Unofficial E2guardian package for pfSense
-
Thank you Marcello, and thank you pfsensation :)
I've attached the output of Marcello's ls command. I will next try what pfsensation suggested.
Thank you.
-
:-[ :-[ :-[
I did:
[code]
chmod -R 644 /usr/local/etc/e2guardian
/usr/local/bin/php /usr/local/www/e2guardian.php fetch_blacklist
Then I did reapply blacklist, save, daemon tab - save: still nothing, service still doesn't start:| Jul 1 03:30:56 | php-fpm | 87924 |
/pkg_edit.php: The command '/usr/local/etc/rc.d/e2guardian.sh start' returned exit code '1', the output was 'kern.ipc.somaxconn: 16384 -> 16384 kern.maxfiles: 131072 -> 131072 kern.maxfilesperproc: 104856 -> 104856 kern.threads.max_threads_per_proc: 20480 -> 20480 Starting e2guardian. Error reading file /usr/local/etc/e2guardian/lists/blacklists/adult/urls: No such file or directory Error opening file: /usr/local/etc/e2guardian/lists/blacklists/adult/urls Error reading: /usr/local/etc/e2guardian/lists/bannedurllist.g_Default Error opening bannedurllist Error opening filter group config: /usr/local/etc/e2guardian/e2guardianf1.conf Error in reading filter group files Error reading filter group conf file(s). Error parsing the e2guardian.conf file or other e2guardian configuration files /usr/local/etc/rc.d/e2guardian.sh: WARNING: failed to start e2guardian' [/q][/t][/t]
-
Access your acls under url tab and check what is enabled. It's looking for a file that doesn't exists on shallalist.
Select categories that shows under include select combo box. They are from current applied blacklist.
There is no need to change file permission.
-
Thank you for your reply, Marcello :)
I'm trying to understand what you mean with " It's looking for a file that doesn't exists on shallalist".
In the top Include box I can select, for example, adv urls, spyware urls, tracker urls. However, in the next Config box, none of these exist. What does this mean? what do I need to do here then?
Per your: "Select categories that shows under include select combo box. They are from current applied blacklist"
Could you give a concrete example?
Thank you very much for your help :P
-
Take a look or send a screenshot on the same field I've pushed on my last post.
-
hi marcelloc,
could you possible update your setup and configuration procedure so that it is up to date and tidy up.
-
hi marcelloc,
could you possible update your setup and configuration procedure so that it is up to date and tidy up.
On a clean install, just save setup on GUI and use.
With previous install, check error messages. -
Just an update,
My E2 Guardian has now been rock solid after the last update. However - HOST- shows dns error, not sure why because in my pfSense DHCP leases it shows the host name.
Also Marcello, I replied to the transparent proxy issue you reported on GitHub. Since Phillip will add the feature in V5 do you know if we can use pfSense to redirect the traffic for now? I've been successful in doing it for port 80 (HTTP) but not port 443 (HTTPS).
Thank you for bearing with me, and pushing out the necessary updates.
-
Just an update,
My E2 Guardian has now been rock solid after the last update. However - HOST- shows dns error, not sure why because in my pfSense DHCP leases it shows the host name.
Also Marcello, I replied to the transparent proxy issue you reported on GitHub. Since Phillip will add the feature in V5 do you know if we can use pfSense to redirect the traffic for now? I've been successful in doing it for port 80 (HTTP) but not port 443 (HTTPS).
Thank you for bearing with me, and pushing out the necessary updates.
Did you tried this:
https://www.howtogeek.com/295048/how-to-configure-a-proxy-server-on-android/You hardcode the proxy values or enter the url of the PAC file.
-
Since Phillip will add the feature in V5 do you know if we can use pfSense to redirect the traffic for now? I've been successful in doing it for port 80 (HTTP) but not port 443 (HTTPS).
I'm using this way for transparent proxy with no MITM
https://forum.pfsense.org/index.php?topic=128116.msg730725#msg730725
For MITM clients I'm using WPAD.
-
Take a look or send a screenshot on the same field I've pushed on my last post.
Thank you Marcello.
Ok, I've only selected porn (pic8).
In config, it says this (txt).
There is something else weird: in include there are sections that are available in config. For example, spyware and hacking are available in include, but not in config (see pic9 and *.txt).
-
Since Phillip will add the feature in V5 do you know if we can use pfSense to redirect the traffic for now? I've been successful in doing it for port 80 (HTTP) but not port 443 (HTTPS).
I'm using this way for transparent proxy with no MITM
https://forum.pfsense.org/index.php?topic=128116.msg730725#msg730725
For MITM clients I'm using WPAD.
Hmm, without WPAD can you force clients to use E2Guardian proxy for HTTPS using pfSense rules? So for guest devices I don't MITM, but I still want them to go through proxy for URL based filtering + caching via squid. I don't want to solely rely on WPAD, because it only seems to work well on Windows, however on IOS it works hit and miss, and Android doesn't WPAD functionality at all.
It can be done for sure, but I just want to know if we can use pfSense rules as it is, since I'm only having luck with NAT redirecting port 80 traffic. -
@Mr.:
Ok, I've only selected porn (pic8).
In config, it says this (txt).
The GUI package does not include any .Include to text fields under ACL tab. All you see are default configuration for a stock e2guardian bsd binaries.
All you select under include combo will reflect on filtergroup file, that does not appears on GUI.
-
but I just want to know if we can use pfSense rules as it is, since I'm only having luck with NAT redirecting port 80 traffic.
You can try with 443 nat rule without MITM, but I use squid transparent SSL with SPLICE_ALL to send non configured clients to e2guradian acls.
-
@Mr.:
Ok, I've only selected porn (pic8).
In config, it says this (txt).
The GUI package does not include any .Include to text fields under ACL tab. All you see are default configuration for a stock e2guardian bsd binaries.
All you select under include combo will reflect on filtergroup file, that does not appears on GUI.
So what do I need to do to make it work?
-
@Mr.:
So what do I need to do to make it work?
What I suggested on one of the first topics. Check config on all tabs if you still are getting erros.
The selected itens on include are present on resulting config file under /usr/local/etc/e2guardian/
That adult/domains erros probably are uncomment on your site deny text field.
-
@Mr.:
So what do I need to do to make it work?
What I suggested on one of the first topics. Check config on all tabs if you still are getting erros.
Sorry, what you suggested I did multiple times in a row, Marcello.
I have uninstalled it and simply conclude it doesn't work.
-
@Mr.:
I have uninstalled it and simply conclude it doesn't work.
What erros do you get? Same as before? Did you tried to comment include acls that does not exists on file system?
-
hi marcelloc,
could you possible update your setup and configuration procedure so that it is up to date and tidy up.
On a clean install, just save setup on GUI and use.
With previous install, check error messages.I mean, could you include in your setup guide / instruction how to have it http and https filtering with wpad so we can make it successfully running.
-
I mean, could you include in your setup guide / instruction how to have it http and https filtering with wpad so we can make it successfully running.
Did you tried this?
https://forum.pfsense.org/index.php?topic=128116.msg731037#msg731037
