Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Dansguardian package for 2.0

    Scheduled Pinned Locked Moved pfSense Packages
    492 Posts 51 Posters 471.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      Cino
      last edited by

      just when I re-installs for far

      1 Reply Last reply Reply Quote 0
      • marcellocM
        marcelloc
        last edited by

        I've pushed a fix on interface select description reported by mschiek01.

        Treinamentos de Elite: http://sys-squad.com

        Help a community developer! ;D

        1 Reply Last reply Reply Quote 0
        • C
          Cino
          last edited by

          In the dansguardan.conf file, you can configure where the log file is stored. Would it be possible to add a field within the log menu to allow us to change the location? I'm also going to see if lightsquid and squidguard can have the same options add to the their packages.. This would allow users to use lightsquid for logging web access

          1 Reply Last reply Reply Quote 0
          • marcellocM
            marcelloc
            last edited by

            I'm working on sarg to get these logs.
            It has time reports better then lightsquid.

            Treinamentos de Elite: http://sys-squad.com

            Help a community developer! ;D

            1 Reply Last reply Reply Quote 0
            • C
              Cino
              last edited by

              you are the MAN!!! Sarg time reports are a lot better IMHO!!! I've attach a script i've used in the past, found it on the net so you may have seen it already… Only problem I had it with(why i dont use it) it doesnt like when I would rotate the logs for some reason. I didn't spend alot of time on it since we there was lightsquid already.

              Not to ask for too much, but would this be a package or built-in to dansguardian? Be nice to have it as a package and be able to use dansguardian and/or squid log file for reporting. Now i'm asking for too much,have it create separate reports for each system if possible. There have been many users that have brought up sarg, but no one ever finished it for pfsense.

              Stephen

              sarg-report.txt

              1 Reply Last reply Reply Quote 0
              • marcellocM
                marcelloc
                last edited by

                @Cino:

                I've attach a script i've used in the past, found it on the net so you may have seen it already… Only problem I had it with(why i dont use it) it doesnt like when I would rotate the logs for some reason. I didn't spend alot of time on it since we there was lightsquid already.

                Thank's. reading docs and tutorias is the first step to understand what gui needs for a good setup.

                @Cino:

                Not to ask for too much, but would this be a package or built-in to dansguardian? Be nice to have it as a package and be able to use dansguardian and/or squid log file for reporting.

                Package. I`ll try to detect logs and but that option on gui.

                @Cino:

                Now i'm asking for too much,have it create separate reports for each system if possible.

                Maybe on second release  :)

                @Cino:

                There have been many users that have brought up sarg, but no one ever finished it for pfsense.

                If you want to do some tests before gui, here are the packages:
                i386
                http://e-sac.siteseguro.ws/packages/8/All/sarg-2.3.2.tbz

                amd64
                http://e-sac.siteseguro.ws/packages/amd64/8/All/sarg-2.3.2.tbz

                Treinamentos de Elite: http://sys-squad.com

                Help a community developer! ;D

                1 Reply Last reply Reply Quote 0
                • C
                  Cino
                  last edited by

                  good stuff!! I'm using an old port, sarg-2.2.7.1_2. I'll uninstall and give this one a try with the script I have.

                  1 Reply Last reply Reply Quote 0
                  • R
                    rollandh73
                    last edited by

                    Does Squid have to be installed to use Dansguardian? Or is it included in the package? Thanks for the great work.

                    1 Reply Last reply Reply Quote 0
                    • marcellocM
                      marcelloc
                      last edited by

                      Dansguardian requires squid but not squid package for pfsense.

                      If you want to use both packages, install first squid package and then dansguardian.

                      Treinamentos de Elite: http://sys-squad.com

                      Help a community developer! ;D

                      1 Reply Last reply Reply Quote 0
                      • marcellocM
                        marcelloc
                        last edited by

                        Not so good news for those who want ssl filtering on pfsense

                        http://forum.pfsense.org/index.php/topic,46207.msg242062.html#msg242062

                        Treinamentos de Elite: http://sys-squad.com

                        Help a community developer! ;D

                        1 Reply Last reply Reply Quote 0
                        • C
                          Cino
                          last edited by

                          :-(

                          1 Reply Last reply Reply Quote 0
                          • S
                            svtlightning
                            last edited by

                            Can't seem to get this working, installed, set to LAN interface, added IPs to filter group. Set browser proxy to LAN IP Port 8080, but I keep getting a dansguardian error connection to proxy in the system log and PC can't get to internet.

                            Did I miss something? Are there other packages that have to be installed?

                            1 Reply Last reply Reply Quote 0
                            • marcellocM
                              marcelloc
                              last edited by

                              You must set a proxy to dansguardian send requests after filtering.

                              users -> dansguardian -> proxy(squid) -> internet

                              Also check if you have firewall rules allowing access to dansguardian port.

                              Treinamentos de Elite: http://sys-squad.com

                              Help a community developer! ;D

                              1 Reply Last reply Reply Quote 0
                              • S
                                svtlightning
                                last edited by

                                Got the firewall rule added but still no go. Can I use squid installed on the same pfsense box?

