• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Proxy server - access control - blacklist problem

Scheduled Pinned Locked Moved pfSense Packages
18 Posts 5 Posters 17.5k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • J
    josey
    last edited by Nov 10, 2008, 1:17 PM

    nope, nothing in log, no errors, proxy just stop to block ???
    i think i can try to reinstall PFS from start, but i have already done that, and same thing…

    1 Reply Last reply Reply Quote 0
    • D
      dvserg
      last edited by Nov 10, 2008, 1:44 PM

      @josey:

      nope, nothing in log, no errors, proxy just stop to block ???
      i think i can try to reinstall PFS from start, but i have already done that, and same thing…

      Can you call from putty

      /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf -d

      Must be 3 last lines

      2008-11-10 16:42:37 [80344] squidGuard 1.2.0 started (1226324557.820)
      2008-11-10 16:42:37 [80344] recalculating alarm in 1043 seconds
      2008-11-10 16:42:37 [80344] squidGuard ready for requests (1226324557.980)

      SquidGuardDoc EN  RU Tutorial
      Localization ru_PFSense

      1 Reply Last reply Reply Quote 0
      • J
        josey
        last edited by Nov 11, 2008, 7:23 AM

        hm, yes it is started …
        nothing, it seems that i must accept that this cant work...

        1 Reply Last reply Reply Quote 0
        • D
          dvserg
          last edited by Nov 11, 2008, 8:47 AM

          @josey:

          hm, yes it is started …
          nothing, it seems that i must accept that this cant work...

          Sorry my question.
          You say 'this cant work' - this is mean: squid not worked OR not filter sites?
          What you squid/squidGuard services state?  Started or NO ?

          SquidGuardDoc EN  RU Tutorial
          Localization ru_PFSense

          1 Reply Last reply Reply Quote 0
          • J
            josey
            last edited by Nov 13, 2008, 7:17 AM

            im talking about squid which works great (sometimes stops to block but reboot fix things) and manually entered domains to black list which are not blocked by squid…

            here whatever i add on this page it wont work ...

            and when i add here squid stops to block, but service is running…

            1 Reply Last reply Reply Quote 0
            • D
              dvserg
              last edited by Nov 13, 2008, 7:50 AM

              I do, how you say

              • adding site to squid blacklist
              • create (only!)  squidGuard Dest item with this site

              Result - all success blocked

              SquidGuardDoc EN  RU Tutorial
              Localization ru_PFSense

              1 Reply Last reply Reply Quote 0
              • F
                fribert
                last edited by Nov 13, 2008, 8:22 AM

                I've defined my own destinations here as well, no problem.
                Created destination with my own URL's listed

                Under default blocked the destination
                Under specific ACL's blocked the destination

                Works like a charm.

                The blacklist URL is for downloading a blacklist from a publisher.

                1 Reply Last reply Reply Quote 0
                • J
                  josey
                  last edited by Nov 13, 2008, 12:02 PM

                  ok then,
                  please put print screen of your configuration, and put, uumm,,,

                  www.google.com to blacklist

                  thanks

                  1 Reply Last reply Reply Quote 0
                  • P
                    phantom_cod3r
                    last edited by Jun 4, 2009, 5:04 PM

                    Hello,

                    I'm having the same issue with Squid; where the black list is not working. I have set "www.google.com" into the black list, and ALL" web traffic gets blocked by Squid even browsing to the GUI itself of PFsense "Localhost" gets blocked, even though I have checked the bypass proxy for local addresses.

                    I also tested this on the latest platform on PFsense "pfSense 1.2.3-RC1" and the Squid is worst on this one, the tabs are no longer present, there are drop down menus; which are not working on Internet Explorer only on firefox, in addition to the black list not working.  ???

                    Attached you will find the info of my platform and tests performed. Any help would be appreciated. Thanks!

                    untitled1.JPG
                    untitled1.JPG_thumb
                    untitled.JPG
                    untitled.JPG_thumb
                    untitled_config.JPG
                    untitled_config.JPG_thumb
                    untitled_version.JPG
                    untitled_version.JPG_thumb
                    untitled_version_pkg.JPG
                    untitled_version_pkg.JPG_thumb

                    1 Reply Last reply Reply Quote 0
                    • C
                      chudy
                      last edited by Jun 7, 2009, 3:06 PM Jun 7, 2009, 12:19 PM

                      you can always use the Custom Options under General Settings of Proxy Server:
                      for sample sites: www.youporn.com www.pornhub.com

                      acl blocksite url_regex youporn pornhub; http_access deny blocksite
                      ```this will only blocked if squid sees in URL youporn or pornhub now what if client will ping youporn.com and use the ip addess in exchange of domain name(youporn.com)…
                      then use dstdom_regex. But its slower than url_regex.
                      

                      acl blocksite dstdom_regex youporn pornhub; http_access deny blocksite

                      
                      now its up to you to decide. ;)
                      
                      This problem is just in GUI but squid 2.6 will always work as it should be. For more info about acl and http_access deny visit the wiki page of www.squid-cache.org
                      
                      In black list have you tried```
                      google;youporn;pornhub
                      ```it should be with ;
                      1 Reply Last reply Reply Quote 0
                      • First post
                        Last post
                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                        [[user:consent.lead]]
                        [[user:consent.not_received]]