E2guardian package for pfsense - $??

Samuel_R

It won't show in pfsense/packages/config/ until its been merged. Here is a link to the pull request.

https://github.com/pfsense/pfsense-packages/pull/866

But the pull hasnt been updated in close to a month. How long from last change until it's put into a pull?

jwsmiths

Any updates?

rjcrowder

Very interested in this as well. Lack of e2guardian has kept me from upgrading to 2.2.x. It looks to me like the package is ready to merge. Any way to get it raised in priority? Thanks in advance!

aaronouthier

Per Github:

This pull request contains merge conflicts that must be resolved.
Only those with write access to this repository can merge pull requests.

with regards to the last pull request from Phil against Marcello's repo.

If that's not the problem, then perhaps:

…Then you might like to make a fresh copy of everything, put it in a new branch, and submit a new clean pull request with the "final" files.

–Phil Davis to Marcello C.

TheLimey

I asked Marcello what the hold up is. His reply is here: https://forum.pfsense.org/index.php?topic=96031.msg536450#msg536450

Summary: bureaucratic delays

Long story: Apparently the current hold up is waiting for Renato (renatohtpc - https://forum.pfsense.org/index.php?action=profile;u=265729) to review the code because there are issues with the coding style. It seems that no-one can filter anything in V2.2.x+ because the code isn't formatted correctly, nothing to do with it not working.

Action:
I haven't seen an ETA for the review, but I'm hoping Renato will give us one here. If enough people ask maybe we can even get it finished.

Work around:
In the mean time Marcello said he would write up some instructions on how to manually install the new e2guardian from the github code. I haven't seen them yet, but thanks in advance Marcello.

rjcrowder

I'd be happy to kick in a little more bounty for those instructions!!!

Exolon

You might want to read the "pull" request on pfsense/packages, click here.

marcelloc

@TheLimey:

Work around:
In the mean time Marcello said he would write up some instructions on how to manually install the new e2guardian from the github code. I haven't seen them yet, but thanks in advance Marcello.

I need to test the alternative install before posting but anyone can download package files from pull request and manual install e2guardian binaries via freebsd pkg(pkg install e2guardian) on pfsense 2.2.x

Renato helped me a lot with e2guardian port to freebsd(especially on port file descriptions and contents) and I know pfSense project has a lot of points that need his attention.

TheLimey

@Exolon:

You might want to read the "pull" request on pfsense/packages, click here.

You posted this while I was PM'ing to Renato :)

This is what I sent to him:

Hi Renato,

I quized Marcello about the delay in the upcoming e2guardian package and he said it's done, it's just waiting for you to review the code. See here https://forum.pfsense.org/index.php?topic=96031.msg536450#msg536450

I posted this news here: https://forum.pfsense.org/index.php?topic=87526.msg537585#msg537585

…and was hoping you could post a replay letting us know when the review is likely to be complete.

Many people seem to be very eager to get this, as filtering is unusable in V2.2.x (which is what the two SG-2440's my customer has for filtering their traffic have on them).

I'll post a copy of this message on that same thread so everyone knows what's happening.

Thanks,
Colin =)

…I guess we won't get a reply for a few days if he's on holiday this week (according to the "pull" post linked above).

I need to test the alternative install before posting but anyone can download package files from pull request and manual install e2guardian binaries via freebsd pkg(pkg install e2guardian) on pfsense 2.2.x

I have seen mention of this elsewhere, but could only find one set of vague instructions. I wasn't confident they were sufficient (or correct), and didn't want to "screw up" my systems. My biggest concern was configuration. There are a LOT of options for DansGuardian, and I wasn't confident I would be able to replicate them correctly in e2Guardian without the GUI (which I'm assuming I won't have without a "proper" pfSense package. It's theoretically possible I could just copy and paste the config file for DansGuardian to e2guardian, but don't know if that would cause issues if settings have changed.

Thanks for the update Marcello, and I'll eagerly await your instructions, and Renato's review ETA.

phil.davis

The code style is all fixed up - I spent a few hours some time ago formatting and handed that to marcello and he committed it into his pull request.
When you take all the PHP/INC files from the pull request and put them in the right places on your pfSense box, and then run a bit of install script (or manually add the E2guardian item into the menus) you will have the E2guardian GUI pages for pfSense. So you will be able to enter stuff in similar boxes to your current Dans Guardian.

Of course you need practice first on a test system - e.g. just make a simple VM on an ordinary PC and mess with that to make sure you know what to do.

