Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Unofficial E2guardian package for pfSense

    Scheduled Pinned Locked Moved Cache/Proxy
    1.2k Posts 71 Posters 1.6m Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • L
      lindsay
      last edited by

      I wonder also if this e2guardian upgrades to the latest 5.0 beta ?
      This upstream proxy in beta 5.0 will be useful for me because of HTTPSproxy and privoxy.
      If you do not download the certificate it do not matter you can still browse internet but not be able to filter https but it filter ads on http.

      Fiberline 500/500Mbps
      Intel(R) Xeon(R) CPU E5-2620 v4 @ 2.10GHz

      1 Reply Last reply Reply Quote 0
      • marcellocM
        marcelloc
        last edited by

        @lindsay:

        I wonder also if this e2guardian upgrades to the latest 5.0 beta ?
        This upstream proxy in beta 5.0 will be useful for me because of HTTPSproxy and privoxy.
        If you do not download the certificate it do not matter you can still browse internet but not be able to filter https but it filter ads on http.

        Yes, they are from the latest 5.0 version. Beta but much more stable then 4.1

        Treinamentos de Elite: http://sys-squad.com

        Help a community developer! ;D

        1 Reply Last reply Reply Quote 0
        • L
          lindsay
          last edited by

          Can you check out if this is real or fake squidblacklist

          Fiberline 500/500Mbps
          Intel(R) Xeon(R) CPU E5-2620 v4 @ 2.10GHz

          1 Reply Last reply Reply Quote 0
          • P
            pfsensation
            last edited by

            @lindsay:

            Can you check out if this is real or fake squidblacklist

            Looks interesting, currently by default we're using ShallaList. If this one is better, it may be worth thinking about switching. Even though E2 Guardian does content scanning, having a good black list means it can save resources. If there are any blacklisted sites, it will block it immediately without spending precious CPU resources scanning the contents of the page.

            @Marcelloc, what do you think? I know you've got a little VM environment setup for testing, would this work without causing any major issues? I'd try it myself, but I am out today, and have work tomorrow as the holidays are over.

            1 Reply Last reply Reply Quote 0
            • marcellocM
              marcelloc
              last edited by

              E2guardian list is returning a 404 but the squid link ok.

              https://www.squidblacklist.org/downloads/squid-malicious.acl

              to use on e2guardian, just remove the fist . of each line.

              this script will fetch the file and remove the .

              
              #!/bin/sh
              
              list=/usr/local/etc/e2guardian/lists/squidblacklist.list
              /usr/bin/fetch -o $list https://www.squidblacklist.org/downloads/dg-malicious.acl
              /usr/local/sbin/e2guardian -Q
              
              

              You can save this script on your pfsense and update it every day for example.

              On e2guardian config, include it on your acl with this line

              .Include

              squidblacklist_02.PNG
              squidblacklist_02.PNG_thumb

              Treinamentos de Elite: http://sys-squad.com

              Help a community developer! ;D

              1 Reply Last reply Reply Quote 0
              • P
                pfsensation
                last edited by

                @marcelloc:

                E2guardian list is returning a 404 but the squid link ok.

                https://www.squidblacklist.org/downloads/squid-malicious.acl

                to use on e2guardian, just remove the fist . of each line.

                this script will fetch the file and remove the .

                
                #!/bin/sh
                
                list=/usr/local/etc/e2guardian/lists/squidblacklist.list
                /usr/bin/fetch -o $list https://www.squidblacklist.org/downloads/dg-malicious.acl
                /usr/local/sbin/e2guardian -Q
                
                

                You can save this script on your pfsense and update it every day for example.

                On e2guardian config, include it on your acl with this line

                .Include

                I think it maybe best to wait for them to fix the issue before diving in. On first glance, how does it compare to ShallaList? Better?

                1 Reply Last reply Reply Quote 0
                • marcellocM
                  marcelloc
                  last edited by

                  @pfsensation:

                  I think it maybe best to wait for them to fix the issue before diving in

                  It's fixed now.

                  Treinamentos de Elite: http://sys-squad.com

                  Help a community developer! ;D

                  1 Reply Last reply Reply Quote 0
                  • marcellocM
                    marcelloc
                    last edited by

                    @marcelloc:

                    @pfsensation:

                    I think it maybe best to wait for them to fix the issue before diving in

                    It's fixed now.

