Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Squid + squidguard No respeta cambios.

    Scheduled Pinned Locked Moved Español
    22 Posts 2 Posters 5.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      trasher
      last edited by

      Bueno siguiendo tus consejos estimado Bellera, persiste el problema

      Posteo lo que tengo:

      # ============================================================
      # SquidGuard configuration file
      # This file generated automaticly with SquidGuard configurator
      # (C)2006 Serg Dvoriancev
      # email: dv_serg@mail.ru
      # ============================================================
      
      logdir /var/squidGuard/log
      dbhome /var/db/squidGuard
      
      # 
      dest blk_BL_adv {
      	domainlist blk_BL_adv/domains
      	urllist blk_BL_adv/urls
      	redirect http://192.168.5.254:80/sgerror.php?url=blank_img&msg=&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u
      	log block.log
      }
      
      # 
      dest blk_BL_aggressive {
      	domainlist blk_BL_aggressive/domains
      	urllist blk_BL_aggressive/urls
      	log block.log
      }
      
      # 
      dest blk_BL_alcohol {
      	domainlist blk_BL_alcohol/domains
      	urllist blk_BL_alcohol/urls
      	log block.log
      }
      
      # 
      dest blk_BL_anonvpn {
      	domainlist blk_BL_anonvpn/domains
      	urllist blk_BL_anonvpn/urls
      	log block.log
      }
      
      # 
      dest blk_BL_automobile_bikes {
      	domainlist blk_BL_automobile_bikes/domains
      	urllist blk_BL_automobile_bikes/urls
      	log block.log
      }
      
      # 
      dest blk_BL_automobile_boats {
      	domainlist blk_BL_automobile_boats/domains
      	urllist blk_BL_automobile_boats/urls
      	log block.log
      }
      
      # 
      dest blk_BL_automobile_cars {
      	domainlist blk_BL_automobile_cars/domains
      	urllist blk_BL_automobile_cars/urls
      	log block.log
      }
      
      # 
      dest blk_BL_automobile_planes {
      	domainlist blk_BL_automobile_planes/domains
      	urllist blk_BL_automobile_planes/urls
      	log block.log
      }
      
      # 
      dest blk_BL_chat {
      	domainlist blk_BL_chat/domains
      	urllist blk_BL_chat/urls
      	log block.log
      }
      
      # 
      dest blk_BL_costtraps {
      	domainlist blk_BL_costtraps/domains
      	urllist blk_BL_costtraps/urls
      	log block.log
      }
      
      # 
      dest blk_BL_dating {
      	domainlist blk_BL_dating/domains
      	urllist blk_BL_dating/urls
      	log block.log
      }
      
      # 
      dest blk_BL_downloads {
      	domainlist blk_BL_downloads/domains
      	urllist blk_BL_downloads/urls
      	log block.log
      }
      
      # 
      dest blk_BL_drugs {
      	domainlist blk_BL_drugs/domains
      	urllist blk_BL_drugs/urls
      	log block.log
      }
      
      # 
      dest blk_BL_dynamic {
      	domainlist blk_BL_dynamic/domains
      	urllist blk_BL_dynamic/urls
      	log block.log
      }
      
      # 
      dest blk_BL_education_schools {
      	domainlist blk_BL_education_schools/domains
      	urllist blk_BL_education_schools/urls
      	log block.log
      }
      
      # 
      dest blk_BL_finance_banking {
      	domainlist blk_BL_finance_banking/domains
      	urllist blk_BL_finance_banking/urls
      	log block.log
      }
      
      # 
      dest blk_BL_finance_insurance {
      	domainlist blk_BL_finance_insurance/domains
      	urllist blk_BL_finance_insurance/urls
      	log block.log
      }
      
      # 
      dest blk_BL_finance_moneylending {
      	domainlist blk_BL_finance_moneylending/domains
      	urllist blk_BL_finance_moneylending/urls
      	log block.log
      }
      
      # 
      dest blk_BL_finance_other {
      	domainlist blk_BL_finance_other/domains
      	urllist blk_BL_finance_other/urls
      	log block.log
      }
      
      # 
      dest blk_BL_finance_realestate {
      	domainlist blk_BL_finance_realestate/domains
      	urllist blk_BL_finance_realestate/urls
      	log block.log
      }
      
      # 
      dest blk_BL_finance_trading {
      	domainlist blk_BL_finance_trading/domains
      	urllist blk_BL_finance_trading/urls
      	log block.log
      }
      
      # 
      dest blk_BL_fortunetelling {
      	domainlist blk_BL_fortunetelling/domains
      	urllist blk_BL_fortunetelling/urls
      	log block.log
      }
      
      # 
      dest blk_BL_forum {
      	domainlist blk_BL_forum/domains
      	urllist blk_BL_forum/urls
      	log block.log
      }
      
      # 
      dest blk_BL_gamble {
      	domainlist blk_BL_gamble/domains
      	urllist blk_BL_gamble/urls
      	log block.log
      }
      
      # 
      dest blk_BL_government {
      	domainlist blk_BL_government/domains
      	urllist blk_BL_government/urls
      	log block.log
      }
      
