Unofficial E2guardian package for pfSense

jetberrocal · May 30, 2017, 1:17 AM

The error is happening to me.

I checked the config files and it is being generated correctly.
I also disable Exceptions box in case the word falls in the exceptions.

So it seems to be an e2g 3.5.1 problem.

I guess this has to be checked on the e2g forum.

By the way I used the word <jet>. Search on Google and selected the link
https://www.google.com.pr/url?sa=t&rct=j&q=&esrc=s&source=web&cd=13&cad=rja&uact=8&ved=0ahUKEwjq5qXotpbUAhUE6yYKHTncD78QFghvMAw&url=https%3A%2F%2Fjetprogramusa.org%2F&usg=AFQjCNGFZZgNdXX2OXYga7BOLHmLFjdZ_g</jet>

jkrueger2020 · May 30, 2017, 1:50 AM

@jetberrocal:

The error is happening to me.

I checked the config files and it is being generated correctly.
I also disable Exceptions box in case the word falls in the exceptions.

So it seems to be an e2g 3.5.1 problem.

I guess this has to be checked on the e2g forum.

By the way I used the word <jet>. Search on Google and selected the link
https://www.google.com.pr/url?sa=t&rct=j&q=&esrc=s&source=web&cd=13&cad=rja&uact=8&ved=0ahUKEwjq5qXotpbUAhUE6yYKHTncD78QFghvMAw&url=https%3A%2F%2Fjetprogramusa.org%2F&usg=AFQjCNGFZZgNdXX2OXYga7BOLHmLFjdZ_g</jet>

Thanks for helping to check this! At least I know I'm not the only one now.

I've logged the issue on the E2Guardian Google Groups: https://groups.google.com/forum/#!topic/e2guardian/NfBZ1Ux_lEY

If no one replies within a day or so, I'm going to log it as an issue on GitHub.

Thanks again!

Jonathan

jetberrocal · May 30, 2017, 2:14 AM

@jkrueger2020:

@jetberrocal:

The error is happening to me.

I checked the config files and it is being generated correctly.
I also disable Exceptions box in case the word falls in the exceptions.

So it seems to be an e2g 3.5.1 problem.

I guess this has to be checked on the e2g forum.

By the way I used the word <jet>. Search on Google and selected the link
https://www.google.com.pr/url?sa=t&rct=j&q=&esrc=s&source=web&cd=13&cad=rja&uact=8&ved=0ahUKEwjq5qXotpbUAhUE6yYKHTncD78QFghvMAw&url=https%3A%2F%2Fjetprogramusa.org%2F&usg=AFQjCNGFZZgNdXX2OXYga7BOLHmLFjdZ_g</jet>

Thanks for helping to check this! At least I know I'm not the only one now.

I've logged the issue on the E2Guardian Google Groups: https://groups.google.com/forum/#!topic/e2guardian/NfBZ1Ux_lEY

If no one replies within a day or so, I'm going to log it as an issue on GitHub.

Thanks again!

Jonathan

If they ask for the conf files they are in /usr/local/etc/e2guardian/

pfsensation · May 30, 2017, 3:16 PM

When using Mitm I'm getting "Error too many redirects" from time to time. It can become quite frustrating when you're trying to browse, and you have to keep refreshing and going back on the page until it finally works.

Anyone else experiencing this? I vaguely remember seeing this being reported before to the E2G team, I assume it's fixed in 4.1 If it has, maybe we can back port?

Also marcelloc, have you been able to test newer versions of E2G on pfsense? Hoping it can be stable enough soon for us to update.

marcelloc · May 30, 2017, 3:52 PM

@pfsensation:

Also marcelloc, have you been able to test newer versions of E2G on pfsense? Hoping it can be stable enough soon for us to update.

Not yet, just that version that was crashing on BSD.

marcelloc · May 30, 2017, 3:58 PM

I've updated the install process to use freebsd package style instead of manual fetch from script. you can also enable the unofficial repository to install it using GUI.

See the updated install instructions on the first post of this topic.

Unfortunately, this package is still available only for AMD64 architecture.

jetberrocal · May 30, 2017, 4:56 PM

@pfsensation:

When using Mitm I'm getting "Error too many redirects" from time to time. It can become quite frustrating when you're trying to browse, and you have to keep refreshing and going back on the page until it finally works.

Anyone else experiencing this? I vaguely remember seeing this being reported before to the E2G team, I assume it's fixed in 4.1 If it has, maybe we can back port?

Also marcelloc, have you been able to test newer versions of E2G on pfsense? Hoping it can be stable enough soon for us to update.

I found this link related to your problem
https://github.com/e2guardian/e2guardian/issues/92

I think you need to add the particular site to a ssl cert exception conf file.

Mr. Jingles · May 30, 2017, 6:31 PM

Was this answer:

@marcelloc:

I'm changing the packages under unofficial repo to have uninstall and update under system -> Package manger. E2guardian will take some time as it needs a manual compiled binaries. But packages like wpad and filer are already updated.

Meant as a reply to me:

@Mr.:

How can I safely remove icap, clam, e2guardian, tinyproxy, and all others?

So I can start fresh again, and can you give me the exact install commands?

