Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Installing the Dansguardian package in PFSense - One user's experience

    Scheduled Pinned Locked Moved Documentation
    86 Posts 27 Posters 158.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • marcellocM
      marcelloc
      last edited by

      @Chewy:

      Firstly - Thanks Marcello that's excellent news. Can I just clarify that where you say "apply config and reboot" do you mean manually apply the config or restore from a saved xml config ? Would that work ? (Just saves me some time if it does).

      Reinstall the package, go on dansguardian gui, manually apply the config. If you whant to test boot process, reboot after apply config.

      Treinamentos de Elite: http://sys-squad.com

      Help a community developer! ;D

      1 Reply Last reply Reply Quote 0
      • R
        rs
        last edited by

        Hello All

        Many thanks to the author of the Dansguardian-Package. This is a very usefull function added to pfSense.

        I found a what appears to be a bug in the handling of the Dansguardian Package configuration on pfSense 2.

        Setup:
        pfSense 2.0.1-release
        Dansguardian Package (2.12.0.0 pkg; v.0.1.5.3)
        squid Package (2.7.9 pkg v.4.3.1)

        The Problem:
        If I set on the configuration page of Dansguardian (>Services>Dansguardian>Daemon) the Proxi-IP to 127.0.0.1 and leave the value for the Proxy-Port empty (for the default) in the config file of Dansguardian (/usr/local/etc/dansguardian/dansguardian.conf) the value 127.0.0.1 will be written for the proxy-port entry (proxyport = 127.0.0.1).

        My Solution:
        Manually set the value of the proxyport setting in /usr/local/etc/dansguardian/dansguardian.conf
        (In the pfSense-webgui for example by browsing to the config-file via >Diagnostics>Edit File).

        Regards
        Roman

        1 Reply Last reply Reply Quote 0
        • marcellocM
          marcelloc
          last edited by

          @rs:

          The Problem:
          If I set on the configuration page of Dansguardian (>Services>Dansguardian>Daemon) the Proxi-IP to 127.0.0.1 and leave the value for the Proxy-Port empty (for the default) in the config file of Dansguardian (/usr/local/etc/dansguardian/dansguardian.conf) the value 127.0.0.1 will be written for the proxy-port entry (proxyport = 127.0.0.1).

          My Solution:
          Manually set the value of the proxyport setting in /usr/local/etc/dansguardian/dansguardian.conf

          Why not just fill proxy port fied?  ???

          Treinamentos de Elite: http://sys-squad.com

          Help a community developer! ;D

          1 Reply Last reply Reply Quote 0
          • R
            rs
            last edited by

            @marcelloc:

            Why not just fill proxy port fied?  ???

            Yes, this works, and is of course a better solution. I just not have tried it until now.

            1 Reply Last reply Reply Quote 0
            • K
              kryptos
              last edited by

              Hi All,

              Where I could find exceptioniplist on the menu. It seems I can't find it.

              Regards,
              Rocel

              1 Reply Last reply Reply Quote 0
              • marcellocM
                marcelloc
                last edited by

                @kryptos:

                Where I could find exceptioniplist on the menu. It seems I can't find it.

                http://forum.pfsense.org/index.php/topic,42664.msg274045.html#msg274045

                Treinamentos de Elite: http://sys-squad.com

                Help a community developer! ;D

                1 Reply Last reply Reply Quote 0
                • H
                  hf
                  last edited by

                  Hi, I think there is an option under in DansGuardian to set timing. Access lists->site and url

                  1 Reply Last reply Reply Quote 0
                  • H
                    hf
                    last edited by

                    Hi, I think there is an option under in DansGuardian to set timing. Access lists->site and url

                    1 Reply Last reply Reply Quote 0
                    • H
                      hf
                      last edited by

                      Hi and thanks to all you where of great help..
                      I installed DansGuardian and Squid from packages, works fine, just a few questions,

                      1. is there a need to put in a blacklist url into Dansguardian?
                      2. I'm trying to get "phrase" to work and it doesn't seem to?
                        I tried to just put e.g. "<gambling>" with or without spaces front or back but with out any response? Was able to enter any gambling site there is?
                        And while we are at it, where are the category settings? Also when a block comes up it just says Category regular expressions? wondering.
                        TIA

                      P.S. as a newbie using pfsense, thanks to the Makers, its unreal, great work.
                      and thanks to the maker of the DG pkg very nice job.</gambling>

                      1 Reply Last reply Reply Quote 0
                      • marcellocM
                        marcelloc
                        last edited by

                        @hf:

                        I tried to just put e.g. "<gambling>" with or without spaces front or back but with out any response? Was able to enter any gambling site there is?</gambling>

                        You have to check to get dansguardian working before going on access lists.

                        Check if it's listening,
                        Check if dansguardian is sending traffic to squid
                        Check if clients are using dansguardian ip/port as their proxies.
                        check log files to see what is passing through dansguardian.
                        etc, etc, etc.

                        This package gui follow dansguardian conf files, so you need some dansguardian knowledge to get it working

                        @hf:

                        thanks to the maker of the DG pkg very nice job.