      # 
      dest blk_BL_hacking {
      	domainlist blk_BL_hacking/domains
      	urllist blk_BL_hacking/urls
      	log block.log
      }
      
      # 
      dest blk_BL_hobby_cooking {
      	domainlist blk_BL_hobby_cooking/domains
      	urllist blk_BL_hobby_cooking/urls
      	log block.log
      }
      
      # 
      dest blk_BL_hobby_games-misc {
      	domainlist blk_BL_hobby_games-misc/domains
      	urllist blk_BL_hobby_games-misc/urls
      	log block.log
      }
      
      # 
      dest blk_BL_hobby_games-online {
      	domainlist blk_BL_hobby_games-online/domains
      	urllist blk_BL_hobby_games-online/urls
      	log block.log
      }
      
      # 
      dest blk_BL_hobby_gardening {
      	domainlist blk_BL_hobby_gardening/domains
      	urllist blk_BL_hobby_gardening/urls
      	log block.log
      }
      
      # 
      dest blk_BL_hobby_pets {
      	domainlist blk_BL_hobby_pets/domains
      	urllist blk_BL_hobby_pets/urls
      	log block.log
      }
      
      # 
      dest blk_BL_homestyle {
      	domainlist blk_BL_homestyle/domains
      	urllist blk_BL_homestyle/urls
      	log block.log
      }
      
      # 
      dest blk_BL_hospitals {
      	domainlist blk_BL_hospitals/domains
      	urllist blk_BL_hospitals/urls
      	log block.log
      }
      
      # 
      dest blk_BL_imagehosting {
      	domainlist blk_BL_imagehosting/domains
      	urllist blk_BL_imagehosting/urls
      	log block.log
      }
      
      # 
      dest blk_BL_isp {
      	domainlist blk_BL_isp/domains
      	urllist blk_BL_isp/urls
      	log block.log
      }
      
      # 
      dest blk_BL_jobsearch {
      	domainlist blk_BL_jobsearch/domains
      	urllist blk_BL_jobsearch/urls
      	log block.log
      }
      
      # 
      dest blk_BL_library {
      	domainlist blk_BL_library/domains
      	urllist blk_BL_library/urls
      	log block.log
      }
      
      # 
      dest blk_BL_military {
      	domainlist blk_BL_military/domains
      	urllist blk_BL_military/urls
      	log block.log
      }
      
      # 
      dest blk_BL_models {
      	domainlist blk_BL_models/domains
      	urllist blk_BL_models/urls
      	log block.log
      }
      
      # 
      dest blk_BL_movies {
      	domainlist blk_BL_movies/domains
      	urllist blk_BL_movies/urls
      	log block.log
      }
      
      # 
      dest blk_BL_music {
      	domainlist blk_BL_music/domains
      	urllist blk_BL_music/urls
      	log block.log
      }
      
      # 
      dest blk_BL_news {
      	domainlist blk_BL_news/domains
      	urllist blk_BL_news/urls
      	log block.log
      }
      
      # 
      dest blk_BL_podcasts {
      	domainlist blk_BL_podcasts/domains
      	urllist blk_BL_podcasts/urls
      	log block.log
      }
      
      # 
      dest blk_BL_politics {
      	domainlist blk_BL_politics/domains
      	urllist blk_BL_politics/urls
      	log block.log
      }
      
      # 
      dest blk_BL_porn {
      	domainlist blk_BL_porn/domains
      	urllist blk_BL_porn/urls
      	log block.log
      }
      
      # 
      dest blk_BL_radiotv {
      	domainlist blk_BL_radiotv/domains
      	urllist blk_BL_radiotv/urls
      	log block.log
      }
      
      # 
      dest blk_BL_recreation_humor {
      	domainlist blk_BL_recreation_humor/domains
      	urllist blk_BL_recreation_humor/urls
      	log block.log
      }
      
      # 
      dest blk_BL_recreation_martialarts {
      	domainlist blk_BL_recreation_martialarts/domains
      	urllist blk_BL_recreation_martialarts/urls
      	log block.log
      }
      
      # 
      dest blk_BL_recreation_restaurants {
      	domainlist blk_BL_recreation_restaurants/domains
      	urllist blk_BL_recreation_restaurants/urls
      	log block.log
      }
      
      # 
      dest blk_BL_recreation_sports {
      	domainlist blk_BL_recreation_sports/domains
      	urllist blk_BL_recreation_sports/urls
      	log block.log
      }
      
      # 
      dest blk_BL_recreation_travel {
      	domainlist blk_BL_recreation_travel/domains
      	urllist blk_BL_recreation_travel/urls
      	log block.log
      }
      
      # 
      dest blk_BL_recreation_wellness {
      	domainlist blk_BL_recreation_wellness/domains
      	urllist blk_BL_recreation_wellness/urls
      	log block.log
      }
      
      # 
      dest blk_BL_redirector {
      	domainlist blk_BL_redirector/domains
      	urllist blk_BL_redirector/urls
      	log block.log
      }
      
