Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Unofficial E2guardian package for pfSense

    Scheduled Pinned Locked Moved Cache/Proxy
    1.2k Posts 71 Posters 1.6m Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • marcellocM
      marcelloc
      last edited by

      @pfsensation:

      did you try clearing the cache?

      Yes. After cleaning and restarting, few sites goes fine then all get mac error.

      Treinamentos de Elite: http://sys-squad.com

      Help a community developer! ;D

      1 Reply Last reply Reply Quote 0
      • marcellocM
        marcelloc
        last edited by

        @pfsensation:

        I'm getting NGINX errors, E2G seems to be forwarding the traffic to the NGINX server rather that directly to pfBlocker.

        Does pfblockerNG package started redirecting or showing error pages on latest versions? The pfblocker versions I've used was just a  deny rules creator, with any redirect.

        Treinamentos de Elite: http://sys-squad.com

        Help a community developer! ;D

        1 Reply Last reply Reply Quote 0
        • P
          pfsensation
          last edited by

          @marcelloc:

          @pfsensation:

          I'm getting NGINX errors, E2G seems to be forwarding the traffic to the NGINX server rather that directly to pfBlocker.

          Does pfblockerNG package started redirecting or showing error pages on latest versions? The pfblocker versions I've used was just a  deny rules creator, with any redirect.

          Nope, this was an ongoing problem since I enabled transparent proxy. pfBlocker has an option for blocking hosts - I have adblocking hosts files. The way it works is, it redirects those domains to pfBlocker's own internal web server in order to block them. They are getting intercepted by the proxy.

          EDIT:

          I have made a discovery Marcello. On normal non-debug E2Guardian which is setup with Squid. If Squid restarts, or needs to log rotate etc, it crashes E2Guardian. This doesn't seem to be the case with the debug version of E2Guardian, I have tried to replicate the issue but have been unsuccessful. Have you got any ideas?

          1 Reply Last reply Reply Quote 0
          • P
            pfsensation
            last edited by

            @marcelloc:

            @pfsensation:

            did you try clearing the cache?

            Yes. After cleaning and restarting, few sites goes fine then all get mac error.

            Weird, I haven't got it yet. What authentication method are you using?

            1 Reply Last reply Reply Quote 0
            • marcellocM
              marcelloc
              last edited by

              @pfsensation:

              Weird, I haven't got it yet. What authentication method are you using?

              IP address

              Treinamentos de Elite: http://sys-squad.com

              Help a community developer! ;D

              1 Reply Last reply Reply Quote 0
              • P
                pfsensation
                last edited by

                @marcelloc:

                @pfsensation:

                Weird, I haven't got it yet. What authentication method are you using?

                IP address

                Strange, no issues like the one you're describing on my end yet… Only issue I have is that when using it with Squid, from time to time E2Guardian crashes. And somehow... It doesn't crash when debug is enabled.

                I'm also hoping you can help me out with the pfBlocker issue, am I doing something wrong?

                1 Reply Last reply Reply Quote 0
                • P
                  pfsensation
                  last edited by

                  Hi Marcello,

                  I just managed to re-produce the Mac Alert you've been getting by enabling SSL re-write and header re-write. I wonder if it is related to this: https://github.com/e2guardian/e2guardian/commit/c389e53b189e0d38108aca210dc217cb940bfec7

                  1 Reply Last reply Reply Quote 0
                  • marcellocM
                    marcelloc
                    last edited by

                    @pfsensation:

                    Hi Marcello,

                    I just managed to re-produce the Mac Alert you've been getting by enabling SSL re-write and header re-write. I wonder if it is related to this: https://github.com/e2guardian/e2guardian/commit/c389e53b189e0d38108aca210dc217cb940bfec7

                    I have this enabled too. Thanks for the test and report .

                    If you have time, do the same test with version 5.0.2_3

                    Treinamentos de Elite: http://sys-squad.com

                    Help a community developer! ;D

                    1 Reply Last reply Reply Quote 0
                    • P
                      pfsensation
                      last edited by

                      @marcelloc:

                      @pfsensation:

                      Hi Marcello,

                      I just managed to re-produce the Mac Alert you've been getting by enabling SSL re-write and header re-write. I wonder if it is related to this: https://github.com/e2guardian/e2guardian/commit/c389e53b189e0d38108aca210dc217cb940bfec7

                      I have this enabled too. Thanks for the test and report .

