Howto: install Dansguardian on pfSense 2.0

gadams65

First I need to thank whoever ported Dansguardian to pfSense. I had been using Dansguardian on IPCop for years and pfSense is such a superior firewall that I was hoping someday that Dansguardian would get ported.

I have created the three NAT rules as mentioned in this post, but it would appear that the https rule is not working. It blocks all https traffic when I try to go through the firewall transparently without configuring my browser to use a proxy. If I configure my browser to use a proxy, https filtering seems to work. My preference is of course to run transparently. Any ideas?

marcelloc

Did you installed dansguardian package for pfsense?

This guide is to install it by hand with no gui.

I'm not sure if https can be used in transparente mode.

proxy WPAD/PAC/auto configuration using dns+dhcp is the best way to configure browsers in a "transparent" way

gadams65

Yes I did install the package. Even with installing through the package I had to add the HTTP and 3128 NAT rules for it to work though.

Okay I'll try forcing browsers to autoconfig using dns+dhcp as you recommend. Thank you!!

valshare

@gadams65:

Okay I'll try forcing browsers to autoconfig using dns+dhcp as you recommend. Thank you!!

Hi gadams65, any news about https and transparent mode?

REgards, Valle

kryptos

Thanks for this howto I now have a working filtering. I have a question where is exception IP list located? I tried looking the menu I don't find any. Does it mean I need to configure it manually?

Thanks
Rocel

kryptos

Thanks for this howto I now have a working filtering. I have a question where is exception IP list located? I tried looking the menu I don't find any. Does it mean I need to configure it manually?

Thanks
Rocel

kryptos

Thanks for this howto I now have a working filtering. I have a question where is exception IP list located? I tried looking the menu I don't find any. Does it mean I need to configure it manually?

Thanks
Rocel

marcelloc

@kryptos:

Where is exception IP list located?

The file location is /usr/local/etc/dansguardian/lists/exceptioniplist.

I've checked and it's really missing on gui, I'll include it.

att,
Marcello Coutinho

marcelloc

version 0.1.5.4 of dansguardian package includes exceptioniplist missing field.

hf

Hi, I had DG and Squid running perfectly till….... I changed the reporting to "full reporting" then everything went down. I wasn't able to restart DG from the service manager and reboot, so i tried to reinstall the pkg. and Squid went down so reinstalled it as well, So now somehow both don't restart. any help would be appreciated.
TIA

P.S. in general DG doesn't start from the pkg menu.

marcelloc

Services tab on 2.0.1 needs a Fix.

Are you using squid3? If so, reinstall it after dansguadian.

Try to start dansguardian on console to check if it's returning errors.

hf

Thanks, I have installed version 2. I looked into the system logs and ..

root: /usr/local/etc/rc.d/dansguardian.sh: WARNING: failed to start dansguardian

php: /pkg_edit.php: The command '/usr/local/etc/rc.d/dansguardian.sh start' returned exit code '1', the output was 'kern.ipc.somaxconn: 16384 -> 16384 kern.maxfiles: 131072 -> 131072 kern.maxfilesperproc: 104856 -> 104856 kern.threads.max_threads_per_proc: 4096 -> 4096 Starting dansguardian. Error reading file /usr/local/etc/dansguardian/lists/blacklists/artnudes/urls: No such file or directory Error reading file /usr/local/etc/dansguardian/lists/blacklists/artnudes/urls: No such file or directory Error opening file: /usr/local/etc/dansguardian/lists/blacklists/artnudes/urls Error opening bannedurllist Error opening filter group config: /usr/local/etc/dansguardian/dansguardianf1.conf Error reading filter group conf file(s). Error parsing the dansguardian.conf file or other DansGuardian configuration files /usr/local/etc/rc.d/dansguardian.sh: WARNING: failed to start dansguardian'

marcelloc

check all config tabs, startup script is looking for files that was not created by package config.

hf

Thanks, so far, so good

marcelloc

It's on IP tab ;)

luxmoggy

Hello,
I followed the instruction on how to do the setup. All fine and all works.
I get a issue with squid not starting so I reinstalled it. Both DG and squid start.

But nothing is blocked. what am I missing?

Thanks
Iain

marcelloc

@luxmoggy:

But nothing is blocked. what am I missing?

what you get on system logs?

did you tried to stop dansguardian and start again?

Are you using 2.12.0.3 or 2.12.0.3_1?

luxmoggy

Hello
So I am using
Dansguardian 2.12.0.3 pkg v.0.1.7_3
Squid 3.1.20 pkg 2.0.6

I uninstalled both and rebooted. And installed one at a time, rebooting inbetween.
Both services are running without issues now.

Still not blocking the example site. "Badboys.com".
Will check log later.

Thanks

luxmoggy

Hello,
No real changes and it is working again….
Is it taking the time setting from somewhere... I haven't enabled it

Time limiting syntax:

#time: <start hour=""><start minute=""><end hour=""><end minute=""><days># Example:

##time: 9 0 17 0 01234

Remove the first # from the line above to enable this list only from

9am to 5pm, Monday to Friday.

Will add a few screen shots later.</days></end></end></start></start>

marcelloc

to confirm it, try to mess up the time config like

#tixmxex: 9 0 17 0 01234