                    @marcelloc:

                    On first glance, how does it compare to ShallaList?

                    ShallaList has more categories but I think it's not updated very often.

                    Treinamentos de Elite: http://sys-squad.com

                    Help a community developer! ;D

                    1 Reply Last reply Reply Quote 0
                    • L
                      lindsay
                      last edited by

                      It is actually a paid service http://www.squidblacklist.org

                      Fiberline 500/500Mbps
                      Intel(R) Xeon(R) CPU E5-2620 v4 @ 2.10GHz

                      1 Reply Last reply Reply Quote 0
                      • L
                        lindsay
                        last edited by

                        Your script gave me

                        sh /usr/local/Scripts/Blacklist-update.sh
                        : not foundScripts/Blacklist-update.sh:
                        : Not Founds://www.squidblacklist.org/downloads/dg-malicious.acl
                        /usr/local/Scripts/Blacklist-update.sh: /usr/local/sbin/e2guardian: Permission denied
                        
                        

                        So where do you place the script?

                        I do think i have some error as getting these errors to in GUI

                        Notices
                        Filter Reload
                        There were error(s) loading the rules: /tmp/rules.debug:20: cannot define table bogonsv6: Cannot allocate memory - The line in question reads [20]: table <bogonsv6> persist file "/etc/bogonsv6"
                        @ 2018-04-02 20:23:54
                        There were error(s) loading the rules: /tmp/rules.debug:20: cannot define table bogonsv6: Cannot allocate memory - The line in question reads [20]: table <bogonsv6> persist file "/etc/bogonsv6"
                        @ 2018-04-02 20:24:03
                        There were error(s) loading the rules: /tmp/rules.debug:20: cannot define table bogonsv6: Cannot allocate memory - The line in question reads [20]: table <bogonsv6> persist file "/etc/bogonsv6"
                        @ 2018-04-02 21:41:08
                        

                        Fiberline 500/500Mbps
                        Intel(R) Xeon(R) CPU E5-2620 v4 @ 2.10GHz

                        1 Reply Last reply Reply Quote 0
                        • marcellocM
                          marcelloc
                          last edited by

                          @lindsay:

                          I do think i have some error as getting these errors to in GUI

                          Notices
                          Filter Reload
                          There were error(s) loading the rules: /tmp/rules.debug:20: cannot define table bogonsv6: Cannot allocate memory - The line in question reads [20]: table <bogonsv6> persist file "/etc/bogonsv6"
                          @ 2018-04-02 20:23:54
                          There were error(s) loading the rules: /tmp/rules.debug:20: cannot define table bogonsv6: Cannot allocate memory - The line in question reads [20]: table <bogonsv6> persist file "/etc/bogonsv6"
                          @ 2018-04-02 20:24:03
                          There were error(s) loading the rules: /tmp/rules.debug:20: cannot define table bogonsv6: Cannot allocate memory - The line in question reads [20]: table <bogonsv6> persist file "/etc/bogonsv6"
                          @ 2018-04-02 21:41:08
                          

                          this error is related do ipv6 bogons netowork alias

                          https://forum.pfsense.org/index.php?topic=50141.0

                          Treinamentos de Elite: http://sys-squad.com

                          Help a community developer! ;D

                          1 Reply Last reply Reply Quote 0
                          • marcellocM
                            marcelloc
                            last edited by

                            @lindsay:

                            Your script gave me

                            sh /usr/local/Scripts/Blacklist-update.sh
                            : not foundScripts/Blacklist-update.sh:
                            : Not Founds://www.squidblacklist.org/downloads/dg-malicious.acl
                            /usr/local/Scripts/Blacklist-update.sh: /usr/local/sbin/e2guardian: Permission denied
                            
                            

                            So where do you place the script?

                            looks like you're calling the script not on the same folder you saved it or the content does not match what I've posted or you are not running it as root.

