Filter porn, virus's and ads with squid3, HAVP, Dansguardian and privoxy.

[Phobia]

Hi all,

I followed this, and got it to work, but found that things eventually slowed to a crawl. I think my box may be under powered, but for me, blocking Ads network wide would be enough.

Can privoxy work standalone?  I get an error in my browser when I try to NAT directly to 8118 :

invalid header received from client

Privoxy is listening on localhost:8118

I would appreciate any tips.

Phob

[marcelloc]

Did you tried only dansguarguardian (with clamav enabled) + squid?

[Phobia]

No I didn't - I thought privoxy would be more light weight, if I only need to block ads…

[marcelloc]

You are having issues using only privoxy?

[Phobia]

Sorry for the delay in my reply.

Yes, I was receiving an error message for every page I tried to browse when I pointed the NAT rule directly to port 8118 (Privoxy):

"invalid header received from client"

I finally installed Squid3 again, and set 8118 as the parent.  I still wasn't having any luck until I changed Squid to transparent mode and eliminated the NAT rule to 8118.

Now things seem to be working, but I'm running Squid when I don't think I should need to for a Privoxy only setup.

[krk]

I get the following error when trying to start privoxy:
Starting privoxy.
/libexec/ld-elf.so.1: Shared object "libpcre.so.0" not found, required by "privoxy"

Has anyone else had this?  What did you do to resolve the issue?

thanks

[krk]

When adding the privoxy package, here is a warning I get…  is there a privoxy version that uses pcre-8.32?

Fetching ftp://ftp-archive.freebsd.org/pub/FreeBSD-Archive/ports/i386/packages-8.1-release/Latest/privoxy.tbz... Done.
pkg_add: warning: package 'privoxy-3.0.16_1' requires 'pcre-8.02', but 'pcre-8.32' is installed

[Ulich05]

I follwed the steps on the first post and got everything working w/o a hitch.

I also tried just the Dansguardian -> squid method which worked but for some reason it was much slower and didnt block any ads vs the dansquardian -> squid-> HAVP-> privoxy method (which makes no sense conceptually) and i could never get dansguardian's built in clamd to work properly (which also makes no sense)

besure to see this on the webupload bug fix as well http://forum.pfsense.org/index.php/topic,58442.15.html (which works as this post was sucessful)

[Ulich05]

@krk:

I get the following error when trying to start privoxy:
Starting privoxy.
/libexec/ld-elf.so.1: Shared object "libpcre.so.0" not found, required by "privoxy"

Has anyone else had this?  What did you do to resolve the issue?

thanks

I had this issue w/ a brand new install on another box just now. do a "find / -name libpcre.so.0" and ls -l the files, you should see that they're linked to libpcre.so.3, create a sym link to libpcre.so.0 instead and it should solve the privoxy issue. I have no idea if the new symlink location will screw anything else up. so far it hasn't.

Another tidbit is that you have to install dansguardian first before you install squid3 (if you want to use squid3). Dasguardian will install squid 2.7.x as a dependency which will cause pfsense to revert to using the older version if you have squid3 installed beforehand.

[ion9]

I was getting /libexec/ld-elf.so.1: Shared object "libpcre.so.0" not found, required by "privoxy" to and i think there is a fast way to fix it

if your on a x64 box install the x64 software

pkg_add -r http://ftp-archive.freebsd.org/pub/FreeBSD-Archive/ports/amd64/packages-8.1-release/Latest/privoxy.tbz

after i did that it work for me.

[mosfet]

@ion9:

I was getting /libexec/ld-elf.so.1: Shared object "libpcre.so.0" not found, required by "privoxy" to and i think there is a fast way to fix it

if your on a x64 box install the x64 software

pkg_add -r http://ftp-archive.freebsd.org/pub/FreeBSD-Archive/ports/amd64/packages-8.1-release/Latest/privoxy.tbz

after i did that it work for me.

I tried this, both using …/amd64/packages-8.1-release/Latest/privoxy.tbz , .../amd64/packages-8.2-release/Latest/privoxy.tbz and .../amd64/packages-9.0-release/Latest/privoxy.tbz . I still get "libpcre.so.0 not found".

2.1-RC0 (amd64)
built on Sat Jun 8 09:20:03 EDT 2013
FreeBSD 8.3-RELEASE-p8

I've tried the same on 2.0.3 (amd64) without success.

