Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Unofficial E2guardian package for pfSense

    Scheduled Pinned Locked Moved Cache/Proxy
    1.2k Posts 71 Posters 1.7m Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • marcellocM
      marcelloc
      last edited by

      Why do you need an upstream proxy?

      Treinamentos de Elite: http://sys-squad.com

      Help a community developer! ;D

      1 Reply Last reply Reply Quote 0
      • P
        pfsensation
        last edited by

        I've been getting a few crashes recently here and there. Not sure if it is just my configuration, E2 Guardian just randomly seems to stop.

        I've got 1000 HTTP workers, and resource usage seems to be fine. The below is what I see in system logs:

        Apr 4 08:17:44 php-fpm 76879 /rc.start_packages: [E2guardian] - Detected boot process pr:1 bp:1 rpc:no
        Apr 4 08:17:44 php-fpm 76879 /rc.start_packages: [E2guardian] - Aborting config file generation

        1 Reply Last reply Reply Quote 0
        • L
          lindsay
          last edited by

          @marcelloc:

          Why do you need an upstream proxy?

          Under General Misc settings you have misc options

          "If you have the "usexforwardedfor" option enabled, you may want to specify the IPs from which this kind of header is allowed, such as another upstream proxy server for instance If you want authorize multiple IPs, specify each one on an individual xforwardedforfilterip line."

          Fiberline 500/500Mbps
          Intel(R) Xeon(R) CPU E5-2620 v4 @ 2.10GHz

          1 Reply Last reply Reply Quote 0
          • marcellocM
            marcelloc
            last edited by

            @lindsay:

            Under General Misc settings you have misc options

            "If you have the "usexforwardedfor" option enabled, you may want to specify the IPs from which this kind of header is allowed, such as another upstream proxy server for instance If you want authorize multiple IPs, specify each one on an individual xforwardedforfilterip line."

            Is this a question?

            Treinamentos de Elite: http://sys-squad.com

            Help a community developer! ;D

            1 Reply Last reply Reply Quote 0
            • S
              susamlicubuk
              last edited by

              Hello Marcello
              i just installed e2guardian5
              direct connect and certificate selected
              Sometimes I click the link and the page is empty
              Pressing f5 or clicking again will open the page
              for example
              http://www.hurriyet.com.tr/
              http://www.hurriyet.com.tr/gundem/
              set up a manual squid
              and e2Guardian settings
              parent mode - use automatic embeded parent config
              I do not have this problem if I choose
              why am I having this problem?

              1 Reply Last reply Reply Quote 0
              • marcellocM
                marcelloc
                last edited by

                @susamlicubuk:

                Hello Marcello
                i just installed e2guardian5
                direct connect and certificate selected
                Sometimes I click the link and the page is empty
                Pressing f5 or clicking again will open the page
                for example
                http://www.hurriyet.com.tr/
                http://www.hurriyet.com.tr/gundem/
                set up a manual squid
                and e2Guardian settings
                parent mode - use automatic embeded parent config
                I do not have this problem if I choose
                why am I having this problem?

                I saw this on firefox on my labs. If it's easy to reproduce, we csn open a ticket on e2guardian project to see what developers suggest.

                Treinamentos de Elite: http://sys-squad.com

                Help a community developer! ;D

                1 Reply Last reply Reply Quote 0
                • P
                  pfsensation
                  last edited by

                  @marcelloc:

                  @pfsensation:

                  I think it maybe best to wait for them to fix the issue before diving in

                  It's fixed now.

                  It's down again, darnit! It looks like better blacklist to use, when compared to ShallaList as it's a paid provider and has more categories. However, would those extra categories automatically appear on the GUI if we were to replace the ShallaList blacklist link with the Squid one?

                  1 Reply Last reply Reply Quote 0
                  • marcellocM
                    marcelloc
                    last edited by

                    @pfsensation:

                    It's down again, darnit! It looks like better blacklist to use, when compared to ShallaList as it's a paid provider and has more categories. However, would those extra categories automatically appear on the GUI if we were to replace the ShallaList blacklist link with the Squid one?

                    If it has the same folder structure, yes.

                    Treinamentos de Elite: http://sys-squad.com

                    Help a community developer! ;D

                    1 Reply Last reply Reply Quote 0
                    • P
                      pfsensation
                      last edited by

                      @marcelloc:

                      @pfsensation:

                      It's down again, darnit! It looks like better blacklist to use, when compared to ShallaList as it's a paid provider and has more categories. However, would those extra categories automatically appear on the GUI if we were to replace the ShallaList blacklist link with the Squid one?

                      If it has the same folder structure, yes.

                      Well, it was specifically designed for E2/DG therefore it should work just fine?

                      However, I wanted to ask if you had any problems with E2G randomly stopping sometimes? I've had it happen once or twice, a simple start fixed it. It's a bit odd.

                      1 Reply Last reply Reply Quote 0
                      • marcellocM
                        marcelloc
                        last edited by

                        @pfsensation:

                        However, I wanted to ask if you had any problems with E2G randomly stopping sometimes? I've had it happen once or twice, a simple start fixed it. It's a bit odd.

                        Not yet. I have three productions environments working fine. But I also keep running watchguard.

                        Treinamentos de Elite: http://sys-squad.com

                        Help a community developer! ;D

                        1 Reply Last reply Reply Quote 0
                        • P
                          pfsensation
                          last edited by

                          @marcelloc:

                          @pfsensation:

                          However, I wanted to ask if you had any problems with E2G randomly stopping sometimes? I've had it happen once or twice, a simple start fixed it. It's a bit odd.