      # 
      dest blk_BL_religion {
      	domainlist blk_BL_religion/domains
      	urllist blk_BL_religion/urls
      	log block.log
      }
      
      # 
      dest blk_BL_remotecontrol {
      	domainlist blk_BL_remotecontrol/domains
      	urllist blk_BL_remotecontrol/urls
      	log block.log
      }
      
      # 
      dest blk_BL_ringtones {
      	domainlist blk_BL_ringtones/domains
      	urllist blk_BL_ringtones/urls
      	log block.log
      }
      
      # 
      dest blk_BL_science_astronomy {
      	domainlist blk_BL_science_astronomy/domains
      	urllist blk_BL_science_astronomy/urls
      	log block.log
      }
      
      # 
      dest blk_BL_science_chemistry {
      	domainlist blk_BL_science_chemistry/domains
      	urllist blk_BL_science_chemistry/urls
      	log block.log
      }
      
      # 
      dest blk_BL_searchengines {
      	domainlist blk_BL_searchengines/domains
      	urllist blk_BL_searchengines/urls
      	log block.log
      }
      
      # 
      dest blk_BL_sex_education {
      	domainlist blk_BL_sex_education/domains
      	urllist blk_BL_sex_education/urls
      	log block.log
      }
      
      # 
      dest blk_BL_sex_lingerie {
      	domainlist blk_BL_sex_lingerie/domains
      	urllist blk_BL_sex_lingerie/urls
      	log block.log
      }
      
      # 
      dest blk_BL_shopping {
      	domainlist blk_BL_shopping/domains
      	urllist blk_BL_shopping/urls
      	log block.log
      }
      
      # 
      dest blk_BL_socialnet {
      	domainlist blk_BL_socialnet/domains
      	urllist blk_BL_socialnet/urls
      	log block.log
      }
      
      # 
      dest blk_BL_spyware {
      	domainlist blk_BL_spyware/domains
      	urllist blk_BL_spyware/urls
      	log block.log
      }
      
      # 
      dest blk_BL_tracker {
      	domainlist blk_BL_tracker/domains
      	urllist blk_BL_tracker/urls
      	log block.log
      }
      
      # 
      dest blk_BL_updatesites {
      	domainlist blk_BL_updatesites/domains
      	urllist blk_BL_updatesites/urls
      	log block.log
      }
      
      # 
      dest blk_BL_urlshortener {
      	domainlist blk_BL_urlshortener/domains
      	urllist blk_BL_urlshortener/urls
      	log block.log
      }
      
      # 
      dest blk_BL_violence {
      	domainlist blk_BL_violence/domains
      	urllist blk_BL_violence/urls
      	log block.log
      }
      
      # 
      dest blk_BL_warez {
      	domainlist blk_BL_warez/domains
      	urllist blk_BL_warez/urls
      	log block.log
      }
      
      # 
      dest blk_BL_weapons {
      	domainlist blk_BL_weapons/domains
      	urllist blk_BL_weapons/urls
      	log block.log
      }
      
      # 
      dest blk_BL_webmail {
      	domainlist blk_BL_webmail/domains
      	urllist blk_BL_webmail/urls
      	log block.log
      }
      
      # 
      dest blk_BL_webphone {
      	domainlist blk_BL_webphone/domains
      	urllist blk_BL_webphone/urls
      	log block.log
      }
      
      # 
      dest blk_BL_webradio {
      	domainlist blk_BL_webradio/domains
      	urllist blk_BL_webradio/urls
      	log block.log
      }
      
      # 
      dest blk_BL_webtv {
      	domainlist blk_BL_webtv/domains
      	urllist blk_BL_webtv/urls
      	log block.log
      }
      
      # 
      rew safesearch {
      	s@(google..*/search?.*q=.*)@&safe=active@i
      	s@(google..*/images.*q=.*)@&safe=active@i
      	s@(google..*/groups.*q=.*)@&safe=active@i
      	s@(google..*/news.*q=.*)@&safe=active@i
      	s@(yandex..*/yandsearch?.*text=.*)@&fyandex=1@i
      	s@(search.yahoo..*/search.*p=.*)@&vm=r&v=1@i
      	s@(search.live..*/.*q=.*)@&adlt=strict@i
      	s@(search.msn..*/.*q=.*)@&adlt=strict@i
      	s@(.bing..*/.*q=.*)@&adlt=strict@i
      	log block.log
      }
      
      # 
      acl  {
      	# 
      	default  {
      		pass !blk_BL_adv !blk_BL_aggressive !blk_BL_alcohol !blk_BL_anonvpn !blk_BL_chat !blk_BL_costtraps !blk_BL_dating !blk_BL_drugs !blk_BL_dynamic !blk_BL_gamble !blk_BL_hacking !blk_BL_hobby_games-misc !blk_BL_hobby_games-online !blk_BL_movies !blk_BL_porn !blk_BL_recreation_martialarts !blk_BL_recreation_wellness !blk_BL_ringtones !blk_BL_sex_lingerie !blk_BL_socialnet !blk_BL_spyware !blk_BL_tracker !blk_BL_violence !blk_BL_warez !blk_BL_weapons !blk_BL_webtv blk_BL_sex_education blk_BL_urlshortener all
      		redirect http://192.168.5.254:80/sgerror.php?url=403%20&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u
      		rewrite safesearch
      		log block.log
      	}
      }
      
