E2guardian package for pfsense - $??

ismaelnoble

ill try it out later this week on my test system…provided work doesnt have other plans for me.

knes1

Please feedback package tests, it may speed up merge process.

Here's my feedback:

Daemon tab doesn't appear on first load, you have to click on it second time to appear
Sometimes (happend to me on 2 out of 4 installs) when loading shalla list, some entries from the default site and url list (adv category) stays in the config file, which prevents e2guardian to start. When attempting to start e2guardian manually I received the following error:

Error reading file /usr/local/etc/e2guardian/lists/blacklists/ads/urls: No such file or directory
Error reading file /usr/local/etc/e2guardian/lists/blacklists/ads/urls: No such file or directory
Error opening file: /usr/local/etc/e2guardian/lists/blacklists/ads/urls
Error opening bannedurllist
Error opening filter group config: /usr/local/etc/e2guardian/e2guardianf1.conf
Error reading filter group conf file(s).
Error parsing the e2guardian.conf file or other e2guardian configuration files

This can be resolved by commenting out offending adv list in ACL configuration for sites and urls.

When attempting to install e2guardian on production system where I had defunct dansguardian installed (and removed, both through package manager and by deleting files) e2guardian wouldn't start and when I attempted to start it from console I received the following message:


Starting e2guardian.
Error binding ipc server file (try using the SysV to stop e2guardian then try starting it again or doing an 'rm /tmp/.dguardianipc').
Exiting with error

I resolved this by deleting the following 2 files:


/tmp/.dguardianipc
/tmp/.dguardianurlipc

E2guardian is now running successfully on one production SG2440 in a small network with cca 10 devices. I will update this if I encounter any problems.

doktornotor

Well afraid most of the above is causes by the (incomplete) "DIY" install process.

marcelloc

the /usr/local/etc messages may be related to pbi vs pkg isntall

the /tmp/.dguardianipc errors are related to previous dansguardians install and tmp files it creates.

bfrost

What can I do to help get this into the repo? Testing?

jwsmiths

Testing it out now on my production home system. So far no major problems. Will update this post later.

jwsmiths

I see period "Exited with status 11" messages in system logs. No obvious malfunction while browsing internet though.

bfrost

I am so very excited about this going into the repo that I am checking the web page every few hours.

I appreciate the work from those who have contributed.

TheLimey

I was hoping Renato would post here with an ETA. As I mentioned before, I PM'd him (before I knew he was on holiday), with a link to this thread, but I have seen no post here, and received no reply by PM either. He's either ignoring me (us), or not checking his messages. :'(

Based on the fact he is checking code for pfSense, I'm going to assume he is a pfSense staff member. If that is the case then I'm very disappointed at the lack of updates the company is providing their customers.

Does anyone have any direct contact with him? It would quite excellent if we could get an ETA posted here. :)

marcelloc

Better ask for a comunity repo IMHO.

jwsmiths

FYI - installing 2.2.4 borked my entire internet access. E2Guardian won't start (linked file missing) but even when I disable it and turn off the NAT rule that should be forwarding all traffic to E2Guardian I am unable to make http connections out (https still works). May need to un-install E2guardian and then upgrade and then re-install it to make sure it works.

marcelloc

@jwsmiths:

May need to un-install E2guardian and then upgrade and then re-install it to make sure it works.

Yes. After any firmware upgrade, you need to check freebsd packages you've installed. Sometimes will be a dependence some times just the pkg itself.

knes1

@jwsmiths:

FYI - installing 2.2.4 borked my entire internet access. E2Guardian won't start (linked file missing) but even when I disable it and turn off the NAT rule that should be forwarding all traffic to E2Guardian I am unable to make http connections out (https still works). May need to un-install E2guardian and then upgrade and then re-install it to make sure it works.

Ok, I've tried the following upgrade procedure in a VM: Firstly, I've uninstalled e2guardian using pkg, then upgraded pfSense to 2.2.4, and then reinstalled e2guardian freeBSD packages. This seems to work (I haven't tested it fully yet though).
Here are the steps:

Before the upgrade:


pkg delete e2guardian
pkg delete pcre

Upgrade pfSense to 2.2.4
Reinstall e2guardian packages


pkg install e2guardian

Go to e2guardian config and save a page (this is to reapply configs)

I believe this might work even if you applied the upgrade without deinstalling e2guardian first (e.g. do steps 1,3 and 4 after the upgrade). However, I haven't tried it.

bfrost

Is anything happening with this?

doktornotor

@bfrost:

Is anything happening with this?

https://github.com/marcelloc/pfsense-packages/pull/2/files
https://github.com/marcelloc/pfsense-packages/pull/4/files

TheLimey

@bfrost:

Is anything happening with this?

I haven't seen any updates with regards to the pfSense e2guardian package, so I assume we are still just waiting for Renato (renatohtpc - https://forum.pfsense.org/index.php?action=profile;u=265729) to finish the code review.

He was apparently on holiday, and would be working on it when he got back, but that should have been over a week ago. I PM'd him a while back with a link to this thread with the hope he might let us know what is happening. I assume he either isn't checking his messages, or he doesn't want us to know what is happening. =(

Marcello suggests just installing the code, but I haven't had a chance to try that out. some others seem to have had some success though.

Mobile_Bob

Watching the pull request daily, it looks extremely close…

marcelloc

@Mobile_Bob:

Watching the pull request daily, it looks extremely close…

After the gui code merge, it will still need a pbi build and on current release, pbi is messing up a lot of binaries with "missing" libs.

If you need the e2guardian package, I suggest testing the manual install.

Mobile_Bob

@marcelloc:

After the gui code merge, it will still need a pbi build and on current release, pbi is messing up a lot of binaries with "missing" libs.

If you need the e2guardian package, I suggest testing the manual install.

I was hoping to be able to wait it out, but i'm going to have to go ahead and do the install manually. Thanks for all your hard work on this. I agree with you that we need a community package list, something that can be turned on for those that don't mind an unofficial list… I think it would help get new and fixed packages out faster. All the code in the pull requests that has just been abandoned because of (undocumented) code format requirements etc... It's sad... A lot of the packages seem very out of date.

doktornotor

@Mobile_Bob:

I think it would help get new and fixed packages out faster.

No panic. We are already cleaning up

:o :o :o ;D ;D ;D