• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Unofficial E2guardian package for pfSense

Cache/Proxy
70
1.2k
1.4m
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • M
    marcelloc
    last edited by Mar 13, 2018, 11:36 PM

    @susamlicubuk:

    I did not test mobile devices but the pc works very well
    but realtime logs look empty
    why

    check if you box has the e2guardian logs on /var/log/e2guardian.

    You can also try to change log type under Report and Logs tab.

    Treinamentos de Elite: http://sys-squad.com

    Help a community developer! ;D

    1 Reply Last reply Reply Quote 0
    • M
      marcelloc
      last edited by Mar 14, 2018, 1:17 PM

      Amazing performance

      8k_connections.PNG
      8k_connections.PNG_thumb
      8k_connections_system.PNG
      8k_connections_system.PNG_thumb

      Treinamentos de Elite: http://sys-squad.com

      Help a community developer! ;D

      1 Reply Last reply Reply Quote 0
      • S
        susamlicubuk
        last edited by Mar 14, 2018, 2:44 PM

        Marcello
        Congratulations on your work
        it works fine but it will be my responsibility
        Do not have user (ip) site login authorization section? ips only has one group. why?
        for example:
        192.168.1.10 facebook block
        192.168.1.11 facebook pass - youtube block
        SquidGuard is very flexible and accomplished in this way
        but with SSL proxy problem

        1 Reply Last reply Reply Quote 0
        • M
          marcelloc
          last edited by Mar 14, 2018, 2:50 PM

          @susamlicubuk:

          Do not have user (ip) site login authorization section? ips only has one group. why?
          for example:
          192.168.1.10 facebook block
          192.168.1.11 facebook pass - youtube block

          Just create another group and change acl combination.

          @susamlicubuk:

          SquidGuard is very flexible and accomplished in this way

          Definitely not. You will need more time to understand it's config style but e2guardian config is full featured.

          Treinamentos de Elite: http://sys-squad.com

          Help a community developer! ;D

          1 Reply Last reply Reply Quote 0
          • M
            marcelloc
            last edited by Mar 16, 2018, 10:06 PM

            Version 5 can really be scaled both horizontally and vertically.

            I have a box with 15k working process running really nice.

            Amazing work e2guardian team did on it.

            Treinamentos de Elite: http://sys-squad.com

            Help a community developer! ;D

            1 Reply Last reply Reply Quote 0
            • P
              pfsensation
              last edited by Mar 16, 2018, 10:53 PM Mar 16, 2018, 10:43 PM

              @marcelloc:

              Version 5 can really be scaled both horizontally and vertically.

              I have a box with 15k working process running really nice.

              Amazing work e2guardian team did on it.

              You're right. I just jumped in today, taking extra precautions. I cloned my pfSense VM twice and then jumped in. So far the transparent proxy is working brilliantly and exactly how I wanted it. I've got my pfSense box entirely virtualised in ESXi and it's running brilliantly so far at home. Hopefully it continues to run stable, I've got it running under Squid for some light caching. In addition to this, when changing the settings around in the GUI, E2Guardian no longer lags or locks up like 4.1, it applies the config nearly instantly and is back up and running.

              @Marcelloc could we add some filters to the logs? It would be really useful to go through denied websites based on groups, logs, times and categories. And would help tune E2Guardian better.


              1 Reply Last reply Reply Quote 0
              • M
                MR-NT
                last edited by Mar 20, 2018, 9:30 PM

                @marcelloc:

                Here are install instructions for UNOFFICIAL e2guardian package for pfSense(R) software 2.3.x

                Install
                You can enable Unoffical repo creating or downloading the file below using diagnostics -> command  prompt -> Execute Shell Command prompt menu:

                2.3 AMD64

                
                fetch -q -o /usr/local/etc/pkg/repos/Unofficial.conf https://raw.githubusercontent.com/marcelloc/Unofficial-pfSense-packages/master/Unofficial.conf
                
                

                2.3 I386

                
                fetch -q -o /usr/local/etc/pkg/repos/Unofficial.conf https://raw.githubusercontent.com/marcelloc/Unofficial-pfSense-packages/master/Unofficiali386.conf
                
                

                2.4

                
                fetch -q -o /usr/local/etc/pkg/repos/Unofficial.conf https://raw.githubusercontent.com/marcelloc/Unofficial-pfSense-packages/master/Unofficial.24.conf
                
                

                After fetching the repo file, you can see these packages under System -> Package Manager

                Without enabling Unofficial repo, you can add it using console/ssh with

                
                cd /root
                fetch https://raw.githubusercontent.com/marcelloc/Unofficial-pfSense-packages/master/pkg-e2guardian/files/install_e2guardian_23.sh
                sh ./install_e2guardian_23.sh
                
                

                E2guardian requires a cache/upstream server , so if you do not want to use squid together with e2guardian, point e2guardian proxy configuration to 127.0.0.1 port 8888 to use tinyproxy cache server instead.

                http://www.shallalist.de/Downloads/shallalist.tar.gz is one of compatible blacklists for e2guardian. Configure it under blacklist tab.

