Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Dansguardian package for 2.0

    Scheduled Pinned Locked Moved pfSense Packages
    492 Posts 51 Posters 531.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • marcellocM
      marcelloc
      last edited by

      The first update from clamav is automatic when package detects that there is no database.

      I will be an option on gui until I finish schedulle updates( blacklist and clamav)

      Treinamentos de Elite: http://sys-squad.com

      Help a community developer! ;D

      1 Reply Last reply Reply Quote 0
      • C
        Cino
        last edited by

        thanks again and great work!! You have added some nice add-ons to pfsense over the last couple of months

        no issue, but here are the processes on my box.. this is how i know its running:

        
        : ps -aux | grep dan
        clamav 13281  0.0  0.4 18036 14028  ??  INs   3:00PM   0:00.08 /usr/local/sbin/dansguardian
        clamav 13525  0.0  0.2  7796  4692  ??  IN    3:00PM   0:00.03 /usr/local/sbin/dansguardian
        clamav 13655  0.0  0.1  7796  4672  ??  IN    3:00PM   0:00.02 /usr/local/sbin/dansguardian
        clamav 13759  0.0  0.5 19060 14840  ??  IN    3:00PM   0:00.43 /usr/local/sbin/dansguardian
        clamav 14008  0.0  0.5 18036 14172  ??  IN    3:00PM   0:00.35 /usr/local/sbin/dansguardian
        clamav 14105  0.0  0.5 18036 14120  ??  IN    3:00PM   0:00.02 /usr/local/sbin/dansguardian
        clamav 14199  0.0  0.5 18036 14120  ??  IN    3:00PM   0:00.02 /usr/local/sbin/dansguardian
        clamav 14385  0.0  0.5 18036 14264  ??  IN    3:00PM   0:00.87 /usr/local/sbin/dansguardian
        clamav 14451  0.0  0.4 18036 13988  ??  IN    3:00PM   0:00.01 /usr/local/sbin/dansguardian
        clamav 14466  0.0  0.4 18036 13988  ??  IN    3:00PM   0:00.01 /usr/local/sbin/dansguardian
        clamav 14472  0.0  0.4 18036 13988  ??  IN    3:00PM   0:00.01 /usr/local/sbin/dansguardian
        clamav 16150  0.0  0.4 18036 14052  ??  IN    3:40PM   0:00.00 /usr/local/sbin/dansguardian
        clamav 16221  0.0  0.4 18036 14052  ??  IN    3:40PM   0:00.00 /usr/local/sbin/dansguardian
        clamav 16515  0.0  0.4 18036 14052  ??  IN    3:40PM   0:00.00 /usr/local/sbin/dansguardian
        clamav 16582  0.0  0.4 18036 14052  ??  IN    3:40PM   0:00.00 /usr/local/sbin/dansguardian
        clamav 16676  0.0  0.4 18036 14052  ??  IN    3:40PM   0:00.00 /usr/local/sbin/dansguardian
        clamav 16741  0.0  0.4 18036 14052  ??  IN    3:40PM   0:00.00 /usr/local/sbin/dansguardian
        clamav 16763  0.0  0.4 18036 14052  ??  IN    3:40PM   0:00.01 /usr/local/sbin/dansguardian
        clamav 16828  0.0  0.4 18036 14052  ??  IN    3:40PM   0:00.01 /usr/local/sbin/dansguardian
        clamav 16843  0.0  0.4 18036 14052  ??  IN    3:40PM   0:00.01 /usr/local/sbin/dansguardian
        clamav 17095  0.0  0.4 18036 14052  ??  IN    3:40PM   0:00.00 /usr/local/sbin/dansguardian
        root   13272  0.0  0.0  3524  1252   0  S+    3:47PM   0:00.00 grep dan
        
        
        1 Reply Last reply Reply Quote 0
        • marcellocM
          marcelloc
          last edited by

          It's running very well.

          I'll include service option too. Maybe tomorrow.

          Treinamentos de Elite: http://sys-squad.com

          Help a community developer! ;D

          1 Reply Last reply Reply Quote 0
          • marcellocM
            marcelloc
            last edited by

            version 0.1.2 is out with some fixes and improvements

            • improve blacklist import and category assign

            • include dansguardian on service

            • include log, daemon and config default xml options

            • fix some typos

            • Maybe a faster boot process (01:00 on virtualbox)

            still working on…

            • SSL men in the middle feature

            • Blacklist and clamav update frequency

            To avoid double dansguardian link on service menu(dansguardian and Dansguardian), remove 0.1.1 package before install 0.1.2

            Treinamentos de Elite: http://sys-squad.com

            Help a community developer! ;D

            1 Reply Last reply Reply Quote 0
            • C
              Cino
              last edited by

              thanks for the update.. I've give it a try in a bit

              1 Reply Last reply Reply Quote 0
              • B
                burton78
                last edited by

                Thanks for all your hard work marcelloc!  This is a great addition to pfsense!  Was wondering if adding a "transparent proxy mode" could be an option as well?

