Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Dansguardian package for 2.0

    Scheduled Pinned Locked Moved pfSense Packages
    492 Posts 51 Posters 496.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      asterix
      last edited by

      Yes Shalla is what I use.

      It used to be straight forward. I see the lists after download and I have selected those. But filtering still fails to works

      Service restart now gives this error..

      Jan 29 22:35:56 dansguardian[55285]: Error connecting via ipc to url cache: No such file or directory
      Jan 29 22:35:56 dansguardian[55285]: Error connecting via ipc to url cache: No such file or directory
      Jan 29 22:30:17 root: /usr/local/etc/rc.d/dansguardian.sh: WARNING: failed to start dansguardian
      Jan 29 22:30:17 dansguardian[80665]: Exiting with error
      Jan 29 22:30:17 dansguardian[80665]: Error binding server socket (is something else running on the filter port and ip?
      Jan 29 22:30:17 dansguardian[80665]: Error binding socket: [8080 10.0.1.1 0] (Address already in use)

      1 Reply Last reply Reply Quote 0
      • marcellocM
        marcelloc
        last edited by

        Seems other daemon is running on the same port.

        Try to stop service and then save config.
        Can you check what else is running on 8080?

        Treinamentos de Elite: http://sys-squad.com

        Help a community developer! ;D

        1 Reply Last reply Reply Quote 0
        • A
          asterix
          last edited by

          Tried a clean install. Dont get the port 8080 clash but filtering still doesn't work.

          Kinda beats the purpose as bad sites are not filtered.. actually the categories are not going into effect.

          Can you re-check and see if the rules are being committed after a save?

          1 Reply Last reply Reply Quote 0
          • marcellocM
            marcelloc
            last edited by

            @asterix:

            Can you re-check and see if the rules are being committed after a save?

            what auth plugins did you selected?

            what you have on dansguardian logs?

            My acls are working fine here. I've removed and re included some sites and it reflected on config files.

            I'm also seeing log files registering users and groups as well.

            Treinamentos de Elite: http://sys-squad.com

            Help a community developer! ;D

            1 Reply Last reply Reply Quote 0
            • marcellocM
              marcelloc
              last edited by

              Something I've noticed is that multiple plugins selected have different behavior depending on how dansguardian is configured (dansguardian-> squid or squid-> dansguardian->squid).

              Try to select only one plugin before including others.

              Treinamentos de Elite: http://sys-squad.com

              Help a community developer! ;D

              1 Reply Last reply Reply Quote 0
              • A
                asterix
                last edited by

                Tried selecting each of them. I can only select one as I have multiple interfaces.

                Thinking of going back to SquidGuard as this is turning out to be a headache.

                Was wondering if the older version of Dansguardian be resurrected with the pcre fix.

                1 Reply Last reply Reply Quote 0
                • marcellocM
                  marcelloc
                  last edited by

                  @asterix:

                  Was wondering if the older version of Dansguardian be resurrected with the pcre fix.

                  I'ts basically the same gui version. Most work was on pfsense 2.1 dir checks. Pcre and other fixes were done on freebsd ports.

                  What you have on dansguardian log files?

                  Did you tried to listen it on only one interface and then nat it to other?

                  Treinamentos de Elite: http://sys-squad.com

                  Help a community developer! ;D

                  1 Reply Last reply Reply Quote 0
                  • A
                    asterix
                    last edited by

                    whats the path for the log files?

                    I know the service is running and I get that Web Upload banned page.. so I know its working to some degree. Also some pics (not all) are being blocked on porn sites.. so that is kinda working to some degree as well.

                    It's working on very few little things that might go unnoticed. Site/URL blocking, weighted phrases..etc is not working. After 3 clean installs and configuration I can confirm this.

                    1 Reply Last reply Reply Quote 0
                    • marcellocM
                      marcelloc
                      last edited by

                      Log file is /var/log/dansguardian/access.log

                      Choose dansguarian report type to see more detailed log.

                      Treinamentos de Elite: http://sys-squad.com

                      Help a community developer! ;D

                      1 Reply Last reply Reply Quote 0
                      • A
                        asterix
                        last edited by

                        Checked the logs. As reported earlier.. logs are all filled with .jpg being blocked from bad sites. No bad sites being blocked.

                        1 Reply Last reply Reply Quote 0
                        • marcellocM
                          marcelloc
                          last edited by

                          @asterix:

                          Checked the logs. As reported earlier.. logs are all filled with .jpg being blocked from bad sites. No bad sites being blocked.

                          I have bad sites blocked in my log files, filter group identification, users as well and exception sites too.

                          How can I help you????

                          Treinamentos de Elite: http://sys-squad.com

                          Help a community developer! ;D

                          1 Reply Last reply Reply Quote 0
                          • A
                            asterix
                            last edited by

                            Darn. Dunno what to do. Never faced this issue before.

                            Are you on a 2.1 amd64 snapshot? How did u install Dans? All I did was install squid3 .. configure all the interfaces for squid (as each interface services a separate subnet) and then install dans and select the usual options that worked on first try.. always.

                            One thing which I have done differently is I have Squid3 rather than the Squid2. Could that be the issue? Will try to do a clean install again and use Squid2 instead and see if that helps.

                            BTW, any major difference between Squid 2 & 3 versions?

                            EDIT:
                            Confirmed extensions being blocked as well. So there is a definite issue (at least in my cofiguration) that is not blocking bad sites and URLS.