                Once it finishes, all must be in place. If you do not see the menu after it finishes, try to install any pfSense package from GUI, like cron for example.

                WARNING

                Use it at your own risk.

                This script install packages from freebsd and change your config file.

                Excellent , i think this is the only i can block based on Page content , am right or wrong ?

                1 Reply Last reply Reply Quote 0
                • M
                  marcelloc
                  last edited by Mar 20, 2018, 9:33 PM

                  @MR-NT:

                  Excellent , i think this is the only i can block based on Page content , am right or wrong ?

                  Right !

                  Treinamentos de Elite: http://sys-squad.com

                  Help a community developer! ;D

                  1 Reply Last reply Reply Quote 0
                  • S
                    susamlicubuk
                    last edited by Mar 20, 2018, 11:10 PM

                    Hello Marcello
                    The e2 guardian does not work after the pfsense firewall is restarted.
                    e2Guardian from the interface does not work without pressing the save and apply button.
                    Do you have a solution?

                    1 Reply Last reply Reply Quote 0
                    • P
                      pfsensation
                      last edited by Mar 20, 2018, 11:54 PM

                      @susamlicubuk:

                      Hello Marcello
                      The e2 guardian does not work after the pfsense firewall is restarted.
                      e2Guardian from the interface does not work without pressing the save and apply button.
                      Do you have a solution?

                      Have you got the blacklist downloaded and the watch dog turned on? Turning on the watchdog should make sure that E2guardian is running.

                      1 Reply Last reply Reply Quote 0
                      • G
                        GoldenShark
                        last edited by Mar 21, 2018, 9:01 AM

                        @pfsensation:

                        @susamlicubuk:

                        Hello Marcello
                        The e2 guardian does not work after the pfsense firewall is restarted.
                        e2Guardian from the interface does not work without pressing the save and apply button.
                        Do you have a solution?

                        Have you got the blacklist downloaded and the watch dog turned on? Turning on the watchdog should make sure that E2guardian is running.

                        I have same problem also.

                        I tried watch dog it doesnt work for this issue.

                        The problem is when you restart your pfsense its going to show to you : APPLY CHANGES.

                        If i will not apply it , it wont be work.

                        I have to apply every after restart pfsense

                        I can send you picture what he need : http://prntscr.com/iu6tr5

                        1 Reply Last reply Reply Quote 0
                        • P
                          pfsensation
                          last edited by Mar 21, 2018, 2:57 PM

                          @GoldenShark:

                          @pfsensation:

                          @susamlicubuk:

                          Hello Marcello
                          The e2 guardian does not work after the pfsense firewall is restarted.
                          e2Guardian from the interface does not work without pressing the save and apply button.
                          Do you have a solution?

                          Have you got the blacklist downloaded and the watch dog turned on? Turning on the watchdog should make sure that E2guardian is running.

                          I have same problem also.

                          I tried watch dog it doesnt work for this issue.

                          The problem is when you restart your pfsense its going to show to you : APPLY CHANGES.

                          If i will not apply it , it wont be work.

                          I have to apply every after restart pfsense

                          I can send you picture what he need : http://prntscr.com/iu6tr5

                          You're right. i've been having this from the start, but it's one of those things that didn't really bother me too much because it only occurs when you do a full restart. pfSense is not really something you need to restart often at all, furthermore, I somehow managed to get it to auto startup using a combination of Service watchdog from the package manager and E2G's own watchdog. This way, after a reboot, I still get the prompt to save the configurations, but it still starts up the service automatically and everything seems to work as normal.

                          @Marcelloc, I'm having problems with Regex for enforcing Youtube Restricted. Do you use this on your network? Anyone else here using it? It seemed to be working fine on 4.1, but on v5, that's stopped working. I've yet to pin down if its a change Youtube made on their end or if its E2G for sure.

                          The below is what I'm using for YouTube:

                          # Enforce restricted mode in YouTube
                          #
                          "(^https://www.youtube.com)"->"https://restrict.youtube.com"
                          "(^https://m.youtube.com)"->"https://restrict.youtube.com"
                          "(^https://youtubei.googleapis.com)"->"https://restrict.youtube.com"
                          "(^https://youtube.googleapis.com)"->"https://restrict.youtube.com"
                          "(^https://www.youtube-nocookie.com)"->"https://restrict.youtube.com"
                          #
                          
                          1 Reply Last reply Reply Quote 0
                          • M
                            marcelloc
                            last edited by Mar 23, 2018, 7:22 PM Mar 21, 2018, 3:29 PM

                            @pfsensation:

                            s to work as normal.

                            @Marcelloc, I'm having problems with Regex for enforcing Youtube Restricted. Do you use this on your network? Anyone else here using it? It seemed to be working fine on 4.1, but on v5, that's stopped working. I've yet to pin down if its a change Youtube made on their end or if its E2G for sure.

