E2guardian package for pfsense - $??

Mobile_Bob · Sep 18, 2015, 12:40 AM

The filter itself is working well and I have had no major issues with it.

How well does it work with things like google\bing\yahoo images? is E2guardian able to filter the images? because currently squidguard cannot filter google images and I have to use a dns override to force safe search.

I'm not sure that it does… I'm using the DNS override myself since that is the suggested method...

jadog · Oct 3, 2015, 6:14 PM

Can anybody provide instructions on how to manually install E2Guardian on PFSense 2.2.4? I attempted to use the instructions from the link here: http://knes1.github.io/blog/2015/2015-07-18-manually-installing-e2guardian-to-pfsense.html.

However, I was unable to successfully install Squid3. So I tried with just Squid instead. However, when I look at Status > Services, E2Guardian shows as stopped and I can't get it to start. Also, after installing E2Guarding, now Squid shows as stopped and won't stay running either. Does anybody have this working with 2.2.4 or do I need to rollback to 2.2.3?

knes1 · Oct 5, 2015, 9:08 AM

@jadog:

Can anybody provide instructions on how to manually install E2Guardian on PFSense 2.2.4? I attempted to use the instructions from the link here: http://knes1.github.io/blog/2015/2015-07-18-manually-installing-e2guardian-to-pfsense.html.

However, I was unable to successfully install Squid3. So I tried with just Squid instead. However, when I look at Status > Services, E2Guardian shows as stopped and I can't get it to start. Also, after installing E2Guarding, now Squid shows as stopped and won't stay running either. Does anybody have this working with 2.2.4 or do I need to rollback to 2.2.3?

Hi,

are you getting any error messages in the logs? Go to status -> system logs and filter (at the bottom page) for e2guardian and/or squid. I remember that I got it working in a VM with 2.2.4 back when 2.2.4 was published so I think it should be possible.

PS.
It seems that some progress was made in the pull request on github and Renato built the PBIs and requires testers… So it seems we may have a package for e2guardian soon.

Mobile_Bob · Oct 16, 2015, 5:25 PM

I'm starting to have these errors in my logs…

e2guardian[6896]: No free children from getfreechild(): numchildren = 160, busychildren = 159, waitingfor = 0
e2guardian[57821]: Error forking preforkchildren extra processes.

My Max Age Children is set for 500
My Min/Max Children is set to 10/160

I know my numbers are high, but I raised them trying to fight off this problem… It seems that the children processes are not being killed like they are supposed to.

I have rebooted PFSense and restarted service already...

Samuel_R · Nov 17, 2015, 6:39 PM

Trying to follow this thread, but havent seen any updates in a month and am not seeing any packages on pfsense. Is there an update for this? (if there is another thread I should be following, could someone link to it?)

Mobile_Bob · Nov 17, 2015, 7:59 PM

@Samuel_R:

Trying to follow this thread, but havent seen any updates in a month and am not seeing any packages on pfsense. Is there an update for this? (if there is another thread I should be following, could someone link to it?)

Seems like things are on hold until PFSense 2.3 comes out. 2.3 has a better package management system that they are waiting for.

For an idea on how 2.3 is coming you can check out this: https://redmine.pfsense.org/projects/pfsense/roadmap#2.3

Mobile_Bob · Nov 18, 2015, 2:05 PM

I know the biggest wait is 2.3, but I was wondering if you plan on upgrading to the latest build of e2guardian on the FreeBSD port. As much benefit as I have already gotten, and as much as I am invested in seeing this package be finished, and continue to improve. I'm willing to donate $100 for all your hard work. I have no doubt you're busy but hopefully this will help, and maybe get some interest going again :) Anyone else who hasn't yet donated willing to chip in a little?? This is A LOT of work!!! Lets thank Marcello and give him incentive to continue!

StuBoy · Dec 8, 2015, 12:27 PM

Hi,

I'm a new to pfSense, also looking for e2Guardian to be available for pfSense, just wanted to check my understanding of where it is :-

I understand that e2Guardian will not be available as a pfSense package until v2.3 is released ? Is that correct ?