It would be even better if Renato can review and commit soon.

marcelloc

Thanks again Phil :)

knes1

I'm another guy stuck with two SG2440s bought for purposes of web filtering… so I tried manual install :)

I installed e2guardian package from freebsd repo.

@phil.davis:

When you take all the PHP/INC files from the pull request and put them in the right places on your pfSense box, and then run a bit of install script (or manually add the E2guardian item into the menus) you will have the E2guardian GUI pages for pfSense. So you will be able to enter stuff in similar boxes to your current Dans Guardian.

I grabbed the e2guardian files from the pull request. I copied the files php/inc/xml files to locations specified in e2guardian.xml on pfSense. I'm stuck on "run a bit of install script". Where is the install script? Any guidance would be appreciated :). If I manage to install it I'll provide instructions for others.

Thank you everyone for your work on e2guardian!

EDIT:

Ok - I think I've figured out everything except how to add links to service and status->services.

marcelloc

@knes1:

Ok - I think I've figured out everything except how to add links to service and status->services.

Backup xml file and check menu section


<menu>
			<name>E2guradian</name>
			<tooltiptext>E2guradian</tooltiptext>
			Services
			<configfile>e2guardian.xml</configfile>
		</menu>

and service section

		 <service><name>e2guardian</name>
			<rcfile>e2guardian.sh</rcfile>
			<executable>e2guardian</executable></service>

you can add it via console direct on config.xml (if you really know how to edit it ) or restore a backup with modified xml file.

jwsmiths

@marcelloc:

@knes1:

Ok - I think I've figured out everything except how to add links to service and status->services.

Backup xml file and check menu section
		

<menu>
			<name>E2guradian</name>
			<tooltiptext>E2guradian</tooltiptext>
			Services
			<configfile>e2guardian.xml</configfile>
		</menu>
and service section
		 <service><name>e2guardian</name>
			<rcfile>e2guardian.sh</rcfile>
			<executable>e2guardian</executable></service> 
you can add it via console direct on config.xml (if you really know how to edit it ) or restore a backup with modified xml file.

I'd be willing to test this out - but my one concern is when the official e2guardian package eventually comes out will this mess that up? i.e. - will it cause a conflict that causes me to have to restore my system and thus undo all my work or will the system merely see that I have e2guardian already installed and then when future updates are applied allow me to update seamlessly?

marcelloc

@jwsmiths:

I'd be willing to test this out - but my one concern is when the official e2guardian package eventually comes out will this mess that up?

Except for the freebsd package installed via pkg install, file download and xml changes will not mess your install.

If you prefer, you can try it on a vm and forward connectionts from your box to your vm

Another option is to install it on your backup box if exists.

you can unistall freebsd packages too via console before installing the pbi.

IMHO, pbi is messing up almost all packages I use on 2.2, so I'm doing on my installs a pbi remove and pkg install.

doktornotor

@marcelloc:

IMHO, pbi is messing up almost all packages I use on 2.2, so I'm doing on my installs a pbi remove and pkg install.

Cannot wait for 2.3; indeed extremely hard to find some more crappy packaging format, PBI is virtually unique. ::) >:(

TheLimey

Excellent news all round! :D

So we're currently just waiting for Renato to get back from holiday (vacation), at which time he'll be reviewing the code. Hopefully that doesn't take very long! I have no idea how much code needs to be reviewed, or how thorough that testing is, but hopefully it's not a major task.

Thanks for your findings knes1, please do update if you work out more. Maybe a new thread, with a link here.

@_jwsmiths_, I share your concern! With the e2guardian package so close, I'm wondering if it's better to wait. …but Marcello's comments about the packages not working reliably is also concerning. If I get time I'll create a pfSense VM for testing the manual install, as he (Marcello) suggests.

I'm glad we know where we are now, and that we just have one more task to complete (unless Renato finds any issues :-X). Thanks to everyone for all your input, and please keep us updated here if you discover anything relevant. :D

knes1

@TheLimey:

Thanks for your findings knes1, please do update if you work out more. Maybe a new thread, with a link here.

As promised, here's the guide (I wrote a blog post about it):

http://knes1.github.io/blog/2015/2015-07-18-manually-installing-e2guardian-to-pfsense.html

Let me know if you think it would be better to open up a separate thread about this (for discussing etc…).

Again, thanks to Marcello and others who made this possible :)

marcelloc

Please feedback package tests, it may speed up merge process.

ismaelnoble

ill try it out later this week on my test system…provided work doesnt have other plans for me.