html
rewrite safesrch_google
log block.log
}

But if I put 'porn' in the search box, I am given a long choice of site. If I happen manually safe=active to the URL , this activate the safesearch thought…

Thanks

jsg

I have played a bit with the regexp string and it looks like either:

squidguard doesn't recognise goole string
squid doesn't use squidguard rewritten url

I also found this:

02.02.2009 12:00:45 : sg_create_config: add rewrites:
success safesrch_google;
error
02.02.2009 12:00:45 : sg_create_config: add Default
02.02.2009 12:00:45 : sg_redirector_base_url: Select redirector base url (301:http://192.168.1.1:8000/captiveportal-contenu.html)
02.02.2009 12:00:45 : sg_reconfigure: save squidGuard config to '/usr/local/etc/squidGuard/squidGuard.conf'.
02.02.2009 12:00:45 : squid_reconfigure: Remove old redirector options from Squid config.
02.02.2009 12:00:45 : squid_reconfigure: Add new redirector options to Squid config.

But I do not know what is this error and where to look for. Other blocking (website) is correctly filtered and redirected to the 301 webpage.

dvserg

@jsg:

I have played a bit with the regexp string and it looks like either:

squidguard doesn't recognise goole string

squid doesn't use squidguard rewritten url

Pls e-mail me. i send to you new XML

dvserg

Package updated. 'Safesearch' option and ACL rules hide/show added.

rafael.cardoso

after update destinations don´t show in rules, just [] shows in acls, ???

dvserg

@rafael.cardoso:

after update destinations don´t show in rules, just [] shows in acls, ???

All ACL rules hidden - click 'Destination ruleset >' string for show

jsg

I tried the new package and got all request to google being redirected to page 301 until I unchecked all rule set.
I loaded again the Shalalist and configured it and filtering is working.
But , Google and other search engines filtering doesn't work. Doing a test with yahoo , it looks the rewriting is not correct

See the url once I put the 'porno' word in the search box:

http://fr.yahoo.com/_ylt=AhltjCPx7r.4zVo89_YwgLmhVM8F;_ylv=0/SIG=1149dkbce/*-http://fr.search.yahoo.com/search?p=porno&fr=yfp-t-501&ei=UTF-8&rd=r1

I think your package is for platform 1.1 and I am running 1.2 (the only one available on mirrors). Would that be the problem?

dvserg

I tried the new package and got all request to google being redirected to page 301 until I unchecked all rule set.

Possible you block search engines in Shalalist This block all known popular engines (Yahoo/google too) - 301 report about this.

test
http://fr.search.yahoo.com/search;_ylt=A1f4cfpNMYhJEgkBc8pjAQx.?p=porn&y=Rechercher&fr=pnf-reg&rd=r1
get
Nous n'avons trouvé aucun résultat pour la recherche sur 'porn'.

jsg

hmm , I did not. The only thing I did was to reinstall the package to get the latest release and it looks it made something to the destination rule set. Once I loaded again the Shalalist and set it up again, this was working back as normal.
I digged on squidguard/squid on the internet but there is apparently no easy way to debug / trace what is going on with the rewrite ::). Any idea/hint ?

Thanks.

jsg

Interesting. I have click on your 'test' weblink and I got the following (see picture).
So there is clearly something wrong with my set up then…

yahho_safe.png_thumb