Do we have any estimate on when pfSense 2.3 will be available ?

I believe e2Guardian can be installed natively in FreeBSD, how easy is that for a novice ?

Stu.

Mobile_Bob · Dec 10, 2015, 7:09 PM

See here for a general feel for how 2.3 is coming (no dates): https://redmine.pfsense.org/projects/pfsense/roadmap#2.3

It's not to hard to install, but does take some poking around to get everything working: http://knes1.github.io/blog/2015/2015-07-18-manually-installing-e2guardian-to-pfsense.html

Both are found earlier in this thread. I would suggest reading through the whole thing if you want to try to do it manually.

marcelloc · Dec 10, 2015, 9:18 PM

I've started fixing packages to 2.3. If postfix gets merged and works fine, e2guardian(on current port version) is on the list.

michaeleino · Dec 11, 2015, 3:32 PM

first I want to say that no words are enough to thank marcelloc for his efforts,
what is the version of e2guardian you implement ?
I can compile the latest one v3.2 easily & start it in a freebsd 10.1 environment, but I can't create the pkg to try with pfsense… tell me if I can help.


./configure --enable-clamd --enable-avastd --enable-icap --enable-kavd --enable-sslmitm --enable-email --enable-trickledm --localstatedir=/var --with-logdir=/var/log --with-piddir=/var/run

Downloadski · Apr 5, 2016, 10:28 AM

I followed the above link: https://github.com/pfsense/FreeBSD-ports/pull/23
And there is a question of marcelloc which is answered by rbgarga and after that no more..

Issues seemed to be: Packages will never be allowed to touch system files anymore. It's wrong and dangerous

Cino · Apr 5, 2016, 11:27 AM

@Downloadski:

I followed the above link: https://github.com/pfsense/FreeBSD-ports/pull/23
And there is a question of marcelloc which is answered by rbgarga and after that no more..

Issues seemed to be: Packages will never be allowed to touch system files anymore. It's wrong and dangerous

https://github.com/pfsense/pfsense-packages/pull/866 is the pull request for E2guardian

bfrost · May 11, 2016, 7:38 PM

I am a crap coder but I would be willing to try my hand at this if no one else will. The pfsense guys are top notch and have created a beautiful system but I need to provide a little filtering.

Can someone point me in the right direction on this to just get started?

bfrost · May 11, 2016, 7:39 PM

Or I could just pitch money if someone else who knows what they are doing wants to pick this back up.

zythra · May 11, 2016, 7:50 PM

@bfrost:

Can someone point me in the right direction on this to just get started?

I've got the BSD package working. I've just been playing with it in the hopes that the pfSense package will come soon. I am coming from Ubuntu server (and a strong Windows background) so some of the BSD structure isn't familiar to me, at this point I still have to start E2guardian up manually, haven't figured out how to get it to run at boot.

If you want to try installing the BSD package you can from the console with the following command:

pkg add http://pkg.freebsd.org/freebsd:10:x86:64/release_3/All/e2guardian-3.0.4_1.txz

cmb991 · May 22, 2016, 2:48 AM

I'll give whatever else is needed, but I need this to work on all interfaces/vlans. In my environment, we have multiple vlans and subnets. Also need some type of DNS blocking option so we don't have to worry about the HTTPS cert errors. Just tell me the price.

andresense · May 23, 2016, 2:53 PM

Any news?

asterix · Jun 20, 2016, 2:53 PM

what seems to be the the issue here? Can someone with packaging knowledge pick this up?

jetberrocal · Jun 24, 2016, 5:47 PM

@marcelloc:

@aGeekHere:

Will this still be E2guardian 2.2 or will it be a later version? as they are up to version 3.2.0 now

For now, e2guardian 3.0.4

As of this date, what is the e2guardian version available for pfsense?

I need at least 3.1, for a working ssl_bump funtion