                        Thanks! donations are always welcome ;D

                        att,
                        Marcello Coutinho

                        Treinamentos de Elite: http://sys-squad.com

                        Help a community developer! ;D

                        1 Reply Last reply Reply Quote 0
                        • H
                          hf
                          last edited by

                          Thanks,
                          When i put into Site e.g. "google.com" it got blocked so that tells me that it listens and works, doesn't it?

                          And i added the rule under nat so i understand that all traffic is forwarded to DG?

                          Now the log files I wasn't able to  figure it out? I'm using strictly the GUI.
                          TIA

                          1 Reply Last reply Reply Quote 0
                          • marcellocM
                            marcelloc
                            last edited by

                            @hf:

                            When i put into Site e.g. "google.com" it got blocked so that tells me that it listens and works, doesn't it?

                            Did you enabled the phrase Banned Lists on default group?

                            @hf:

                            And i added the rule under nat so i understand that all traffic is forwarded to DG?

                            Using nat to get it transparent, you can only filter http.

                            @hf:

                            Now the log files I wasn't able to  figure it out? I'm using strictly the GUI.

                            The log will be usefull only on console tail -f /var/log/dansguardian/access.log

                            Treinamentos de Elite: http://sys-squad.com

                            Help a community developer! ;D

                            1 Reply Last reply Reply Quote 0
                            • E
                              emuttillo
                              last edited by

                              guys, i'm at a loss here… I installed the dansguardian package and then had to uninstall it, and now after a reinstall, I can't get the gui components of the package to ever finish installing...  it just stops at this part:

                              Removing Dansguardian components...
                              Tabs items... done.
                              Menu items... done.
                              Services... done.
                              Loading package instructions...
                              Deinstall commands... done.
                              Removing package instructions...done.
                              Auxiliary files... done.
                              Package XML... done.
                              Configuration... done.
                              Beginning package installation for Dansguardian...
                              Downloading package configuration file... done.
                              Saving updated package information... done.
                              Downloading Dansguardian and its dependencies... 
                              Checking for package installation... Loading package configuration... done.
                              Configuring package components...
                              Additional files... done.
                              Loading package instructions...
                              Custom commands...
                              Executing custom_php_install_command()...
                              

                              Can someone please tell me what I should do here?  I have DG working on another server but wanted to do it all on the pfsense box if i could…that way I can filter sites for my kids IPODs and stuff that doesn't have proxy settings easily available.

                              Appreciate your help, thanks in advance!

                              1 Reply Last reply Reply Quote 0
                              • marcellocM
                                marcelloc
                                last edited by

                                Can you check if there is any errors on console/system logs?

                                How old is your dansguardian install?

                                Treinamentos de Elite: http://sys-squad.com

                                Help a community developer! ;D

                                1 Reply Last reply Reply Quote 0
                                • E
                                  emuttillo
                                  last edited by

                                  I didn't really see any errors on the logs or console….  i think it's probably about a year old installation at best.  I have upgraded it whenever the upgrade was available from the main repository.  I think dg is actually installing, but i'm not seeing any portions of it available for configuration in the GUI.

                                  1 Reply Last reply Reply Quote 0
                                  • marcellocM
                                    marcelloc
                                    last edited by

                                    @emuttillo:

                                    but i'm not seeing any portions of it available for configuration in the GUI.

                                    If you can't see it on pfsense menu, try to remove/install the package again.

                                    Treinamentos de Elite: http://sys-squad.com

                                    Help a community developer! ;D

                                    1 Reply Last reply Reply Quote 0
                                    • E
                                      emuttillo
                                      last edited by

                                      hi Marcello,
                                      I've done that probably 5 times and still not showing up…it just stops at that one point and nothing happens, even if i let it sit there for an hour it never finishes apparently.

                                      i'm tempted to blow it away tonight and reinstall pfsense2 and restore backup and try again... hate to do that if i don't have to though.

                                      doesn't appear that it's fully installing when i run the package, it goes through some of the motions but never registers the service as available and the GUI components never show up.

                                      1 Reply Last reply Reply Quote 0
                                      • marcellocM
                                        marcelloc
                                        last edited by

                                        I'm have no idea what's going on with your install, I've tested here and could uninstall/install dansguardian without errors.

                                        I'm going to test it on other machines too.

                                        Treinamentos de Elite: http://sys-squad.com

                                        Help a community developer! ;D

                                        1 Reply Last reply Reply Quote 0
                                        • E
                                          emuttillo
                                          last edited by

                                          ok, well, i guess i have no other choice but to fully wipe the pfsense install and start over… luckily, i don't have a very involved configuration so it shouldn't take too long, just have to deal with a wife who will not be happy for me blocking her facebook time.  lol

                                          1 Reply Last reply Reply Quote 0
                                          • J
                                            jai23155
                                            last edited by

                                            Nice write up.. i have installed Dansguardian and configured it as you said. but after finishing 1st step, when i test it I cannot browse anything at all, no good site, no bad site, no pfsense either. any idea what i am doing wrong.

                                            OK.. managed to setup DG successfully. Now, how do i check the reports based on AD username??

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.