Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Unofficial E2guardian package for pfSense

    Scheduled Pinned Locked Moved Cache/Proxy
    1.2k Posts 70 Posters 1.5m Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • marcellocM
      marcelloc
      last edited by

      @pfsensation:

      Weird, I haven't got it yet. What authentication method are you using?

      IP address

      Treinamentos de Elite: http://sys-squad.com

      Help a community developer! ;D

      1 Reply Last reply Reply Quote 0
      • P
        pfsensation
        last edited by

        @marcelloc:

        @pfsensation:

        Weird, I haven't got it yet. What authentication method are you using?

        IP address

        Strange, no issues like the one you're describing on my end yet… Only issue I have is that when using it with Squid, from time to time E2Guardian crashes. And somehow... It doesn't crash when debug is enabled.

        I'm also hoping you can help me out with the pfBlocker issue, am I doing something wrong?

        1 Reply Last reply Reply Quote 0
        • P
          pfsensation
          last edited by

          Hi Marcello,

          I just managed to re-produce the Mac Alert you've been getting by enabling SSL re-write and header re-write. I wonder if it is related to this: https://github.com/e2guardian/e2guardian/commit/c389e53b189e0d38108aca210dc217cb940bfec7

          1 Reply Last reply Reply Quote 0
          • marcellocM
            marcelloc
            last edited by

            @pfsensation:

            Hi Marcello,

            I just managed to re-produce the Mac Alert you've been getting by enabling SSL re-write and header re-write. I wonder if it is related to this: https://github.com/e2guardian/e2guardian/commit/c389e53b189e0d38108aca210dc217cb940bfec7

            I have this enabled too. Thanks for the test and report .

            If you have time, do the same test with version 5.0.2_3

            Treinamentos de Elite: http://sys-squad.com

            Help a community developer! ;D

            1 Reply Last reply Reply Quote 0
            • P
              pfsensation
              last edited by

              @marcelloc:

              @pfsensation:

              Hi Marcello,

              I just managed to re-produce the Mac Alert you've been getting by enabling SSL re-write and header re-write. I wonder if it is related to this: https://github.com/e2guardian/e2guardian/commit/c389e53b189e0d38108aca210dc217cb940bfec7

              I have this enabled too. Thanks for the test and report .

              If you have time, do the same test with version 5.0.2_3

              Have you got a compiled binary for it? I'll give it a shot for you, by the way I tested in both Chrome and Firefox. Both had the Mac error, where as IE complained about TLS. It does sound like a OpenSSL issue maybe but I am by no means an expert on E2Guardian's inner workings.

              1 Reply Last reply Reply Quote 0
              • marcellocM
                marcelloc
                last edited by

                Yes, that debug version
                pkg add -f https://e-sac.websiteseguro.com/e2g/e2guardian-5.0.2_3.txz

                Treinamentos de Elite: http://sys-squad.com

                Help a community developer! ;D

                1 Reply Last reply Reply Quote 0
                • P
                  pfsensation
                  last edited by

                  @marcelloc:

                  Yes, that debug version
                  pkg add -f https://e-sac.websiteseguro.com/e2g/e2guardian-5.0.2_3.txz

                  On 5.0.2_3 SSL Re-write works and no Mac Alert issue. I think it might be that dependency, causing issues.

                  1 Reply Last reply Reply Quote 0
                  • marcellocM
                    marcelloc
                    last edited by

                    I've pushed a comiled package with code until commit bc7890a.

                    Seems to be working without latest patches for ssl on http1.1

                    version on repo:
                    e2guardian-5.0.2_7.txz

                    Treinamentos de Elite: http://sys-squad.com

                    Help a community developer! ;D

                    1 Reply Last reply Reply Quote 0
                    • P
                      pfsensation
                      last edited by

                      @marcelloc:

                      I've pushed a comiled package with code until commit bc7890a.

                      Seems to be working without latest patches for ssl on http1.1

                      version on repo:
                      e2guardian-5.0.2_7.txz

                      I knew that would be the issue!!! Great work! Now to find out why the new OpenSSL is giving this rather odd problem.