                            1 Reply Last reply Reply Quote 0
                            • A
                              asterix
                              last edited by

                              So, I had a backup config of 2.0 saved which had working settings for Squid2 and Dans. I applied that to a clean new install of 2.1. Upon reboot Dans worked but the response to bad sites was like 5 to 8 secs. So I knew its working on the Phrase weight. I checked in Dans and found no change in what I was doing earlier. But to test I clicked save and boom it killed dans again with the exact same behavior.

                              For now I am moving back to SquidGuard as I need IPv6 for some RND and Dans is taking too much of my time. Will check on this package in a few months.

                              Adios!

                              1 Reply Last reply Reply Quote 0
                              • marcellocM
                                marcelloc
                                last edited by

                                @asterix:

                                as I need IPv6 for some RND

                                Dansguardian 2.12 does not have ivp6 support yet.

                                I have no idea how to reproduce your config, all I can tell is that my config is still running.
                                BTW, I'll keep doing testes to see if I find/reproduce same limitations/issues you found.

                                Treinamentos de Elite: http://sys-squad.com

                                Help a community developer! ;D

                                1 Reply Last reply Reply Quote 0
                                • A
                                  asterix
                                  last edited by

                                  What I have noticed is that for Sites and URLs .. the "DEFAULT" config does not stick to the "Group" (there is only one group in the list). In the categories list I selected specific categories to ban ..for example costtraps, porn..etc. The selection list is there but the moment you click save it does not apply the settings to the "Group". File extensions download ban works and even Pics ban are working.

                                  You might wanna check and compare the code from the previous working dans version for Site and URL and more importantly the directory paths for the categories list downloaded that need to be applied on the Site and URL tabs.

                                  1 Reply Last reply Reply Quote 0
                                  • W
                                    wheelz
                                    last edited by

                                    I was tied up in some other stuff but just noticed this got released  ;D.  I am still early in my testing but I did notice that my code for the /usr/local/www/dansguardian_ldap.php wasn't added.  Was that intentional?

                                    marcelloc - I figured out the code for this and was able to get it to synchronize completely (even when the AD group is empty) by just adding a little bit of code to /usr/local/www/dansguardian_ldap.php.  Here is the section (towards the end), my addition is in bold:

                                    if (!empty($members)){
                                                $import_users = explode("\n", $members);
                                            asort($import_users);
                                            $members=base64_encode(implode("\n", $import_users));
                                                if($config['installedpackages']['dansguardianusers']['config'][0][strtolower($group['name'])] != $members){
                                                  $config['installedpackages']['dansguardianusers']['config'][0][strtolower($group['name'])] = $members;
                                                  $apply_config++;
                                                  }
                                                }
                                                else {
                                                $config['installedpackages']['dansguardianusers']['config'][0][strtolower($group['name'])] = NULL;
                                                $apply_config++;
                                            }
                                            }
                                          $id++;       
                                      }

                                    Is that a fix you'd be willing to add to the package?  Also I noticed that there is a typo when configuring a group in the Values section.  It says "Naughtiness limite" and should be "Naughtiness limit" without the 'e'.  Really minor but thought I'd let you know.

                                    Other than that I haven't seen any problems but I am still early in my testing.

                                    1 Reply Last reply Reply Quote 0
                                    • marcellocM
                                      marcelloc
                                      last edited by

                                      @wheelz:

                                      I did notice that my code for the /usr/local/www/dansguardian_ldap.php wasn't added.  Was that intentional?

                                      Sorry, It was not intentinal, I've received some fixes on forum, other in private messages, and most by myself. I just missed yours.

                                      I'll include it ASAP.

                                      Treinamentos de Elite: http://sys-squad.com

                                      Help a community developer! ;D

                                      1 Reply Last reply Reply Quote 0
                                      • W
                                        wheelz
                                        last edited by

                                        No worries, I can always copy/paste it in but is more for the benefit of others.  Other than that though it looks good so far, great work!

                                        1 Reply Last reply Reply Quote 0
                                        • marcellocM
                                          marcelloc
                                          last edited by

                                          @wheelz:

                                          No worries, I can always copy/paste it in but is more for the benefit of others.  Other than that though it looks good so far, great work!

                                          I've commited on my code, it will be there next time I push the code to github.

                                          Thanks again for your contribution.  :)

                                          Treinamentos de Elite: http://sys-squad.com

                                          Help a community developer! ;D

                                          1 Reply Last reply Reply Quote 0
                                          • J
                                            JSPinney
                                            last edited by

                                            @asterix:

                                            Installs fine now..

                                            For some reason it takes a while before filtering kicks in.

                                            Some issues. Banned sites/urls are not getting filtered.  Reboot hasnt helped.

                                            Also how do I fix this.. cant find categories anywhere

                                            Web upload is banned.

                                            Categories:

                                            Web upload

                                            I am having similar issues.  I am running pfsense 2.0.2 and just recently updated to Dansguardian 2.12.0.3.  There is a particular external website that we maintain.  Every time we attempt to save the information we get are denied access because 'Web upload is banned'.  At the time that we are updating the information, I can see in the access log that we are attempting a POST. I have verified that I was not limiting the max upload size.  I even specified -1 for the value.  I verified that the dansguardian.conf file was updating the maxuploadsize value correctly and do not see any issues with the config being applied.  I have put the domain name in the URL exception list as a work around, but am looking for a permanent fix to my upload issue.  Any help would be appreciated.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.