                                1 Reply Last reply Reply Quote 0
                                • marcellocM
                                  marcelloc
                                  last edited by

                                  @svtlightning:

                                  Got the firewall rule added but still no go. Can I use squid installed on the same pfsense box?

                                  sure.

                                  Dansguardian installs squid package. If you know how to configure it, just edit config file.

                                  If you want to use pfsense squid package, just install it from package menu.

                                  Treinamentos de Elite: http://sys-squad.com

                                  Help a community developer! ;D

                                  1 Reply Last reply Reply Quote 0
                                  • marcellocM
                                    marcelloc
                                    last edited by

                                    Good news!

                                    Ermal found what was missing to compilation and now we have a package with ssl filtering built in  ;D

                                    http://forum.pfsense.org/index.php/topic,46207.msg242298.html#msg242298

                                    I'm now getting DENIED Failed to negotiate ssl connection to client CONNECT 0 0 SSL Site 1 200 but I'll publish changes to get help from everyone who wants to test.

                                    To get latest package compilation, I suggest an deinstall and then a install.

                                    Treinamentos de Elite: http://sys-squad.com

                                    Help a community developer! ;D

                                    1 Reply Last reply Reply Quote 0
                                    • A
                                      awsiemieniec
                                      last edited by

                                      I have been watching this thread over the months and waiting for DG to be released; However, I'm slightly concerned my knowledge of DG and configuring it for pfS will cause me problems.  Be gentle.

                                      I currently have:
                                      pfS 2.0.1
                                      snort 2.9.1 pkg v. 2.1.1
                                      squid 2.7.9 pkg v.4.3.1
                                      squidGuard 1.4_2 pkg v.1.9.1
                                      Lightquid 1.8.0 pkg v.1.5
                                      installed and working.  When I install DG, what packages will I need to uninstall?  I read that I can keep squid installed since it's a package of pfS, but does that also mean that squidGuard is ok or will DG replace squidGuard and snort?  I'm pretty sure I have to remove squidGuard and snort but I'd like to know for sure before I make the change.

                                      Also, does DG work better with the version of squid it comes packaged with and installs or are they virtually the same in operation once DG is working?

                                      Should I wait a while longer before switching over to DG because "something great" is just around the corner or is now a good time, in terms of package development and completeness, to switch over?

                                      Thank you for help.

                                      1 Reply Last reply Reply Quote 0
                                      • marcellocM
                                        marcelloc
                                        last edited by

                                        @awsiemieniec:

                                        When I install DG, what packages will I need to uninstall?

                                        none. You can use all together.

                                        @awsiemieniec:

                                        I read that I can keep squid installed since it's a package of pfS, but does that also mean that squidGuard is ok or will DG replace squidGuard and snort?

                                        Dansguardian can replace squidguard but not snort. Snort is an IDS/IPS and Dansguardian is a web content filtering.

                                        @awsiemieniec:

                                        Also, does DG work better with the version of squid it comes packaged with and installs or are they virtually the same in operation once DG is working?

                                        If forwards request to a proxy server, any squid version will work fine.

                                        @awsiemieniec:

                                        Should I wait a while longer before switching over to DG because "something great" is just around the corner or is now a good time, in terms of package development and completeness, to switch over?

                                        The only native feature from dansguardian that is not working is the experimental ssl filtering. All other options are working fine.

                                        Just keep in mind that if you need time acls, you will need to transfer it to squid conf as dansguardian does implement it only on few acls.

                                        Treinamentos de Elite: http://sys-squad.com

                                        Help a community developer! ;D

                                        1 Reply Last reply Reply Quote 0
                                        • D
                                          danisam
                                          last edited by

                                          Hello,

                                          Thanks a lot for this great package.
                                          I was trying it yesterday and i saw maybe a problem with Pfsense 2.0.1 Release. Nano BSD with CF 4G and Soekris 5001-70
                                          a have 2 WANs , WAN1 with Static IP and WAN2 with PPPOE, with Failover. All this configuration was working great.
                                          I install the Dansguardian package and the failover still working great , but after i reboot the soekris, my PPOE connection didn't came back, and i saw in the PPP Logs that the PPP was waiting for one process to die. I also saw in the systems logs some Dansguardian privileges errors.
                                          i was fighting 1 hour and try to reboot again and still the same, but after i deinstall the Dansguardian package and reboot again the pppoe connect very quick.
                                          it' s maybe a coincidence but i will know if somebody had the same problem.
                                          I could make some test for you if you need it.
                                          Thanks for your help.
                                          regards

                                          1 Reply Last reply Reply Quote 0
                                          • marcellocM
                                            marcelloc
                                            last edited by

                                            On my system(not nanobsd), dansguardian take 01 minute to start at but I get no permission erros.

                                            Can you send these permission errors?

                                            Treinamentos de Elite: http://sys-squad.com

                                            Help a community developer! ;D

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.