Dansguardian package for 2.0
-
Have you ever seen this error yet when restarting the service after a reinstall
dansguardian[23364]: Error binding ipc server file (try using the SysV to stop DansGuardian then try starting it again or doing an 'rm /tmp/.dguardianipc').
squid account doesn't have permission to the /tmp dir i'm thinking… or it does but the /tmp gets deleted on every reboot i believe. i change the permission for a quick fix but also a reboot seems to solve it but it does come back here and there.
This is related to dansguardian process user.
As clamav socket and dansguardian must be run by the same user, I read clam user from conf and assign it to dansguardian. This user translation generates ipc file error.
Maybe a better uninstall script solve this.Is it happening just on reinstalls or every time?
-
just when I re-installs for far
-
I've pushed a fix on interface select description reported by mschiek01.
-
In the dansguardan.conf file, you can configure where the log file is stored. Would it be possible to add a field within the log menu to allow us to change the location? I'm also going to see if lightsquid and squidguard can have the same options add to the their packages.. This would allow users to use lightsquid for logging web access
-
I'm working on sarg to get these logs.
It has time reports better then lightsquid. -
you are the MAN!!! Sarg time reports are a lot better IMHO!!! I've attach a script i've used in the past, found it on the net so you may have seen it already… Only problem I had it with(why i dont use it) it doesnt like when I would rotate the logs for some reason. I didn't spend alot of time on it since we there was lightsquid already.
Not to ask for too much, but would this be a package or built-in to dansguardian? Be nice to have it as a package and be able to use dansguardian and/or squid log file for reporting. Now i'm asking for too much,have it create separate reports for each system if possible. There have been many users that have brought up sarg, but no one ever finished it for pfsense.
Stephen
-
I've attach a script i've used in the past, found it on the net so you may have seen it already… Only problem I had it with(why i dont use it) it doesnt like when I would rotate the logs for some reason. I didn't spend alot of time on it since we there was lightsquid already.
Thank's. reading docs and tutorias is the first step to understand what gui needs for a good setup.
Not to ask for too much, but would this be a package or built-in to dansguardian? Be nice to have it as a package and be able to use dansguardian and/or squid log file for reporting.
Package. I`ll try to detect logs and but that option on gui.
Now i'm asking for too much,have it create separate reports for each system if possible.
Maybe on second release :)
There have been many users that have brought up sarg, but no one ever finished it for pfsense.
If you want to do some tests before gui, here are the packages:
i386
http://e-sac.siteseguro.ws/packages/8/All/sarg-2.3.2.tbzamd64
http://e-sac.siteseguro.ws/packages/amd64/8/All/sarg-2.3.2.tbz -
good stuff!! I'm using an old port, sarg-2.2.7.1_2. I'll uninstall and give this one a try with the script I have.
-
Does Squid have to be installed to use Dansguardian? Or is it included in the package? Thanks for the great work.
-
Dansguardian requires squid but not squid package for pfsense.
If you want to use both packages, install first squid package and then dansguardian.
-
Not so good news for those who want ssl filtering on pfsense
http://forum.pfsense.org/index.php/topic,46207.msg242062.html#msg242062
-
:-(
-
Can't seem to get this working, installed, set to LAN interface, added IPs to filter group. Set browser proxy to LAN IP Port 8080, but I keep getting a dansguardian error connection to proxy in the system log and PC can't get to internet.
Did I miss something? Are there other packages that have to be installed?
-
You must set a proxy to dansguardian send requests after filtering.
users -> dansguardian -> proxy(squid) -> internet
Also check if you have firewall rules allowing access to dansguardian port.
-
Got the firewall rule added but still no go. Can I use squid installed on the same pfsense box?
-
Got the firewall rule added but still no go. Can I use squid installed on the same pfsense box?
sure.
Dansguardian installs squid package. If you know how to configure it, just edit config file.
If you want to use pfsense squid package, just install it from package menu.
-
Good news!
Ermal found what was missing to compilation and now we have a package with ssl filtering built in ;D
http://forum.pfsense.org/index.php/topic,46207.msg242298.html#msg242298
I'm now getting DENIED Failed to negotiate ssl connection to client CONNECT 0 0 SSL Site 1 200 but I'll publish changes to get help from everyone who wants to test.
To get latest package compilation, I suggest an deinstall and then a install.
-
I have been watching this thread over the months and waiting for DG to be released; However, I'm slightly concerned my knowledge of DG and configuring it for pfS will cause me problems. Be gentle.
I currently have:
pfS 2.0.1
snort 2.9.1 pkg v. 2.1.1
squid 2.7.9 pkg v.4.3.1
squidGuard 1.4_2 pkg v.1.9.1
Lightquid 1.8.0 pkg v.1.5
installed and working. When I install DG, what packages will I need to uninstall? I read that I can keep squid installed since it's a package of pfS, but does that also mean that squidGuard is ok or will DG replace squidGuard and snort? I'm pretty sure I have to remove squidGuard and snort but I'd like to know for sure before I make the change.Also, does DG work better with the version of squid it comes packaged with and installs or are they virtually the same in operation once DG is working?
Should I wait a while longer before switching over to DG because "something great" is just around the corner or is now a good time, in terms of package development and completeness, to switch over?
Thank you for help.
-
When I install DG, what packages will I need to uninstall?
none. You can use all together.
I read that I can keep squid installed since it's a package of pfS, but does that also mean that squidGuard is ok or will DG replace squidGuard and snort?
Dansguardian can replace squidguard but not snort. Snort is an IDS/IPS and Dansguardian is a web content filtering.
Also, does DG work better with the version of squid it comes packaged with and installs or are they virtually the same in operation once DG is working?
If forwards request to a proxy server, any squid version will work fine.
Should I wait a while longer before switching over to DG because "something great" is just around the corner or is now a good time, in terms of package development and completeness, to switch over?
The only native feature from dansguardian that is not working is the experimental ssl filtering. All other options are working fine.
Just keep in mind that if you need time acls, you will need to transfer it to squid conf as dansguardian does implement it only on few acls.
-
Hello,
Thanks a lot for this great package.
I was trying it yesterday and i saw maybe a problem with Pfsense 2.0.1 Release. Nano BSD with CF 4G and Soekris 5001-70
a have 2 WANs , WAN1 with Static IP and WAN2 with PPPOE, with Failover. All this configuration was working great.
I install the Dansguardian package and the failover still working great , but after i reboot the soekris, my PPOE connection didn't came back, and i saw in the PPP Logs that the PPP was waiting for one process to die. I also saw in the systems logs some Dansguardian privileges errors.
i was fighting 1 hour and try to reboot again and still the same, but after i deinstall the Dansguardian package and reboot again the pppoe connect very quick.
it' s maybe a coincidence but i will know if somebody had the same problem.
I could make some test for you if you need it.
Thanks for your help.
regards