      
      # This file is automatically generated by pfSense
      # Do not edit manually !
      http_port 192.168.5.254:3128
      http_port 127.0.0.1:3128 intercept
      icp_port 7
      dns_v4_first off
      pid_filename /var/run/squid.pid
      cache_effective_user proxy
      cache_effective_group proxy
      error_default_language es
      icon_directory /usr/pbi/squid-amd64/etc/squid/icons
      visible_hostname pfsense
      cache_mgr admin@arrentrac.local
      access_log /var/squid/logs/access.log
      cache_log /var/squid/logs/cache.log
      cache_store_log none
      sslcrtd_children 0
      logfile_rotate 7
      shutdown_lifetime 3 seconds
      # Allow local network(s) on interface(s)
      acl localnet src  192.168.5.0/24
      httpd_suppress_version_string on
      uri_whitespace strip
      
      acl dynamic urlpath_regex cgi-bin ?
      cache deny dynamic
      cache_mem 1024 MB
      maximum_object_size_in_memory 32 KB
      memory_replacement_policy heap GDSF
      cache_replacement_policy heap LFUDA
      cache_dir aufs /var/squid/cache 8000 16 256
      minimum_object_size 0 KB
      maximum_object_size 4 KB
      offline_mode offcache_swap_low 90
      cache_swap_high 95
      
      # No redirector configured
      
      #Remote proxies
      
      # Setup some default acls
      acl allsrc src all
      acl localhost src 127.0.0.1/32
      acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901  3128 1025-65535 
      acl sslports port 443 563  
      acl manager proto cache_object
      acl purge method PURGE
      acl connect method CONNECT
      
      # Define protocols used for redirects
      acl HTTP proto HTTP
      acl HTTPS proto HTTPS
      
      acl allowed_subnets src 192.168.5.0/24
      acl unrestricted_hosts src '/var/squid/acl/unrestricted_hosts.acl'
      acl blacklist dstdom_regex -i '/var/squid/acl/blacklist.acl'
      http_access allow manager localhost
      
      http_access deny manager
      http_access allow purge localhost
      http_access deny purge
      http_access deny !safeports
      http_access deny CONNECT !sslports
      
      # Always allow localhost connections
      http_access allow localhost
      
      request_body_max_size 0 KB
      delay_pools 1
      delay_class 1 2
      delay_parameters 1 -1/-1 -1/-1
      delay_initial_bucket_level 100
      delay_access 1 allow allsrc
      
      # Reverse Proxy settings
      
      # Package Integration
      url_rewrite_program /usr/pbi/squidguard-squid3-amd64/bin/squidGuard -c /usr/pbi/squidguard-squid3-amd64/etc/squidGuard/squidGuard.conf
      url_rewrite_bypass off
      url_rewrite_children 16 startup=8 idle=4 concurrency=0
      
      # Custom options
      
      # These hosts do not have any restrictions
      http_access allow unrestricted_hosts
      # Block access to blacklist domains
      http_access deny blacklist
      # Setup allowed acls
      # Allow local network(s) on interface(s)
      http_access allow allowed_subnets
      http_access allow localnet
      # Default block all to be sure
      http_access deny allsrc
      
      

      Me llama la atencion, que siguiendo el tutorial para setear correctamente squid3+squidguard no me da el resultado que a ti, me refiero concretamente a la parte los procesos corriendo al momento de terminar (ver pantallazo)

      Y releyendo el tutorial veo la siguiente linea:

      define('REDIRECTOR_PROCESS_COUNT', '[b]16[/b] startup=8 idle=4 concurrency=0');#redirector processes count will started
      

      Y en mi pantalla, veo 16 procesos corriendo, en negritas puse el 16…. esta correto ?]?

      Gracias!

      ![Sin título.png_thumb](/public/imported_attachments/1/Sin título.png_thumb)
      ![Sin título.png](/public/imported_attachments/1/Sin título.png)

      1 Reply Last reply Reply Quote 0
      • belleraB
        bellera
        last edited by

        Y en mi pantalla, veo 16 procesos corriendo, en negritas puse el 16…. esta correto ?

        url_rewrite_children 16 startup=8 idle=4 concurrency=0

        Esto quiere decir que cuando se pone en marcha squid se abren 8 procesos squidGuard. Si hay uso se irá subiendo hasta un máximo de 16. Y si no hay uso se irá bajando hacia un mínimo de 4. Y que squidGuard no admite peticiones concurrentes en un mismo proceso.

        Podría ser que no fuese suficiente. En ese caso aparece en cache.log,

        Consider increasing the number of redirector processes in your config file.
        