                      If you have time, do the same test with version 5.0.2_3

                      Have you got a compiled binary for it? I'll give it a shot for you, by the way I tested in both Chrome and Firefox. Both had the Mac error, where as IE complained about TLS. It does sound like a OpenSSL issue maybe but I am by no means an expert on E2Guardian's inner workings.

                      1 Reply Last reply Reply Quote 0
                      • marcellocM
                        marcelloc
                        last edited by

                        Yes, that debug version
                        pkg add -f https://e-sac.websiteseguro.com/e2g/e2guardian-5.0.2_3.txz

                        Treinamentos de Elite: http://sys-squad.com

                        Help a community developer! ;D

                        1 Reply Last reply Reply Quote 0
                        • P
                          pfsensation
                          last edited by

                          @marcelloc:

                          Yes, that debug version
                          pkg add -f https://e-sac.websiteseguro.com/e2g/e2guardian-5.0.2_3.txz

                          On 5.0.2_3 SSL Re-write works and no Mac Alert issue. I think it might be that dependency, causing issues.

                          1 Reply Last reply Reply Quote 0
                          • marcellocM
                            marcelloc
                            last edited by

                            I've pushed a comiled package with code until commit bc7890a.

                            Seems to be working without latest patches for ssl on http1.1

                            version on repo:
                            e2guardian-5.0.2_7.txz

                            Treinamentos de Elite: http://sys-squad.com

                            Help a community developer! ;D

                            1 Reply Last reply Reply Quote 0
                            • P
                              pfsensation
                              last edited by

                              @marcelloc:

                              I've pushed a comiled package with code until commit bc7890a.

                              Seems to be working without latest patches for ssl on http1.1

                              version on repo:
                              e2guardian-5.0.2_7.txz

                              I knew that would be the issue!!! Great work! Now to find out why the new OpenSSL is giving this rather odd problem.

                              1 Reply Last reply Reply Quote 0
                              • L
                                landforces
                                last edited by

                                hi

                                do we need more time in our actual use of this package

                                1 Reply Last reply Reply Quote 0
                                • L
                                  landforces
                                  last edited by

                                  Hi
                                  with which program the reports are displayed

                                  Lighsquid?
                                  Squidanlyzer?

                                  how to config?

                                  1 Reply Last reply Reply Quote 0
                                  • P
                                    pfsensation
                                    last edited by

                                    @landforces:

                                    hi

                                    do we need more time in our actual use of this package

                                    What do you mean? It's working now, I've had to learn how the configs work etc. But it seems to be working fine.

                                    1 Reply Last reply Reply Quote 0
                                    • marcellocM
                                      marcelloc
                                      last edited by

                                      @landforces:

                                      Hi
                                      with which program the reports are displayed

                                      Lighsquid?
                                      Squidanlyzer?

                                      how to config?

                                      Lightsquid

                                      If you are using e2guardian without squid, Apply this patch after lightsquid install.

                                      fetch -o /usr/local/pkg/lightsquid.inc http://e-sac.siteseguro.ws/lightsquid/inc.txt

                                      Treinamentos de Elite: http://sys-squad.com

                                      Help a community developer! ;D

                                      1 Reply Last reply Reply Quote 0
                                      • L
                                        landforces
                                        last edited by

                                        Hi

                                        i made an error ı get an error
                                        press save button

                                        ligy.PNG
                                        ligy.PNG_thumb

                                        1 Reply Last reply Reply Quote 0
                                        • marcellocM
                                          marcelloc
                                          last edited by

                                          Apply the patch on lightsquid first.

                                          Treinamentos de Elite: http://sys-squad.com

                                          Help a community developer! ;D

                                          1 Reply Last reply Reply Quote 0
                                          • L
                                            landforces
                                            last edited by

                                            Hi marcello

                                            I think I'm doing something wrong

                                            step-by-step screenshot

                                            2312.PNG
                                            2312.PNG_thumb
                                            ligy.PNG
                                            ligy.PNG_thumb
                                            sorub.PNG
                                            sorub.PNG_thumb

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.