Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Help me with squid guard

    Scheduled Pinned Locked Moved pfSense Packages
    25 Posts 3 Posters 7.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • Cry HavokC Offline
      Cry Havok
      last edited by

      Funny, I used the search function and I found seven pages of posts about SquidGuard.  More than one contained relevant information, like this.

      If that doesn't help you need to actually describe the problem, phrases like "it's failed" or "it doesn't work" provide no information.

      1 Reply Last reply Reply Quote 0
      • I Offline
        iamthed
        last edited by

        i searched but not found it  ???
        okay juz to make it clear..
        from the picture above u can see that i've set rules to deny porn,gambling,drugs,proxy,etc..

        example:
        1. i type www.youporn.com <–- it contain "porn" in the URL so the squidguard must blocked it..
        but i can access it..

        2. i type www.proxy4free.com <--- it contain "proxy" in the URL but still not blocked..

        and so does the gambling,drugs,etc

        maybe i'm wrong setting the squid..
        since i'm following the video tutorial on squidguard and i'm sure 100% that the configuration is right..

        or maybe the problem is..
        i don't know the function of squid..
        i read the document it is written that squid for cache..
        is there any correlation between squid and squidguard???
        why must install squid before installing squidguard..

        do we need configuration on squid to activate squidguard?

        i'm dumb.. but i have a desire to learn

        1 Reply Last reply Reply Quote 0
        • Cry HavokC Offline
          Cry Havok
          last edited by

          Can I suggest that you actually read about SquidGuard (they have their own web site).  It doesn't work the way you think it does.

          Squid: Proxy server
          SquidGuard: Add-in for Squid to control what sites people can access.

          By installing the SquidGuard package it's automatically enabled in Squid.

          1 Reply Last reply Reply Quote 0
          • I Offline
            iamthed
            last edited by

            i've already read those article but it's not helping me..
            still it not blocked the URL.. i'm getting confuse now..
            i'm not configuring squid..
            i only configuring in squid guard.. is it correct?

            i'm dumb.. but i have a desire to learn

            1 Reply Last reply Reply Quote 0
            • Cry HavokC Offline
              Cry Havok
              last edited by

              SquidGuard uses lists of domain or host names to block.  Selecting the "porn" list does not block sites with the word "porn" in it's name but sites in the list called "porn".

              Since you obviously failed to find it, try this document on the very basics of how SquidGuard works.

              1 Reply Last reply Reply Quote 0
              • I Offline
                iamthed
                last edited by

                thx that's helpfull.. anyway i think my squidguard is not working..
                i set my default destination rule set to deny (juz to test it)
                but i can surf web..
                is there something that i missing ?
                but the service i check is on..
                squid and squidguard is on

                1.JPG
                1.JPG_thumb
                2.JPG
                2.JPG_thumb

                i'm dumb.. but i have a desire to learn

                1 Reply Last reply Reply Quote 0
                • Cry HavokC Offline
                  Cry Havok
                  last edited by

                  Have you configured your browser to use the proxy?

                  1 Reply Last reply Reply Quote 0
                  • I Offline
                    iamthed
                    last edited by

                    do i need configure my browser to use the proxy?
                    my boss gave me this project to prevent staff from accessing porn stuff..
                    if ur suggestion to configure browser to use proxy and i must go to the everyone computer in my company and set the browser?
                    i think it's not efficient.. is there any other way to solve this case?
                    or i juz block based on IP address in rules?

                    i'm dumb.. but i have a desire to learn

                    1 Reply Last reply Reply Quote 0
                    • D Offline
                      dvserg
                      last edited by

                      Enable Transparent proxy in Squid

                      SquidGuardDoc EN  RU Tutorial
                      Localization ru_PFSense

                      1 Reply Last reply Reply Quote 0
                      • I Offline
                        iamthed
                        last edited by

                        @dvserg:

                        Enable Transparent proxy in Squid

                        still the same.. i can browse.. any idea??
                        i configure the squid only like this..
                        is it wrong?

                        3.JPG
                        3.JPG_thumb

                        i'm dumb.. but i have a desire to learn

                        1 Reply Last reply Reply Quote 0
                        • D Offline
                          dvserg
                          last edited by

                          Possible view squid and squidGuard config's ?
                          /usr/local/etc/squid/squid.conf
                          /usr/local/etc/squidGuard/squidGuard.conf

                          SquidGuardDoc EN  RU Tutorial
                          Localization ru_PFSense

                          1 Reply Last reply Reply Quote 0
                          • I Offline
                            iamthed
                            last edited by

                            do you mean like this?

                            how do you see
                            /usr/local/etc/squid/squid.conf
                            /usr/local/etc/squidGuard/squidGuard.conf
                            in shell ??
                            sorry i'm newbie in freebsd this shell makes me crazy..