If so, it means I can't completely remove it now?

marcelloc · May 30, 2017, 7:49 PM

You can remove packages under console using pkg binary. (pkg info, pkg delete, etc…)

I'm changing the package structure to be able to install, remove, update it easier.

pfsensation · May 31, 2017, 4:55 AM

I installed E2Guardian from the unnoficial repo AMD64. Now I have two entries for E2Guardian in the web config. How can I remove the old manual one? Or any, as they are basically the same instance with two entries in the tab.

Another question is, why isn't E2Guardian decrypting/phrase matching content properly? If you go to Youtube and type in "porn x" inappropriate images appear, and there seem to be more than enough bad words on the search results for it to be blocked. But it doesn't get blocked even though I have all the phraselists enabled for pornography. However, when I refresh then it blocks. Why isn't it blocking on the first search? Is it just checking URL and ignoring?
Also having the same issues on Yandex, when you search for "porn" in images, it loads up. If you refresh then it blocks.

I guess this is a pretty big bug. I don't think my configuration or setup is wrong because after refresh it is blocking the site just fine, maybe someone can confirm? I remember it working fine before the latest update. Not sure what could be wrong.

EDIT: wow this is weird… Searching "Porn x" from YouTube homepage right now blocks it. If you search something else then porn x. It bypasses the proxy, if you refresh the page it blocks it again. Why would it behave this way? I'm fully confused and tearing my hair out.

EDIT2: Now it seems to block searching that term from any page. If you try searching it 2/3x it eventually loads up. And bypasses block page.

Oh just to clarify. E2G is correctly decrypting HTTPS. I can see the internal CA in my browser when going to YouTube.

Draven666 · May 31, 2017, 4:40 PM

Maybe a firewall/antivirus conflict? I personally doubt it but in the tech universe, I prefer to not rule out any possibilities…

Cino · May 31, 2017, 6:20 PM

@pfsensation:

OMG!! Now everything is working perfectly! Certificates are forged and have the required SAN (Subject Alternative Name) for Google Chrome, Firefox etc to work.
Here's my sexy page at home :P – 'KorTeX' is just what I call my network.

@pfsensation Can you share your block page code? please?

marcelloc · May 31, 2017, 7:26 PM

4.1 retryfix branch seems to be working now on BSD, I'll start GUI changes for e2guardian 4.1

https://github.com/e2guardian/e2guardian/issues/222

pfsensation · May 31, 2017, 7:38 PM

@marcelloc:

4.1 retryfix branch seems to be working now on BSD, I'll start GUI changes for e2guardian 4.1

https://github.com/e2guardian/e2guardian/issues/222

Great to hear that, it seems some of the issues I'm facing is already fixed in 4.1. Also, I did realise you got rid of the GUI duplicate. So thanks a lot for that with the 0.9.2 update. :)

Will you be regularly maintaining your repo? Will it cause any problems with updating pfsense of default packages from pfsense repo? This seems like a really good way to get good quality unofficial packages and keep them up to date.

pfsensation · May 31, 2017, 7:55 PM

@Cino:

@pfsensation:

OMG!! Now everything is working perfectly! Certificates are forged and have the required SAN (Subject Alternative Name) for Google Chrome, Firefox etc to work.
Here's my sexy page at home :P – 'KorTeX' is just what I call my network.

@pfsensation Can you share your block page code? please?

Sure, although it's in no way perfect. It's much, much better looking than all other block pages I've seen and works perfectly for me. If you make any changes or make it better, let me know. :)

https://ybin.me/p/3b12275edc779552#Z9PkW1Vve44x83LQz9+XZd63bigXiWuUrJXr8lM4/Iw=

marcelloc · May 31, 2017, 8:37 PM

@pfsensation:

@marcelloc:

4.1 retryfix branch seems to be working now on BSD, I'll start GUI changes for e2guardian 4.1

https://github.com/e2guardian/e2guardian/issues/222

Great to hear that, it seems some of the issues I'm facing is already fixed in 4.1.

False positive. I got the testing repo from e2guardian but compiled a 3.5.1 version instead of 4.1. :(

I've include the dump of the crash on e2guardian git

Mr. Jingles · May 31, 2017, 9:28 PM

@marcelloc:

You can remove packages under console using pkg binary. (pkg info, pkg delete, etc…)

I'm changing the package structure to be able to install, remove, update it easier.

Thank you Marcello ;D

Is it meant to deinstall Squid so I have to start all over again with that too?

pfsensation · May 31, 2017, 9:34 PM

Is there any way to turn off Tiny proxy once and for all? It's really frustrating because I use Squid and it keeps starting up when I change any configurations on E2Guardian.

marcelloc · May 31, 2017, 10:51 PM

@pfsensation:

Is there any way to turn off Tiny proxy once and for all? It's really frustrating because I use Squid and it keeps starting up when I change any configurations on E2Guardian.

I'll split it in two packages when I have time.

pfsensation · May 31, 2017, 11:31 PM

@marcelloc:

@pfsensation:

Is there any way to turn off Tiny proxy once and for all? It's really frustrating because I use Squid and it keeps starting up when I change any configurations on E2Guardian.

I'll split it in two packages when I have time.

Thanks Marcello! Or you could create a off switch? :P