        Eso hay que resolverlo tocando el código de integración de nuevo:

        define('REDIRECTOR_PROCESS_COUNT', '32 startup=16 idle=8 concurrency=0');#redirector processes count will started

        1 Reply Last reply Reply Quote 0
        • belleraB
          bellera
          last edited by

          These hosts do not have any restrictions

          http_access allow unrestricted_hosts

          Block access to blacklist domains

          http_access deny blacklist

          Tienes algo puesto en Proxy server: ACLs

          No tiene demasiado sentido tener cosas ahí si empleas squidGuard. Prueba a quitarlo, a ver si se resuelve el problema.

          1 Reply Last reply Reply Quote 0
          • belleraB
            bellera
            last edited by

            pass !blk_BL_adv !blk_BL_aggressive !blk_BL_alcohol !blk_BL_anonvpn !blk_BL_chat !blk_BL_costtraps !blk_BL_dating !blk_BL_drugs !blk_BL_dynamic !blk_BL_gamble !blk_BL_hacking !blk_BL_hobby_games-misc !blk_BL_hobby_games-online !blk_BL_movies !blk_BL_porn !blk_BL_recreation_martialarts !blk_BL_recreation_wellness !blk_BL_ringtones !blk_BL_sex_lingerie !blk_BL_socialnet !blk_BL_spyware !blk_BL_tracker !blk_BL_violence !blk_BL_warez !blk_BL_weapons !blk_BL_webtv blk_BL_sex_education blk_BL_urlshortener all

            Aunque no viene de ahí el problema…

            Insisto en que no tiene sentido tener como whitelist las listas negras blk_BL_sex_education blk_BL_urlshortener

            Fíjate que todas las listas negras tienen ! delante. Eso significa precisamente que lo que está dentro de niega.

            1 Reply Last reply Reply Quote 0
            • T
              trasher
              last edited by

              # ============================================================
              # SquidGuard configuration file
              # This file generated automaticly with SquidGuard configurator
              # (C)2006 Serg Dvoriancev
              # email: dv_serg@mail.ru
              # ============================================================
              
              logdir /var/squidGuard/log
              dbhome /var/db/squidGuard
              
              # 
              dest blk_BL_adv {
              	domainlist blk_BL_adv/domains
              	urllist blk_BL_adv/urls
              	redirect http://192.168.5.254:80/sgerror.php?url=blank_img&msg=&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u
              	log block.log
              }
              
              # 
              dest blk_BL_aggressive {
              	domainlist blk_BL_aggressive/domains
              	urllist blk_BL_aggressive/urls
              	log block.log
              }
              
              # 
              dest blk_BL_alcohol {
              	domainlist blk_BL_alcohol/domains
              	urllist blk_BL_alcohol/urls
              	log block.log
              }
              
              # 
              dest blk_BL_anonvpn {
              	domainlist blk_BL_anonvpn/domains
              	urllist blk_BL_anonvpn/urls
              	log block.log
              }
              
              # 
              dest blk_BL_automobile_bikes {
              	domainlist blk_BL_automobile_bikes/domains
              	urllist blk_BL_automobile_bikes/urls
              	log block.log
              }
              
              # 
              dest blk_BL_automobile_boats {
              	domainlist blk_BL_automobile_boats/domains
              	urllist blk_BL_automobile_boats/urls
              	log block.log
              }
              
              # 
              dest blk_BL_automobile_cars {
              	domainlist blk_BL_automobile_cars/domains
              	urllist blk_BL_automobile_cars/urls
              	log block.log
              }
              
              # 
              dest blk_BL_automobile_planes {
              	domainlist blk_BL_automobile_planes/domains
              	urllist blk_BL_automobile_planes/urls
              	log block.log
              }
              
              # 
              dest blk_BL_chat {
              	domainlist blk_BL_chat/domains
              	urllist blk_BL_chat/urls
              	log block.log
              }
              
              # 
              dest blk_BL_costtraps {
              	domainlist blk_BL_costtraps/domains
              	urllist blk_BL_costtraps/urls
              	log block.log
              }
              
              # 
              dest blk_BL_dating {
              	domainlist blk_BL_dating/domains
              	urllist blk_BL_dating/urls
              	log block.log
              }
              
              # 
              dest blk_BL_downloads {
              	domainlist blk_BL_downloads/domains
              	urllist blk_BL_downloads/urls
              	log block.log
              }
              
              # 
              dest blk_BL_drugs {
              	domainlist blk_BL_drugs/domains
              	urllist blk_BL_drugs/urls
              	log block.log
              }
              
              # 
              dest blk_BL_dynamic {
              	domainlist blk_BL_dynamic/domains
              	urllist blk_BL_dynamic/urls
              	log block.log
              }
              
              # 
              dest blk_BL_education_schools {
              	domainlist blk_BL_education_schools/domains
              	urllist blk_BL_education_schools/urls
              	log block.log
              }
              
              # 
              dest blk_BL_finance_banking {
              	domainlist blk_BL_finance_banking/domains
              	urllist blk_BL_finance_banking/urls
              	log block.log
              }
              