                            The below is what I'm using for YouTube:

                            # Enforce restricted mode in YouTube
                            #
                            "(^https://www.youtube.com)"->"https://restrict.youtube.com"
                            "(^https://m.youtube.com)"->"https://restrict.youtube.com"
                            "(^https://youtubei.googleapis.com)"->"https://restrict.youtube.com"
                            "(^https://youtube.googleapis.com)"->"https://restrict.youtube.com"
                            "(^https://www.youtube-nocookie.com)"->"https://restrict.youtube.com"
                            #
                            
                            

                            Acls on v5 has changed a lot. I'll put it on my check list to do as soon as possible

                            Treinamentos de Elite: http://sys-squad.com

                            Help a community developer! ;D

                            1 Reply Last reply Reply Quote 0
                            • P
                              pfsensation
                              last edited by Mar 21, 2018, 3:52 PM Mar 21, 2018, 3:46 PM

                              @marcelloc:

                              @pfsensation:

                              s to work as normal.

                              @Marcelloc, I'm having problems with Regex for enforcing Youtube Restricted. Do you use this on your network? Anyone else here using it? It seemed to be working fine on 4.1, but on v5, that's stopped working. I've yet to pin down if its a change Youtube made on their end or if its E2G for sure.

                              The below is what I'm using for YouTube:

                              # Enforce restricted mode in YouTube
                              #
                              "(^https://www.youtube.com)"->"https://restrict.youtube.com"
                              "(^https://m.youtube.com)"->"https://restrict.youtube.com"
                              "(^https://youtubei.googleapis.com)"->"https://restrict.youtube.com"
                              "(^https://youtube.googleapis.com)"->"https://restrict.youtube.com"
                              "(^https://www.youtube-nocookie.com)"->"https://restrict.youtube.com"
                              #
                              
                              Acls on v5 has changed a lot. I'll put it on my check list to do as soon as possible
                              

                              Hi Marcello,

                              Thanks for your reply. Is this something that's just affecting the pfSense package you've made? I've raised it on Github so I'd be glad if you could provide some input there: https://github.com/e2guardian/e2guardian/issues/365

                              1 Reply Last reply Reply Quote 0
                              • M
                                marcelloc
                                last edited by Mar 21, 2018, 4:23 PM

                                @pfsensation:

                                Thanks for your reply. Is this something that's just affecting the pfSense package you've made? I've raised it on Github so I'd be glad if you could provide some input there: https://github.com/e2guardian/e2guardian/issues/365

                                I guess yes. A lot of acls code needs to be reviewed to match v5 configuration style.

                                It's better if we can first confirm if it's a gui code issue or a binary issue before creating a ticket on e2guardian project.

                                Treinamentos de Elite: http://sys-squad.com

                                Help a community developer! ;D

                                1 Reply Last reply Reply Quote 0
                                • S
                                  susamlicubuk
                                  last edited by Mar 21, 2018, 5:18 PM

                                  I think the config xml is broken when it restarts
                                  or embedded squid does not start
                                  works with save and applly
                                  service watchdog does not solve the problem
                                  Is there a custom configuration?
                                  Could you please look into this problem

                                  1 Reply Last reply Reply Quote 0
                                  • P
                                    pfsensation
                                    last edited by Mar 21, 2018, 5:26 PM

                                    @marcelloc:

                                    @pfsensation:

                                    Thanks for your reply. Is this something that's just affecting the pfSense package you've made? I've raised it on Github so I'd be glad if you could provide some input there: https://github.com/e2guardian/e2guardian/issues/365

                                    I guess yes. A lot of acls code needs to be reviewed to match v5 configuration style.

                                    It's better if we can first confirm if it's a gui code issue or a binary issue before creating a ticket on e2guardian project.

                                    Sure, I'll be glad if you could have a look when you have time. I've closed the issue on the E2Guardian Project page on GitHub for now until we can confirm where the problem is. Furthermore, Philip did push out some extra fixes/updates so we need to rebuild the binaries anyways.

                                    1 Reply Last reply Reply Quote 0
                                    • M
                                      marcelloc
                                      last edited by Mar 21, 2018, 5:31 PM

                                      @susamlicubuk:

                                      I think the config xml is broken when it restarts
                                      or embedded squid does not start
                                      works with save and applly
                                      service watchdog does not solve the problem
                                      Is there a custom configuration?
                                      Could you please look into this problem

                                      Except if you need custom squid configuration on this parent daemon, select direct mode on e2guardian config.

                                      Treinamentos de Elite: http://sys-squad.com

                                      Help a community developer! ;D

                                      1 Reply Last reply Reply Quote 0
                                      • S
                                        susamlicubuk
                                        last edited by Mar 21, 2018, 5:52 PM

                                        Parent mode: direct connect selected
                                        pfsense restarting filtering is not working
                                        I click on save and apply
                                        working

                                        1 Reply Last reply Reply Quote 0
                                        • L
                                          lavd
                                          last edited by Mar 23, 2018, 2:16 AM

                                          E2guardian works, thank you

                                          How come we can't make SSL bump to work with Squid+SquidGuard, making it cripple SSL on google etc., but here it works fine?

                                          Can this be made an official module already?

                                          1 Reply Last reply Reply Quote 0
                                          604 out of 1213
                                          • First post
                                            604/1213
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.