Dansguardian + Squid 3 not passing traffic for all users
-
Squid3 does not work well with dansguardian. I have tried many times, never got it to work.
If you feel like testing it again, try my modification in this thread. I had no luck setting up Dansguardian with Squid3 before figuring that out, and now they work great together.
-
Does dans clamd work with it as well?
-
I'm not sure of your issues with clamd asterix, but for me, it was glitchy at first.
Then I wiped my box, reloaded squid.
Then blew away and rebuild squid cache.
Then used squid in transparent mode on the interfaces I wanted. Saved settings. Re-started squid.
Then loaded dansguardian.
In pfsense, console updated freshclam.
Then ticked the little box to enable clam scan in dansguardian config.
Restarted dansguardian.
Never gave me another problem. I eventually did decide I just don't need it, but it always worked.
Thats with squid - not squid3
-
I've re-installed dansguardian and squid instead of squid3 and all is working okay.
Generally I've used dansguardian in the past for small sites along with squid3 but have never had any real issues (except the Web Upload issue, which is easily fixed) but when I say small sites I mean 10 - 20 users/devices max and for larger sites I've used SquidGuard. This was my first attempt at using Dansguardian at a large site.I've tested and used pfSense 2.1 RC1 and see there are squidguard packages for Squid3, I hope that there will be simular packages for dansguardian and can't wait for 2.1 to be released as dansguardian is so much better at filtering than SquidGuard.
-
Great. I hope that is trouble free for you.
-
Squid3 does not work well with dansguardian. I have tried many times, never got it to work.
If you feel like testing it again, try my modification in this thread. I had no luck setting up Dansguardian with Squid3 before figuring that out, and now they work great together.
I am planning to go 2.1 route again shortly. Thanks to VMs I can shut down my 2.0.3 instance and install a new one for testing. Will give dans and Squid3 another chance and see how it goes.
-
So I put up a new 2.1 instance with Dans and Squid3. Same issue.. dans wouldn't filter and clamd won't work. Created the missing directories and gave the permissions. freshclam download was even successful but the dans service itself wouldn't filter anything. Tried the code change in dans.inc file as well…
Will give another shot with Squid2 instead.
-
Can you see things coming through in your /var/log/dansguardian/access.log file? What about in /var/squid/logs/access.log?
-
Nothing there.. It is an amd64 package issue or maybe a VM issue for pfsense v2.1. Not sure yet. Folks with i386 dans have it working without any problem.
-
I have a working WPAD+Captive Portal+Squid3+Dansguardian setup on PFSense 2.1.
Dansguardian are blocking web sites as well as the built in Anti-Virus.
1. user connect to the AP and got an IP address from PFsense dhcp.
2. user opens browser and Captive Portal appears. It also download the wpad script to enable autoproxy.
3. user input credentials (username/password/voucher).
4. user can now browse to the internet thru squid3 proxy.
5. when the user goes to a prohibited site, Dansguandian blocked page appears.
6. when the user downloads file with virus, Dansguardian block page appears.p.s. tested on Apple IOS, Android, Windows browser (Chrome, Mozilla, IE)
regards,
emong
-
I have squid3-dev working fine with dansguardian.
set high values on dansguardian config for large sites.