              # 
              dest blk_BL_finance_insurance {
              	domainlist blk_BL_finance_insurance/domains
              	urllist blk_BL_finance_insurance/urls
              	log block.log
              }
              
              # 
              dest blk_BL_finance_moneylending {
              	domainlist blk_BL_finance_moneylending/domains
              	urllist blk_BL_finance_moneylending/urls
              	log block.log
              }
              
              # 
              dest blk_BL_finance_other {
              	domainlist blk_BL_finance_other/domains
              	urllist blk_BL_finance_other/urls
              	log block.log
              }
              
              # 
              dest blk_BL_finance_realestate {
              	domainlist blk_BL_finance_realestate/domains
              	urllist blk_BL_finance_realestate/urls
              	log block.log
              }
              
              # 
              dest blk_BL_finance_trading {
              	domainlist blk_BL_finance_trading/domains
              	urllist blk_BL_finance_trading/urls
              	log block.log
              }
              
              # 
              dest blk_BL_fortunetelling {
              	domainlist blk_BL_fortunetelling/domains
              	urllist blk_BL_fortunetelling/urls
              	log block.log
              }
              
              # 
              dest blk_BL_forum {
              	domainlist blk_BL_forum/domains
              	urllist blk_BL_forum/urls
              	log block.log
              }
              
              # 
              dest blk_BL_gamble {
              	domainlist blk_BL_gamble/domains
              	urllist blk_BL_gamble/urls
              	log block.log
              }
              
              # 
              dest blk_BL_government {
              	domainlist blk_BL_government/domains
              	urllist blk_BL_government/urls
              	log block.log
              }
              
              # 
              dest blk_BL_hacking {
              	domainlist blk_BL_hacking/domains
              	urllist blk_BL_hacking/urls
              	log block.log
              }
              
              # 
              dest blk_BL_hobby_cooking {
              	domainlist blk_BL_hobby_cooking/domains
              	urllist blk_BL_hobby_cooking/urls
              	log block.log
              }
              
              # 
              dest blk_BL_hobby_games-misc {
              	domainlist blk_BL_hobby_games-misc/domains
              	urllist blk_BL_hobby_games-misc/urls
              	log block.log
              }
              
              # 
              dest blk_BL_hobby_games-online {
              	domainlist blk_BL_hobby_games-online/domains
              	urllist blk_BL_hobby_games-online/urls
              	log block.log
              }
              
              # 
              dest blk_BL_hobby_gardening {
              	domainlist blk_BL_hobby_gardening/domains
              	urllist blk_BL_hobby_gardening/urls
              	log block.log
              }
              
              # 
              dest blk_BL_hobby_pets {
              	domainlist blk_BL_hobby_pets/domains
              	urllist blk_BL_hobby_pets/urls
              	log block.log
              }
              
              # 
              dest blk_BL_homestyle {
              	domainlist blk_BL_homestyle/domains
              	urllist blk_BL_homestyle/urls
              	log block.log
              }
              
              # 
              dest blk_BL_hospitals {
              	domainlist blk_BL_hospitals/domains
              	urllist blk_BL_hospitals/urls
              	log block.log
              }
              
              # 
              dest blk_BL_imagehosting {
              	domainlist blk_BL_imagehosting/domains
              	urllist blk_BL_imagehosting/urls
              	log block.log
              }
              
              # 
              dest blk_BL_isp {
              	domainlist blk_BL_isp/domains
              	urllist blk_BL_isp/urls
              	log block.log
              }
              
              # 
              dest blk_BL_jobsearch {
              	domainlist blk_BL_jobsearch/domains
              	urllist blk_BL_jobsearch/urls
              	log block.log
              }
              
              # 
              dest blk_BL_library {
              	domainlist blk_BL_library/domains
              	urllist blk_BL_library/urls
              	log block.log
              }
              
              # 
              dest blk_BL_military {
              	domainlist blk_BL_military/domains
              	urllist blk_BL_military/urls
              	log block.log
              }
              
              # 
              dest blk_BL_models {
              	domainlist blk_BL_models/domains
              	urllist blk_BL_models/urls
              	log block.log
              }
              
              # 
              dest blk_BL_movies {
              	domainlist blk_BL_movies/domains
              	urllist blk_BL_movies/urls
              	log block.log
              }
              
              # 
              dest blk_BL_music {
              	domainlist blk_BL_music/domains
              	urllist blk_BL_music/urls
              	log block.log
              }
              
              # 
              dest blk_BL_news {
              	domainlist blk_BL_news/domains
              	urllist blk_BL_news/urls
              	log block.log
              }
              
              # 
              dest blk_BL_podcasts {
              	domainlist blk_BL_podcasts/domains
              	urllist blk_BL_podcasts/urls
              	log block.log
              }
              
              # 
              dest blk_BL_politics {
              	domainlist blk_BL_politics/domains
              	urllist blk_BL_politics/urls
              	log block.log
              }
              
              # 
              dest blk_BL_porn {
              	domainlist blk_BL_porn/domains
              	urllist blk_BL_porn/urls
              	log block.log
              }
              