                            Treinamentos de Elite: http://sys-squad.com

                            Help a community developer! ;D

                            1 Reply Last reply Reply Quote 0
                            • L
                              lindsay
                              last edited by

                              Things is starting to function, for now i see everything is working also upstream proxy (proxHTTPS and privoxy) ;)
                              There is a lot to test out but only when i am alone on the network :)

                              Fiberline 500/500Mbps
                              Intel(R) Xeon(R) CPU E5-2620 v4 @ 2.10GHz

                              1 Reply Last reply Reply Quote 0
                              • marcellocM
                                marcelloc
                                last edited by

                                Why do you need an upstream proxy?

                                Treinamentos de Elite: http://sys-squad.com

                                Help a community developer! ;D

                                1 Reply Last reply Reply Quote 0
                                • P
                                  pfsensation
                                  last edited by

                                  I've been getting a few crashes recently here and there. Not sure if it is just my configuration, E2 Guardian just randomly seems to stop.

                                  I've got 1000 HTTP workers, and resource usage seems to be fine. The below is what I see in system logs:

                                  Apr 4 08:17:44 php-fpm 76879 /rc.start_packages: [E2guardian] - Detected boot process pr:1 bp:1 rpc:no
                                  Apr 4 08:17:44 php-fpm 76879 /rc.start_packages: [E2guardian] - Aborting config file generation

                                  1 Reply Last reply Reply Quote 0
                                  • L
                                    lindsay
                                    last edited by

                                    @marcelloc:

                                    Why do you need an upstream proxy?

                                    Under General Misc settings you have misc options

                                    "If you have the "usexforwardedfor" option enabled, you may want to specify the IPs from which this kind of header is allowed, such as another upstream proxy server for instance If you want authorize multiple IPs, specify each one on an individual xforwardedforfilterip line."

                                    Fiberline 500/500Mbps
                                    Intel(R) Xeon(R) CPU E5-2620 v4 @ 2.10GHz

                                    1 Reply Last reply Reply Quote 0
                                    • marcellocM
                                      marcelloc
                                      last edited by

                                      @lindsay:

                                      Under General Misc settings you have misc options

                                      "If you have the "usexforwardedfor" option enabled, you may want to specify the IPs from which this kind of header is allowed, such as another upstream proxy server for instance If you want authorize multiple IPs, specify each one on an individual xforwardedforfilterip line."

                                      Is this a question?

                                      Treinamentos de Elite: http://sys-squad.com

                                      Help a community developer! ;D

                                      1 Reply Last reply Reply Quote 0
                                      • S
                                        susamlicubuk
                                        last edited by

                                        Hello Marcello
                                        i just installed e2guardian5
                                        direct connect and certificate selected
                                        Sometimes I click the link and the page is empty
                                        Pressing f5 or clicking again will open the page
                                        for example
                                        http://www.hurriyet.com.tr/
                                        http://www.hurriyet.com.tr/gundem/
                                        set up a manual squid
                                        and e2Guardian settings
                                        parent mode - use automatic embeded parent config
                                        I do not have this problem if I choose
                                        why am I having this problem?

                                        1 Reply Last reply Reply Quote 0
                                        • marcellocM
                                          marcelloc
                                          last edited by

                                          @susamlicubuk:

                                          Hello Marcello
                                          i just installed e2guardian5
                                          direct connect and certificate selected
                                          Sometimes I click the link and the page is empty
                                          Pressing f5 or clicking again will open the page
                                          for example
                                          http://www.hurriyet.com.tr/
                                          http://www.hurriyet.com.tr/gundem/
                                          set up a manual squid
                                          and e2Guardian settings
                                          parent mode - use automatic embeded parent config
                                          I do not have this problem if I choose
                                          why am I having this problem?

                                          I saw this on firefox on my labs. If it's easy to reproduce, we csn open a ticket on e2guardian project to see what developers suggest.

                                          Treinamentos de Elite: http://sys-squad.com

                                          Help a community developer! ;D

                                          1 Reply Last reply Reply Quote 0
                                          • P
                                            pfsensation
                                            last edited by

                                            @marcelloc:

                                            @pfsensation:

                                            I think it maybe best to wait for them to fix the issue before diving in

                                            It's fixed now.

                                            It's down again, darnit! It looks like better blacklist to use, when compared to ShallaList as it's a paid provider and has more categories. However, would those extra categories automatically appear on the GUI if we were to replace the ShallaList blacklist link with the Squid one?

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.