                      1 Reply Last reply Reply Quote 0
                      • L
                        landforces
                        last edited by

                        hi

                        do we need more time in our actual use of this package

                        1 Reply Last reply Reply Quote 0
                        • L
                          landforces
                          last edited by

                          Hi
                          with which program the reports are displayed

                          Lighsquid?
                          Squidanlyzer?

                          how to config?

                          1 Reply Last reply Reply Quote 0
                          • P
                            pfsensation
                            last edited by

                            @landforces:

                            hi

                            do we need more time in our actual use of this package

                            What do you mean? It's working now, I've had to learn how the configs work etc. But it seems to be working fine.

                            1 Reply Last reply Reply Quote 0
                            • marcellocM
                              marcelloc
                              last edited by

                              @landforces:

                              Hi
                              with which program the reports are displayed

                              Lighsquid?
                              Squidanlyzer?

                              how to config?

                              Lightsquid

                              If you are using e2guardian without squid, Apply this patch after lightsquid install.

                              fetch -o /usr/local/pkg/lightsquid.inc http://e-sac.siteseguro.ws/lightsquid/inc.txt

                              Treinamentos de Elite: http://sys-squad.com

                              Help a community developer! ;D

                              1 Reply Last reply Reply Quote 0
                              • L
                                landforces
                                last edited by

                                Hi

                                i made an error ı get an error
                                press save button

                                ligy.PNG
                                ligy.PNG_thumb

                                1 Reply Last reply Reply Quote 0
                                • marcellocM
                                  marcelloc
                                  last edited by

                                  Apply the patch on lightsquid first.

                                  Treinamentos de Elite: http://sys-squad.com

                                  Help a community developer! ;D

                                  1 Reply Last reply Reply Quote 0
                                  • L
                                    landforces
                                    last edited by

                                    Hi marcello

                                    I think I'm doing something wrong

                                    step-by-step screenshot

                                    2312.PNG
                                    2312.PNG_thumb
                                    ligy.PNG
                                    ligy.PNG_thumb
                                    sorub.PNG
                                    sorub.PNG_thumb

                                    1 Reply Last reply Reply Quote 0
                                    • P
                                      pfsensation
                                      last edited by

                                      @landforces:

                                      Hi marcello

                                      I think I'm doing something wrong

                                      step-by-step screenshot

                                      Change the E2 Guardian reporting to Squid format and enable second denied log.

                                      1 Reply Last reply Reply Quote 0
                                      • L
                                        landforces
                                        last edited by

                                        Hi my friend

                                        pfsensation thank you so much lighsquid is Okey

                                        I have one last problem

                                        E2guardian how firewall rules should be PFSense does not work properly when restarting the machine

                                        Rule1.PNG
                                        Rule1.PNG_thumb
                                        rule2.PNG
                                        rule2.PNG_thumb

                                        1 Reply Last reply Reply Quote 0
                                        • P
                                          pfsensation
                                          last edited by

                                          @landforces:

                                          Hi my friend

                                          pfsensation thank you so much lighsquid is Okey

                                          I have one last problem

                                          E2guardian how firewall rules should be PFSense does not work properly when restarting the machine

                                          Try changing that to source "Lan net" and destination to the IP of the firewall. Make sure you have services such as DNS resolver correctly configured.

                                          Also I wouldn't recommend removing the anti lockout rule or the default rules, it could help you a lot of you're new to networking…  If you really want to force all traffic through the proxy, just make a rule on top of the rest. Remember the order of the rule goes from top to bottom.

                                          1 Reply Last reply Reply Quote 0
                                          • L
                                            landforces
                                            last edited by

                                            Hi
                                            is not the correct rule rule2 picture? I'm asking because some sources are different
                                            for example, the expression here is in the form of rules everywhere for Lan net

                                            https://www.youtube.com/channel/UCMjE1d9qiuLr7ldeIUM7AvA?spfreload=5

                                            I really want to do how are your rules? you share

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.