              # 
              dest blk_BL_radiotv {
              	domainlist blk_BL_radiotv/domains
              	urllist blk_BL_radiotv/urls
              	log block.log
              }
              
              # 
              dest blk_BL_recreation_humor {
              	domainlist blk_BL_recreation_humor/domains
              	urllist blk_BL_recreation_humor/urls
              	log block.log
              }
              
              # 
              dest blk_BL_recreation_martialarts {
              	domainlist blk_BL_recreation_martialarts/domains
              	urllist blk_BL_recreation_martialarts/urls
              	log block.log
              }
              
              # 
              dest blk_BL_recreation_restaurants {
              	domainlist blk_BL_recreation_restaurants/domains
              	urllist blk_BL_recreation_restaurants/urls
              	log block.log
              }
              
              # 
              dest blk_BL_recreation_sports {
              	domainlist blk_BL_recreation_sports/domains
              	urllist blk_BL_recreation_sports/urls
              	log block.log
              }
              
              # 
              dest blk_BL_recreation_travel {
              	domainlist blk_BL_recreation_travel/domains
              	urllist blk_BL_recreation_travel/urls
              	log block.log
              }
              
              # 
              dest blk_BL_recreation_wellness {
              	domainlist blk_BL_recreation_wellness/domains
              	urllist blk_BL_recreation_wellness/urls
              	log block.log
              }
              
              # 
              dest blk_BL_redirector {
              	domainlist blk_BL_redirector/domains
              	urllist blk_BL_redirector/urls
              	log block.log
              }
              
              # 
              dest blk_BL_religion {
              	domainlist blk_BL_religion/domains
              	urllist blk_BL_religion/urls
              	log block.log
              }
              
              # 
              dest blk_BL_remotecontrol {
              	domainlist blk_BL_remotecontrol/domains
              	urllist blk_BL_remotecontrol/urls
              	log block.log
              }
              
              # 
              dest blk_BL_ringtones {
              	domainlist blk_BL_ringtones/domains
              	urllist blk_BL_ringtones/urls
              	log block.log
              }
              
              # 
              dest blk_BL_science_astronomy {
              	domainlist blk_BL_science_astronomy/domains
              	urllist blk_BL_science_astronomy/urls
              	log block.log
              }
              
              # 
              dest blk_BL_science_chemistry {
              	domainlist blk_BL_science_chemistry/domains
              	urllist blk_BL_science_chemistry/urls
              	log block.log
              }
              
              # 
              dest blk_BL_searchengines {
              	domainlist blk_BL_searchengines/domains
              	urllist blk_BL_searchengines/urls
              	log block.log
              }
              
              # 
              dest blk_BL_sex_education {
              	domainlist blk_BL_sex_education/domains
              	urllist blk_BL_sex_education/urls
              	log block.log
              }
              
              # 
              dest blk_BL_sex_lingerie {
              	domainlist blk_BL_sex_lingerie/domains
              	urllist blk_BL_sex_lingerie/urls
              	log block.log
              }
              
              # 
              dest blk_BL_shopping {
              	domainlist blk_BL_shopping/domains
              	urllist blk_BL_shopping/urls
              	log block.log
              }
              
              # 
              dest blk_BL_socialnet {
              	domainlist blk_BL_socialnet/domains
              	urllist blk_BL_socialnet/urls
              	log block.log
              }
              
              # 
              dest blk_BL_spyware {
              	domainlist blk_BL_spyware/domains
              	urllist blk_BL_spyware/urls
              	log block.log
              }
              
              # 
              dest blk_BL_tracker {
              	domainlist blk_BL_tracker/domains
              	urllist blk_BL_tracker/urls
              	log block.log
              }
              
              # 
              dest blk_BL_updatesites {
              	domainlist blk_BL_updatesites/domains
              	urllist blk_BL_updatesites/urls
              	log block.log
              }
              
              # 
              dest blk_BL_urlshortener {
              	domainlist blk_BL_urlshortener/domains
              	urllist blk_BL_urlshortener/urls
              	log block.log
              }
              
              # 
              dest blk_BL_violence {
              	domainlist blk_BL_violence/domains
              	urllist blk_BL_violence/urls
              	log block.log
              }
              
              # 
              dest blk_BL_warez {
              	domainlist blk_BL_warez/domains
              	urllist blk_BL_warez/urls
              	log block.log
              }
              
              # 
              dest blk_BL_weapons {
              	domainlist blk_BL_weapons/domains
              	urllist blk_BL_weapons/urls
              	log block.log
              }
              
              # 
              dest blk_BL_webmail {
              	domainlist blk_BL_webmail/domains
              	urllist blk_BL_webmail/urls
              	log block.log
              }
              
              # 
              dest blk_BL_webphone {
              	domainlist blk_BL_webphone/domains
              	urllist blk_BL_webphone/urls
              	log block.log
              }
              
              # 
              dest blk_BL_webradio {
              	domainlist blk_BL_webradio/domains
              	urllist blk_BL_webradio/urls
              	log block.log
              }
              