                            12.txt
                            13.txt
                            14.txt

                            i'm dumb.. but i have a desire to learn

                            1 Reply Last reply Reply Quote 0
                            • D Offline
                              dvserg
                              last edited by

                              still the same.. [u][b]i can browse[/b][/u].. any idea??
                              i configure the squid only like this..
                              is it wrong?
                              

                              You can browse or you users ?
                              I found this in you config

                              src test2 {
                              ip 122.200.14.67
                              }
                              ...
                              acl {
                              # 
                              test2 {
                              pass !in-addr !blk_BL_porn !blk_BL_warez [u][b]all[/b][/u]
                              redirect ...
                              rewrite test62
                              }
                              

                              From ip 122.200.14.67 - you allow browse. All any - no

                              SquidGuardDoc EN  RU Tutorial
                              Localization ru_PFSense

                              1 Reply Last reply Reply Quote 0
                              • I Offline
                                iamthed
                                last edited by

                                i'm the one who configured it.. and i test it..
                                the illustration like this

                                my PC –--->PFsense------>switch-----> router

                                when i browse i'm act as a user.. before i'm implementing it..

                                i already set the deny rules
                                see the picture above
                                is there any error on my log?

                                563.JPG
                                563.JPG_thumb

                                i'm dumb.. but i have a desire to learn

                                1 Reply Last reply Reply Quote 0
                                • D Offline
                                  dvserg
                                  last edited by

                                  Also if you setup browser proxy options  - what behavior with blocking ?

                                  SquidGuardDoc EN  RU Tutorial
                                  Localization ru_PFSense

                                  1 Reply Last reply Reply Quote 0
                                  • I Offline
                                    iamthed
                                    last edited by

                                    @dvserg:

                                    Also if you setup browser proxy options  - what behavior with blocking ?

                                    i wanna test the squidguard is working.. so i deny all as the default..
                                    if my default is deny then it must be block anything right..
                                    but i still can browse..
                                    or i should reinstall sg and squid and installed it again?
                                    hey if you don't mind can u PM me ur printscreen squid+squidguard
                                    i'd like to see it..
                                    i'm affraid that i misconfigure about the squid..
                                    and sorry if it's bother you..

                                    i'm dumb.. but i have a desire to learn

                                    1 Reply Last reply Reply Quote 0
                                    • D Offline
                                      dvserg
                                      last edited by

                                      Try this pls

                                      • disable transparent mode in squid, disable squidGuard
                                      • set you brouser Proxy options as squid configured (ip/port)
                                      • test http browsing = must work
                                      • enable SG, remove all ACL's, Default page set [all Deny], disable safesearch, Apply
                                      • test HTTP browsing - must be nothing.

                                      SquidGuardDoc EN  RU Tutorial
                                      Localization ru_PFSense

                                      1 Reply Last reply Reply Quote 0
                                      • I Offline
                                        iamthed
                                        last edited by

                                        @dvserg:

                                        Try this pls

                                        • disable transparent mode in squid, disable squidGuard
                                        • set you brouser Proxy options as squid configured (ip/port)
                                        • test http browsing = must work
                                        • enable SG, remove all ACL's, Default page set [all Deny], disable safesearch, Apply
                                        • test HTTP browsing - must be nothing.

                                        thx for ur answer but when i configure like u said i have a problem..
                                        when i set proxy..
                                        it cannot connect to internet..
                                        plz see the picture below
                                        any idea where it might be wrong??
                                        thx again

                                        1.JPG
                                        1.JPG_thumb
                                        2.JPG
                                        2.JPG_thumb
                                        3.JPG
                                        3.JPG_thumb
                                        4.JPG
                                        4.JPG_thumb

                                        i'm dumb.. but i have a desire to learn

                                        1 Reply Last reply Reply Quote 0
                                        • D Offline
                                          dvserg
                                          last edited by

                                          Why enabled squid upstream proxy? Squid has parent proxy server ?
                                          And you browser must be set to squid IP/Port, but not to upstream proxy setting.

                                          SquidGuardDoc EN  RU Tutorial
                                          Localization ru_PFSense

                                          1 Reply Last reply Reply Quote 0
                                          • I Offline
                                            iamthed
                                            last edited by

                                            @dvserg:

                                            Why enabled squid upstream proxy? Squid has parent proxy server ?
                                            And you browser must be set to squid IP/Port, but not to upstream proxy setting.

                                            thx.. it's worked.. it's blocked everything.. even i tried to change the default rules to allow all traffic..  ???

                                            but how to enable the transparent proxy server..
                                            so if client want to access website with port 80 they go to proxy server..
                                            cmiiw if i'm using transparent proxy it means i don't need to setup the browser proxy right?

                                            i already setup the like this but it's blocked all traffic..
                                            thx dvserg

                                            gbr2.JPG
                                            gbr2.JPG_thumb
                                            gbr3.JPG
                                            gbr3.JPG_thumb
                                            gbr1.JPG
                                            gbr1.JPG_thumb

                                            i'm dumb.. but i have a desire to learn

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.