                Also I caught a typo for ya too under Daemon -> Parent proxy Settings -> Proxy Port: Sets port number "fro" proxy server.

                1 Reply Last reply Reply Quote 0
                • marcellocM
                  marcelloc
                  last edited by

                  @burton78:

                  Thanks for all your hard work marcelloc!  This is a great addition to pfsense!  Was wondering if adding a "transparent proxy mode" could be an option as well?

                  I'll include PAC configuration to dansguardian package first.

                  When you enable trasparente proxy, you are not able to authenticate or filter ssl.

                  I'ts not that good for security at all.

                  Search for WPAD, PAC proxy.js or proxy.pac to see how auto detecproxy works.

                  Also I caught a typo for ya too under Daemon -> Parent proxy Settings -> Proxy Port: Sets port number "fro" proxy server.

                  Thanks.

                  Treinamentos de Elite: http://sys-squad.com

                  Help a community developer! ;D

                  1 Reply Last reply Reply Quote 0
                  • C
                    Cino
                    last edited by

                    here is example of mine that i've been using with squid.

                    
                    function FindProxyForURL(url, host) {
                    
                    // If IP address is internal or hostname resolves to internal IP, send direct.
                    
                    	if (
                              isInNet(host, "10.0.0.0", "255.0.0.0") ||
                              isInNet(host, "172.16.0.0", "255.240.0.0") ||
                              isInNet(host, "192.168.0.0", "255.255.0.0") ||
                    		  isInNet(host, "127.0.0.0", "255.255.255.0") ||
                    		  isInNet(host, "192.168.0.100", "255.255.255.255") ||
                    		  isPlainHostName(host) ||
                    		  localHostOrDomainIs(host, "127.0.0.1") ||
                    		  dnsDomainIs(host, ".xxxx.net")
                    		)
                    
                    		return "DIRECT";
                    
                    return "PROXY 192.168.0.1:3128; DIRECT";
                    }
                    
                    

                    this is probably more to do with squid then danguardian. i've enabled forwardfor and/or xforwardfor but it always seem to get the IP address of the squid interface in the squid logs… Any ideas? I read there was a patch for squid but this patch is pretty old and you would think it was already built into squid2 and squid3..... i am using squid3 so it could be that...

                    Any ideas?

                    1 Reply Last reply Reply Quote 0
                    • marcellocM
                      marcelloc
                      last edited by

                      @Cino:

                      return "PROXY 192.168.0.1:3128; DIRECT";

                      Change this to dansguardian port and enable Auth Plugin on dansguardian general tab, this will log users.

                      to log x-forwarded ips you need to inlcude this x-forwarder no squid.conf log directive.

                      I did not found what to change but as you are using version 3.x, this doc can help
                      http://www.squid-cache.org/Doc/config/follow_x_forwarded_for/

                      EDIT
                      Try ip address authentication mode on dansguardian general tab.
                      This may log ip as a user on your squid.

                      You can also disable squid log and change dansguardian style to squid.

                      Treinamentos de Elite: http://sys-squad.com

                      Help a community developer! ;D

                      1 Reply Last reply Reply Quote 0
                      • I
                        itoxygen
                        last edited by

                        PfSense 2.0.1 install Dansguardian v.0.1.2
                        error code
                        php: /pkg_edit.php: The command '/usr/local/etc/rc.d/dansguardian stop' returned exit code '1', the output was 'dansguardian not running? (check /var/run/dansguardian.pid).'
                        Jan 30 22:13:19 dansguardian[38774]: Error reading custom image file.

                        where is problem?

                        1 Reply Last reply Reply Quote 0
                        • marcellocM
                          marcelloc
                          last edited by

                          @itoxygen:

                          PfSense 2.0.1 install Dansguardian v.0.1.2
                          error code
                          php: /pkg_edit.php: The command '/usr/local/etc/rc.d/dansguardian stop' returned exit code '1', the output was 'dansguardian not running? (check /var/run/dansguardian.pid).'
                          Jan 30 22:13:19 dansguardian[38774]: Error reading custom image file.

                          where is problem?

                          try to start on console:
                          /usr/local/etc/rc.d/dansguardian start

                          Treinamentos de Elite: http://sys-squad.com

                          Help a community developer! ;D

                          1 Reply Last reply Reply Quote 0
                          • I
                            itoxygen
                            last edited by

                            Dansguardian service status is running, but system logs error message

                            Jan 30 22:36:57 php: /pkg_edit.php: The command '/usr/local/etc/rc.d/dansguardian stop' returned exit code '1', the output was 'dansguardian not running? (check /var/run/dansguardian.pid).'
                            Jan 30 22:36:57 dansguardian[50366]: Error reading custom image file.

                            Content filter not working

                            1 Reply Last reply Reply Quote 0
                            • marcellocM
                              marcelloc
                              last edited by

                              Are you configuring client browser to use squid port or dansguardian port?