Anyone successfully installed privoxy on pfSense? What version of pfSense and privoxy are you using?

[marcelloc]

@mosfet:

Anyone successfully installed privoxy on pfSense? What version of pfSense and privoxy are you using?

Did you tried installing pcre package too? what version of pcre do you have on your system?

[mosfet]

@marcelloc:

@mosfet:

Anyone successfully installed privoxy on pfSense? What version of pfSense and privoxy are you using?

Did you tried installing pcre package too? what version of pcre do you have on your system?

Well, I've not tried to install pcre as a package, but it is installed. The last attempt I tried, are using pcre-8.32 and privoxy-3.0.17.

This leads to: "/libexec/ld-elf.se.1: Shared object "libpcre.so.0" not found, required by "privoxy"".

[marcelloc]

@mosfet:

This leads to: "/libexec/ld-elf.se.1: Shared object "libpcre.so.0" not found, required by "privoxy"".

what version of libpcre you get on your system?

find / -name "libpcre.so*"

[mosfet]

@marcelloc:

@mosfet:

This leads to: "/libexec/ld-elf.se.1: Shared object "libpcre.so.0" not found, required by "privoxy"".

what version of libpcre you get on your system?

find / -name "libpcre.so*"

Output:
/usr/local/lib/libpcre.so.3
/usr/local/lib/libpcre.so

[marcelloc]

@mosfet:

Output:
/usr/local/lib/libpcre.so.3
/usr/local/lib/libpcre.so

Try to force it with a link

ln -s /usr/local/lib/libpcre.so.3 /usr/local/lib/libpcre.so.0

this is not the best way to workaround it but works.

[mosfet]

@marcelloc:

@mosfet:

Output:
/usr/local/lib/libpcre.so.3
/usr/local/lib/libpcre.so

Try to force it with a link

ln -s /usr/local/lib/libpcre.so.3 /usr/local/lib/libpcre.so.0

this is not the best way to workaround it but works.

Wow - that worked. Thanks a million!

[Chewy]

To answer Marcel's question from back in January (I know, I don't read the boards enough  ;))

You can filter ads very effectively with DG using a Regexp filter. This gets most of them including popups, sidebars and even YouTube video embedded ads. Just add it under
Dansguardian - Access Lists -> URL

(^ads.|/ads/|/ads.|.ads.|adcycle|adserv|/ad.|.ad.|/ad/|.adview|/adview|pagead|adpopup|phpAds|.adscript|/adscript|/adframe|.adframe)
(werbung|anzeige|banner|sponsors|advertising|adimg)
(doubleclick)

[SIPpyCup]

followed the guide until my/its first error

Select the /usr/local/etc/privoxy/config

This file does not exist.  After I tried starting privoxy it was created. I could then edit it.

I then encountered the libpcre error as above but could not create a link.

putty ssh as admin

same find output

/usr/local/lib/libpcre.so.3
/usr/local/lib/libpcre.so

and 20ish error lines follow (I don't know how to copy in putty ssh / ubuntu)
find: /var/spool/epilocks: Permission denied
find: /var/log/squid
find: /var  (12 more )
find: /tmp/lighttpdcompress (4 of these)

@marcelloc:

Try to force it with a link

ln -s /usr/local/lib/libpcre.so.3 /usr/local/lib/libpcre.so.0

this is not the best way to workaround it but works.

ln: /usr/local/lib/libpcre.so.0: Permission denied

installed from CD a few days ago

" 2.0.3-RELEASE (i386)
built on Fri Apr 12 10:22:21 EDT 2013
FreeBSD 8.1-RELEASE-p13"

on an older Dell Optiplex "Intel(R) Core(TM)2 Duo CPU E4600 @ 2.40GHz " with one pci-e two port intel 1000 nic and an older but never before used SSD

[EnglishRob]

Hi folks,

I'm a newbie here who's been having a play with pfSense with two ADSL connections.  I've managed to get multi-wan working (running a traceroute to different servers goes over each WAN connection) and I've also got this guide working, but anything going over the proxy only seems to go over the one connection (I've tried whatismyipaddress.com and it always returns the same IP address).

I just wondered if anyone could give any pointers on how I might be able to configure privoxy to go over the gateway group I've configured?  (I wasn't sure if it was possible to setup a firewall rule so anything over a certain port number goes to the gateway group?).

Ta,

Rob