Squid will not block all porn / gambling / etc

detox · Jun 23, 2015, 1:32 AM

I have just installed pfsense and learning. I installed squid and squidguard to block unsavory sites. If I search for "porn" and try to connect to a site, I am blocked (this is good) If I search for "raw sex", I can access any of these smutty sites. How can I configure squid to block any reference to porn, gambling, etc? With gambling set to 'deny', I can go to poker stars and a number of other gambling sites.

I cannot figure out how to actually block all instances

Thanks

KOM · Jun 23, 2015, 5:35 PM

I cannot figure out how to actually block all instances

If you could, you would be rich. Squidguard can only block on what it has for bad sites in its database. This is always the issue with blacklists. New sites pop up like gophers. You probably need a content blocker like DansGuardian or the upcoming E2Guardian. They analyze the content, not just the URL.

aGeekhere · Jun 24, 2015, 8:34 AM

try using this filter and see how you go.
http://urlblacklist.com/?sec=download

detox · Jun 20, 2016, 5:05 PM

@KOM:

I cannot figure out how to actually block all instances

If you could, you would be rich. Squidguard can only block on what it has for bad sites in its database. This is always the issue with blacklists. New sites pop up like gophers. You probably need a content blocker like DansGuardian or the upcoming E2Guardian. They analyze the content, not just the URL.

Thanks for the assist! However, I do not see DansGuardian or E2Guardian in available packages. Do I need to manually install? Or am I missing a setting to see all available packages?

(forgot to mention I am running the newest PfSense 2.3.1 p5)

KOM · Jun 20, 2016, 5:27 PM

Holy ancient thread, Batman!

Those packages do not exist under 2.3. E2Guardian never materialized. Squidguard + blacklists are your only option for now.

AR15USR · Jun 20, 2016, 5:46 PM

@KOM:

…or the upcoming E2Guardian...

edit, post answered…

detox · Jun 20, 2016, 6:30 PM

@KOM:

Holy ancient thread, Batman!

Those packages do not exist under 2.3. E2Guardian never materialized. Squidguard + blacklists are your only option for now.

KOM,

Thanks for the info!

sichent · Jun 20, 2016, 8:12 PM

latest Squid is capable of using ICAP server - the one that could look into actual contents being pumped. See http://docs.diladele.com/tutorials/filtering_https_traffic_squid_pfsense/index.html

Quentine · May 16, 2020, 8:53 PM

This post is deleted!