Squidguard: Forcing Youtube's Safety On option

abasel

Is there a way to enforce the Safety On option for youtube?

abasel

I bog I found online said that I'd need to so the following but I have no idea how

You need to open the headerregexplist file and add these two lines:

"cookie:(.)PREF=[^&]?;"->"Cookie:$1"
"cookie:(.*)$"->"Cookie:$1; PREF=f2=8000000;"

bilbo

I'd like to bump this please, I am really interested to to add this to existing safesearch in squidguard but have no idea how?

Nachtfalke

Hi,

I don't know how to do that but the code which does that is in this file:
https://github.com/bsdperimeter/pfsense-packages/blob/master/config/squidGuard/squidguard.inc
Line 1240

bilbo

Thanks for the reply, I wouldn't know how to change the code either but there is an option to specify rewrites manually the exiting ones from the code you linked to could be put in manually and a youtube one added also I just dont know how. Surely whoever wrote the package may know?

if (!is_array($rewrite_item)) $rewrite_item = array(); # Google $rewrite_item[] = array(F_TARGETURL => '(google../search?.q=.)', F_REPLACETO => '\1&safe=active', F_MODE => 'i'); $rewrite_item[] = array(F_TARGETURL => '(google../images.q=.)', F_REPLACETO => '\1&safe=active', F_MODE => 'i'); $rewrite_item[] = array(F_TARGETURL => '(google../groups.q=.)', F_REPLACETO => '\1&safe=active', F_MODE => 'i'); $rewrite_item[] = array(F_TARGETURL => '(google../news.q=.)', F_REPLACETO => '\1&safe=active', F_MODE => 'i'); # Yandex $rewrite_item[] = array(F_TARGETURL => '(yandex../yandsearch?.text=.)', F_REPLACETO => '\1&fyandex=1', F_MODE => 'i'); # Yahoo $rewrite_item[] = array(F_TARGETURL => '(search.yahoo../search.p=.)', F_REPLACETO => '\1&vm=r&v=1', F_MODE => 'i'); # MSN Live search, Bing $rewrite_item[] = array(F_TARGETURL => '(search.live../.q=.)', F_REPLACETO => '\1&adlt=strict', F_MODE => 'i'); $rewrite_item[] = array(F_TARGETURL => '(search.msn../.q=.)', F_REPLACETO => '\1&adlt=strict', F_MODE => 'i'); $rewrite_item[] = array(F_TARGETURL => '(.bing..*/.q=.)', F_REPLACETO => '\1&adlt=strict', F_MODE => 'i'); return $rewrite_item;}

Nachtfalke

SquidGuard offers the option to add rewrites by GUI.
There is a "rewrite" tab on this package. Perhaps you can add something there ?

bilbo

Yes, thats what I am wondering about, what rules would need to be entered.

This is the safequid rule, maybe it could be adapted somehow?

<profile_tracing>true</profile_tracing>

<host>youtube.com</host>

<requestheader></requestheader>
<responseheader></responseheader>
<month active="false"></month>
<day active="false">1,31</day>
<weekday active="false"></weekday>
<hour active="false">0,23</hour>
<minute active="false">0,59</minute>
<matchmode>absolutetime</matchmode>
<addprofiles>UNSAFE_YOUTUBE</addprofiles></profile>
<profile><enabled>true</enabled>

<profile_tracing>true</profile_tracing>
<profiles>UNSAFE_YOUTUBE</profiles>

<requestheader>Cookie:.*PREF=.*f2=8000000</requestheader>
<responseheader></responseheader>
<month active="false"></month>
<day active="false">1,31</day>
<weekday active="false"></weekday>
<hour active="false">0,23</hour>
<minute active="false">0,59</minute>
<matchmode>absolutetime</matchmode>
<addprofiles>SAFE_YOUTUBE</addprofiles>
<removeprofiles>UNSAFE_YOUTUBE</removeprofiles></profile>

<profiles>UNSAFE_YOUTUBE</profiles>

<pattern>Cookie: ([^\r\n]*)</pattern>
<replace>Cookie:$1; PREF=f2=8000000;\r\n</replace>
<which>client</which></rewrite></rewrite>