E2guardian package for pfsense - $??

Mobile_Bob

can't a wpad be used here? Not having an issue filtering https sites with it (only google/other search engines images is a pain to filter).

I was thinking along those lines, but I would be skipping the URL filter completely for any HTTPS sites… Such as Anonymous proxy https sites etc... I'll play some more with it, it's possible that I can go through E2Guardian encrypted then have Squid decrypt for caching... Unless i'm misunderstanding your intended use of wpad...

Google is taken care of by using the DNS redirect, and I registered our school's IP address with bing so both are locked to safe search. All other search engines are just blocked...

aGeekhere

Such as Anonymous proxy https sites etc

I block Anonymous proxy websites in squidguard to solve that.

Google is taken care of by using the DNS redirect

What method did you use to redirect all google domains? see https://forum.pfsense.org/index.php?topic=97948.0

and I registered our school's IP address with bing so both are locked to safe search

Home users are out of luck here :(

search engines are just blocked

How is this achieved? must be a big list as there are many search engines (each search engine could have many domains), what if new ones come up?

Mobile_Bob

@aGeekHere:

I block Anonymous proxy websites in squidguard to solve that.

Thats what i'm using E2Guardian for. But i'm worried I won't be able to use both SSL interception on Squid, and keep it running through E2Guardian first… I'll let you know how it goes.

What method did you use to redirect all google domains? see https://forum.pfsense.org/index.php?topic=97948.0

I used the method I described back a couple of pages on this thread. DNS override

How is this achieved? must be a big list as there are many search engines (each search engine could have many domains), what if new ones come up?

Again since i'm using E2Guardian, I just added search engines to the site block list. I made specific exceptions for google and bing since they are set to safe search.

bfrost

When/How does this package make it to the 'menu' of available packages?

aGeekhere

Will this still be E2guardian 2.2 or will it be a later version? as they are up to version 3.2.0 now

marcelloc

@aGeekHere:

Will this still be E2guardian 2.2 or will it be a later version? as they are up to version 3.2.0 now

For now, e2guardian 3.0.4

bfrost

@bfrost:

When/How does this package make it to the 'menu' of available packages?

Am I being dense? Do we wait for a new version of pfsense to be released before we see this on the menu of Install-able Apps?

aGeekhere

How is the performance of E2guardian vs dansguardian in pfsense?

doktornotor

How do you want to compare performance between two packages out of which one does not work any more (without tons of manual hack) and the other does not work yet (without tons of manual hacks)? Cannot see how's that even a factor here ATM. Not to mention, DG is dead code upstream.

aGeekhere

well, I got dansguardian somewhat working (stopped using though), found it very slow and not very effective. Was looking forward to a faster more affective filter in E2guardian. I guest I was just looking for some reassurance that this will be the case. Anyway keep up the good work :)

Mobile_Bob

@aGeekHere:

well, I got dansguardian somewhat working (stopped using though), found it very slow and not very effective. Was looking forward to a faster more affective filter in E2guardian. I guest I was just looking for some reassurance that this will be the case. Anyway keep up the good work :)

I did the manual install and it seems to work quite well. I don't know how to compare the speed, but it is serving our small school quite well and doesn't seem to be slowing anyone's connections down. The filter itself is working well and I have had no major issues with it.

aGeekhere

The filter itself is working well and I have had no major issues with it.

How well does it work with things like google\bing\yahoo images? is E2guardian able to filter the images? because currently squidguard cannot filter google images and I have to use a dns override to force safe search.

Mobile_Bob

@aGeekHere:

The filter itself is working well and I have had no major issues with it.

How well does it work with things like google\bing\yahoo images? is E2guardian able to filter the images? because currently squidguard cannot filter google images and I have to use a dns override to force safe search.

I'm not sure that it does… I'm using the DNS override myself since that is the suggested method...

jadog

Can anybody provide instructions on how to manually install E2Guardian on PFSense 2.2.4? I attempted to use the instructions from the link here: http://knes1.github.io/blog/2015/2015-07-18-manually-installing-e2guardian-to-pfsense.html.

However, I was unable to successfully install Squid3. So I tried with just Squid instead. However, when I look at Status > Services, E2Guardian shows as stopped and I can't get it to start. Also, after installing E2Guarding, now Squid shows as stopped and won't stay running either. Does anybody have this working with 2.2.4 or do I need to rollback to 2.2.3?

knes1

@jadog:

Can anybody provide instructions on how to manually install E2Guardian on PFSense 2.2.4? I attempted to use the instructions from the link here: http://knes1.github.io/blog/2015/2015-07-18-manually-installing-e2guardian-to-pfsense.html.

However, I was unable to successfully install Squid3. So I tried with just Squid instead. However, when I look at Status > Services, E2Guardian shows as stopped and I can't get it to start. Also, after installing E2Guarding, now Squid shows as stopped and won't stay running either. Does anybody have this working with 2.2.4 or do I need to rollback to 2.2.3?

Hi,

are you getting any error messages in the logs? Go to status -> system logs and filter (at the bottom page) for e2guardian and/or squid. I remember that I got it working in a VM with 2.2.4 back when 2.2.4 was published so I think it should be possible.

PS.
It seems that some progress was made in the pull request on github and Renato built the PBIs and requires testers… So it seems we may have a package for e2guardian soon.

Mobile_Bob

I'm starting to have these errors in my logs…

e2guardian[6896]: No free children from getfreechild(): numchildren = 160, busychildren = 159, waitingfor = 0
e2guardian[57821]: Error forking preforkchildren extra processes.

My Max Age Children is set for 500
My Min/Max Children is set to 10/160

I know my numbers are high, but I raised them trying to fight off this problem… It seems that the children processes are not being killed like they are supposed to.

I have rebooted PFSense and restarted service already...

Samuel_R

Trying to follow this thread, but havent seen any updates in a month and am not seeing any packages on pfsense. Is there an update for this? (if there is another thread I should be following, could someone link to it?)

Mobile_Bob

@Samuel_R:

Trying to follow this thread, but havent seen any updates in a month and am not seeing any packages on pfsense. Is there an update for this? (if there is another thread I should be following, could someone link to it?)

Seems like things are on hold until PFSense 2.3 comes out. 2.3 has a better package management system that they are waiting for.

For an idea on how 2.3 is coming you can check out this: https://redmine.pfsense.org/projects/pfsense/roadmap#2.3

Mobile_Bob

I know the biggest wait is 2.3, but I was wondering if you plan on upgrading to the latest build of e2guardian on the FreeBSD port. As much benefit as I have already gotten, and as much as I am invested in seeing this package be finished, and continue to improve. I'm willing to donate $100 for all your hard work. I have no doubt you're busy but hopefully this will help, and maybe get some interest going again :) Anyone else who hasn't yet donated willing to chip in a little?? This is A LOT of work!!! Lets thank Marcello and give him incentive to continue!

StuBoy

Hi,

I'm a new to pfSense, also looking for e2Guardian to be available for pfSense, just wanted to check my understanding of where it is :-

I understand that e2Guardian will not be available as a pfSense package until v2.3 is released ? Is that correct ?

Do we have any estimate on when pfSense 2.3 will be available ?

I believe e2Guardian can be installed natively in FreeBSD, how easy is that for a novice ?

Stu.