                          Not yet. I have three productions environments working fine. But I also keep running watchguard.

                          Just applied a config, then saw that E2G wasn't started. I've got softrestart enabled.

                          Here's what I saw in the configs: kernel pid 17852 (e2guardian), uid 106: exited on signal 11

                          Strange…

                          1 Reply Last reply Reply Quote 0
                          • P
                            pfsensation
                            last edited by

                            Okay… I've managed to re-produce and figure out what's been stopping E2G.

                            When I go to for example: https://hidemyass.com/

                            It's stopping E2Guardian, whether I have MITM enabled or not. I've tried a reinstall of E2G and it hasn't helped. I'll enabled the watchdog now and see how it goes.

                            EDIT: After messing around with it, restarting pfSense, turning off MITM and enabling it again. It seems to have stopped... That was quite a roller coaster ride, not sure what happened. Hopefully it doesn't happen again. E2G started shutting down on all HTTPS denied pages.

                            1 Reply Last reply Reply Quote 0
                            • S
                              susamlicubuk
                              last edited by

                              @marcelloc:

                              @susamlicubuk:

                              Hello Marcello
                              i just installed e2guardian5
                              direct connect and certificate selected
                              Sometimes I click the link and the page is empty
                              Pressing f5 or clicking again will open the page
                              for example
                              http://www.hurriyet.com.tr/
                              http://www.hurriyet.com.tr/gundem/
                              set up a manual squid
                              and e2Guardian settings
                              parent mode - use automatic embeded parent config
                              I do not have this problem if I choose
                              why am I having this problem?

                              I saw this on firefox on my labs. If it's easy to reproduce, we csn open a ticket on e2guardian project to see what developers suggest.

                              it is very easy to reproduce this error
                              you can open your ticket e2guardian forum?
                              thanks.

                              1 Reply Last reply Reply Quote 0
                              • marcellocM
                                marcelloc
                                last edited by

                                @susamlicubuk:

                                it is very easy to reproduce this error
                                you can open your ticket e2guardian forum?

                                open it on https://github.com/e2guardian/e2guardian/issues

                                You did the tests, you have all info for the bug report.

                                Treinamentos de Elite: http://sys-squad.com

                                Help a community developer! ;D

                                1 Reply Last reply Reply Quote 0
                                • B
                                  binkec
                                  last edited by

                                  **Hello !

                                  I need a little help with e2guardian5 install, when I tried to install it over "package manager" I got this error:**

                                  Installing pfSense-pkg-E2guardian5…
                                  Updating Unofficial repository catalogue...
                                  Fetching meta.txz: . done
                                  Fetching packagesite.txz: . done
                                  Processing entries: .. done
                                  Unofficial repository update completed. 14 packages processed.
                                  Updating pfSense-core repository catalogue...
                                  pfSense-core repository is up to date.
                                  Updating pfSense repository catalogue...
                                  pfSense repository is up to date.
                                  All repositories are up to date.
                                  The following 3 package(s) will be affected (of 0 checked):

                                  New packages to be INSTALLED:
                                  pfSense-pkg-E2guardian5: 0.5.0.1_4 [Unofficial]
                                  e2guardian: 5.0.2 [Unofficial]
                                  openssl: 1.0.2l,1 [Unofficial]

                                  Number of packages to be installed: 3

                                  The process will require 14 MiB more space.
                                  3 MiB to be downloaded.
                                  [1/3] Fetching e2guardian-5.0.2.txz: …....... done
                                  pkg-static: cached package e2guardian-5.0.2: size mismatch, fetching from remote
                                  [2/3] Fetching e2guardian-5.0.2.txz: …....... done
                                  pkg-static: cached package e2guardian-5.0.2: size mismatch, cannot continue
                                  Failed

                                  Thanks in advance
                                  Bogdan

                                  1 Reply Last reply Reply Quote 0
                                  • marcellocM
                                    marcelloc
                                    last edited by

                                    Try again, I've pushed latest v5 version from e2g repository.

                                    Treinamentos de Elite: http://sys-squad.com

                                    Help a community developer! ;D

                                    1 Reply Last reply Reply Quote 0
                                    • B
                                      binkec
                                      last edited by

                                      Thanks Marcello, now installation went OK.

                                      Best Regards
                                      Bogdan

                                      1 Reply Last reply Reply Quote 0
                                      • P
                                        pfsensation
                                        last edited by

                                        @marcelloc:

                                        Try again, I've pushed latest v5 version from e2g repository.

                                        Latest version is not being detected by pfSense for me. I haven't checked yet, but have you bumped the version?

                                        1 Reply Last reply Reply Quote 0
                                        • marcellocM
                                          marcelloc
                                          last edited by

                                          I've updated the binaries but no changes on gui pkg.

                                          An uninstall/install should update e2guardian to 5.0.2_1

                                          Treinamentos de Elite: http://sys-squad.com

                                          Help a community developer! ;D

                                          1 Reply Last reply Reply Quote 0
                                          • P
                                            pfsensation
                                            last edited by

                                            @marcelloc:

                                            I've updated the binaries but no changes on gui pkg.

                                            An uninstall/install should update e2guardian to 5.0.2_1

                                            Awesome, I've just gone ahead and updated it. How many HTTP workers do you use Marcello? I was initially using 1000 for home, but it seems it's not enough anymore lol. Sometimes all workers become busy and the internet becomes slow, so I've bumped the HTTP workers up to 2500.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.