                              Can you paste return from:
                              ps ax | grep -i dansguardian

                              Treinamentos de Elite: http://sys-squad.com

                              Help a community developer! ;D

                              1 Reply Last reply Reply Quote 0
                              • I
                                itoxygen
                                last edited by

                                Squid transparent proxy mode port number 3128, I add the adress to the black list of squid, it works without problem

                                $ ps ax | grep -i dansguardian
                                  130  ??  I      0:00.00 /usr/local/sbin/dansguardian
                                  366  ??  I      0:00.00 /usr/local/sbin/dansguardian
                                  527  ??  I      0:00.00 /usr/local/sbin/dansguardian
                                  557  ??  I      0:00.00 /usr/local/sbin/dansguardian
                                  895  ??  I      0:00.00 /usr/local/sbin/dansguardian
                                1176  ??  I      0:00.00 /usr/local/sbin/dansguardian
                                1288  ??  I      0:00.00 /usr/local/sbin/dansguardian
                                1464  ??  I      0:00.00 /usr/local/sbin/dansguardian
                                1530  ??  I      0:00.00 /usr/local/sbin/dansguardian
                                48666  ??  S      0:00.00 sh -c ps ax | grep -i dansguardian
                                48931  ??  S      0:00.00 grep -i dansguardian
                                63558  ??  Is    0:00.02 /usr/local/sbin/dansguardian
                                63861  ??  I      0:00.01 /usr/local/sbin/dansguardian

                                1 Reply Last reply Reply Quote 0
                                • marcellocM
                                  marcelloc
                                  last edited by

                                  @itoxygen:

                                  Squid transparent proxy mode port number 3128, I add the adress to the black list of squid, it works without problem

                                  Your dansguardian is running.

                                  Instead of using squid on transparent mode, config your browser to use dansguardian ip and port.

                                  If you want o improve your transparente setup, configure WPAD/PAC on your DHCP.

                                  Treinamentos de Elite: http://sys-squad.com

                                  Help a community developer! ;D

                                  1 Reply Last reply Reply Quote 0
                                  • I
                                    itoxygen
                                    last edited by

                                    my system configurations was working without problem on the squidquard, I unistalled squidquard and i installed dansquardian but now filter function is not working

                                    1 Reply Last reply Reply Quote 0
                                    • marcellocM
                                      marcelloc
                                      last edited by

                                      @itoxygen:

                                      my system configurations was working without problem on the squidquard, I unistalled squidquard and i installed dansquardian but now filter function is not working

                                      Try a simple https://facebook.com with squid transparent + squidguard to see how transparent proxy is a ilusion of web filtering.

                                      Dansguardian must stays in front of squid and a proxy configuration must exist to filter https and authenticate users.

                                      If you really need transparent squid, you will need to setup a squid -> dansguardian -> squid.

                                      Dansguardian does not works like squidguard, take a look on dansguardian website do understand better how it works.

                                      Treinamentos de Elite: http://sys-squad.com

                                      Help a community developer! ;D

                                      1 Reply Last reply Reply Quote 0
                                      • I
                                        itoxygen
                                        last edited by

                                        Can you inform me with a more detailed explanation? If it is possible an explanation step by step for the settings of dans guardian will be better for me. I really appreciate your help. Thank you very much.

                                        1 Reply Last reply Reply Quote 0
                                        • marcellocM
                                          marcelloc
                                          last edited by

                                          @itoxygen:

                                          Can you inform me with a more detailed explanation? If it is possible an explanation step by step for the settings of dans guardian will be better for me. I really appreciate your help. Thank you very much.

                                          If you understand the transparent proxy limitation, follow these links to get how automatic proxy configuration works

                                          WPAD/PAC info
                                          http://www.davidpashley.com/articles/automatic-proxy.html

                                          http://www.grape-info.com/doc/win2000srv/internet-gw/wpad/index.html

                                          Treinamentos de Elite: http://sys-squad.com

                                          Help a community developer! ;D

                                          1 Reply Last reply Reply Quote 0
                                          • C
                                            Cino
                                            last edited by

                                            i'm going to keep my auto proxy config pointing directly to squid's port but on certain computers, manually enter the port for dansguardian.

                                            For client ip logging from dansguard to squid, what i'm finding is there are 2 IPs, the client IP and 127.0.0.1. Going to http://checker.samair.ru/ show's this request when I have either forwardfor and/or usexforwardfor within dansguard and Disable X-Forward in squid unchecked.

                                            squid logs only shows 127.0.0.1.. I'll have to do some more research and do some packet sniffing to verify whats going on…. Its been awhile, but i remember this work prefect when I was using 'client - hvap - squid'.. Squid reported the real client IP in its logs...

                                            EDIT: I did a quick tcpdump and dansguard seems to sending the client IP under X-Forward-For within HTTP traffic.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.