              # 
              dest blk_BL_webtv {
              	domainlist blk_BL_webtv/domains
              	urllist blk_BL_webtv/urls
              	log block.log
              }
              
              # 
              rew safesearch {
              	s@(google..*/search?.*q=.*)@&safe=active@i
              	s@(google..*/images.*q=.*)@&safe=active@i
              	s@(google..*/groups.*q=.*)@&safe=active@i
              	s@(google..*/news.*q=.*)@&safe=active@i
              	s@(yandex..*/yandsearch?.*text=.*)@&fyandex=1@i
              	s@(search.yahoo..*/search.*p=.*)@&vm=r&v=1@i
              	s@(search.live..*/.*q=.*)@&adlt=strict@i
              	s@(search.msn..*/.*q=.*)@&adlt=strict@i
              	s@(.bing..*/.*q=.*)@&adlt=strict@i
              	log block.log
              }
              
              # 
              acl  {
              	# 
              	default  {
              		pass all
              		redirect http://192.168.5.254:80/sgerror.php?url=403%20&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u
              		rewrite safesearch
              		log block.log
              	}
              }
              

              Asi esta ahora,

              Sigue el bloqueo.

              1 Reply Last reply Reply Quote 0
              • belleraB
                bellera
                last edited by

                @bellera:

                These hosts do not have any restrictions

                http_access allow unrestricted_hosts

                Block access to blacklist domains

                http_access deny blacklist

                Tienes algo puesto en Proxy server: ACLs

                No tiene demasiado sentido tener cosas ahí si empleas squidGuard. Prueba a quitarlo, a ver si se resuelve el problema.

                1 Reply Last reply Reply Quote 0
                • T
                  trasher
                  last edited by

                  # This file is automatically generated by pfSense
                  # Do not edit manually !
                  http_port 192.168.5.254:3128
                  http_port 127.0.0.1:3128 intercept
                  icp_port 7
                  dns_v4_first off
                  pid_filename /var/run/squid.pid
                  cache_effective_user proxy
                  cache_effective_group proxy
                  error_default_language es
                  icon_directory /usr/pbi/squid-amd64/etc/squid/icons
                  visible_hostname pfsense
                  cache_mgr admin@arrentrac.local
                  access_log /var/squid/logs/access.log
                  cache_log /var/squid/logs/cache.log
                  cache_store_log none
                  sslcrtd_children 0
                  logfile_rotate 7
                  shutdown_lifetime 3 seconds
                  # Allow local network(s) on interface(s)
                  acl localnet src  192.168.5.0/24
                  httpd_suppress_version_string on
                  uri_whitespace strip
                  
                  acl dynamic urlpath_regex cgi-bin ?
                  cache deny dynamic
                  cache_mem 1024 MB
                  maximum_object_size_in_memory 32 KB
                  memory_replacement_policy heap GDSF
                  cache_replacement_policy heap LFUDA
                  cache_dir aufs /var/squid/cache 8000 16 256
                  minimum_object_size 0 KB
                  maximum_object_size 4 KB
                  offline_mode offcache_swap_low 90
                  cache_swap_high 95
                  
                  # No redirector configured
                  
                  #Remote proxies
                  
                  # Setup some default acls
                  acl allsrc src all
                  acl localhost src 127.0.0.1/32
                  acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901  3128 1025-65535 
                  acl sslports port 443 563  
                  acl manager proto cache_object
                  acl purge method PURGE
                  acl connect method CONNECT
                  
                  # Define protocols used for redirects
                  acl HTTP proto HTTP
                  acl HTTPS proto HTTPS
                  
                  http_access allow manager localhost
                  
                  http_access deny manager
                  http_access allow purge localhost
                  http_access deny purge
                  http_access deny !safeports
                  http_access deny CONNECT !sslports
                  
                  # Always allow localhost connections
                  http_access allow localhost
                  
                  request_body_max_size 0 KB
                  delay_pools 1
                  delay_class 1 2
                  delay_parameters 1 -1/-1 -1/-1
                  delay_initial_bucket_level 100
                  delay_access 1 allow allsrc
                  
                  # Reverse Proxy settings
                  
                  # Package Integration
                  url_rewrite_program /usr/pbi/squidguard-squid3-amd64/bin/squidGuard -c /usr/pbi/squidguard-squid3-amd64/etc/squidGuard/squidGuard.conf
                  url_rewrite_bypass off
                  url_rewrite_children 16 startup=8 idle=4 concurrency=0
                  
                  # Custom options
                  
                  # Setup allowed acls
                  # Allow local network(s) on interface(s)
                  http_access allow localnet
                  # Default block all to be sure
                  http_access deny allsrc
                  
                  
                  1 Reply Last reply Reply Quote 0
                  • T
                    trasher
                    last edited by

                    Borre el cache de mi navegador y ya puedo entrar a la pagina bloqueada.

                    1 Reply Last reply Reply Quote 0
                    • belleraB
                      bellera
                      last edited by

                      ¡Eureka!

                      1 Reply Last reply Reply Quote 0
                      • T
                        trasher
                        last edited by

                        Mil gracias, por todo Bellera.

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.