Unofficial E2guardian package for pfSense

pfsensation · Apr 28, 2018, 10:46 AM

@landforces:

hi

do we need more time in our actual use of this package

What do you mean? It's working now, I've had to learn how the configs work etc. But it seems to be working fine.

marcelloc · Apr 28, 2018, 1:08 PM

@landforces:

Hi
with which program the reports are displayed

Lighsquid?
Squidanlyzer?

how to config?

Lightsquid

If you are using e2guardian without squid, Apply this patch after lightsquid install.

fetch -o /usr/local/pkg/lightsquid.inc http://e-sac.siteseguro.ws/lightsquid/inc.txt

landforces · Apr 30, 2018, 10:33 AM

Hi

i made an error ı get an error
press save button

marcelloc · Apr 30, 2018, 10:58 AM

Apply the patch on lightsquid first.

landforces · May 2, 2018, 7:28 AM

Hi marcello

I think I'm doing something wrong

step-by-step screenshot

pfsensation · May 2, 2018, 10:36 PM

@landforces:

Hi marcello

I think I'm doing something wrong

step-by-step screenshot

Change the E2 Guardian reporting to Squid format and enable second denied log.

landforces · May 3, 2018, 12:11 PM

Hi my friend

pfsensation thank you so much lighsquid is Okey

I have one last problem

E2guardian how firewall rules should be PFSense does not work properly when restarting the machine

pfsensation · May 3, 2018, 7:33 PM

@landforces:

Hi my friend

pfsensation thank you so much lighsquid is Okey

I have one last problem

E2guardian how firewall rules should be PFSense does not work properly when restarting the machine

Try changing that to source "Lan net" and destination to the IP of the firewall. Make sure you have services such as DNS resolver correctly configured.

Also I wouldn't recommend removing the anti lockout rule or the default rules, it could help you a lot of you're new to networking… If you really want to force all traffic through the proxy, just make a rule on top of the rest. Remember the order of the rule goes from top to bottom.

landforces · May 4, 2018, 11:04 AM

Hi
is not the correct rule rule2 picture? I'm asking because some sources are different
for example, the expression here is in the form of rules everywhere for Lan net

https://www.youtube.com/channel/UCMjE1d9qiuLr7ldeIUM7AvA?spfreload=5

I really want to do how are your rules? you share

marcelloc · May 4, 2018, 12:44 PM

If you select the transparent mode, rules will be loaded by the package on pf automatically.

If you want to know what rules you need to allow e2guardian in non transparent mode, then it's easy. Just allow your lan net to e2guardian port. Default port on package is 8080.
In transparent mode it uses a second port for SSL interception 8081.

The video you post is based on e2guardian v4 and has a lot of config errors. On pfSense 2.4, you do not need squid package to get e2guardian up and running.

landforces · May 4, 2018, 2:20 PM

hi Marcello

I use it in transparent mode

I have created these rules and I am new to

f you make a nice installation videos more of you

marcelloc · May 8, 2018, 1:21 AM

Good news for those that are still on 2.3.x.

I could get e2guardian5 up and running on 2.3.5 test vm too and updated the amd64 repo.

Important note:

As I have this running in production only on 2.4 boxes, test it first on labs.

pfsensation · May 7, 2018, 10:52 PM

@marcelloc:

Good news for those that are still on 2.3.x.

I could get e2guardian5 up and running on 2.3.5 test vm too and updated the amd64 repo.

Important note:

As I do not have this running in production only on 2.4 boxes, test it first on labs.

Or… People should just upgrade to 2.4. It brings about a lot of fixes... :P

kenrutt · May 10, 2018, 1:58 AM

Thanks Marcello for making that last update avalable for E2gurdian 5. Things started working again.
One question I would have, is the "Content List" working? Everything else seems to be working
except the "Content List"

susamlicubuk · May 12, 2018, 4:01 PM

Hello Marcello
I could not run MultiWan
LAN1 to wan1 and LAN2 to WAN2 firewall rules do not work

for example with squid we could do multiwan with the following Advanced Features-Custom Options (Before Auth)
acl LAN1 src 192.168.1.0/24
tcp_outgoing_address (wan1ip) LAN1
acl LAN1 src 192.168.2.0/24
tcp_outgoing_address (wan2ip) LAN2
I added it to squidparent.conf but it does not work

marcelloc · May 12, 2018, 4:14 PM

Did you reloaded squid parent after config changes?

The squid daemon package installs is the same of squid package, so if you selected automatic parent config and add squid config to squid parent conf file it should work.

susamlicubuk · May 12, 2018, 4:40 PM

I tried the same settings did not work
but transparent as e2Guardian active (hhtp and https)
squid non transparent

ravegen · May 13, 2018, 11:27 PM

While doing pkg add -f https://e-sac.websiteseguro.com/e2g/e2guardian-5.0.2_7.txz, it failed to install.

It says, pkg: Missing dependency 'openssl'

How do we resolve this error ?

marcelloc · May 14, 2018, 12:12 AM

@ravegen:

While doing pkg add -f https://e-sac.websiteseguro.com/e2g/e2guardian-5.0.2_7.txz, it failed to install.

It says, pkg: Missing dependency 'openssl'

How do we resolve this error ?

Follow instructions on the first post.
Add the repo and then install from gui

ravegen · May 14, 2018, 12:44 AM

@marcelloc:

@ravegen:

While doing pkg add -f https://e-sac.websiteseguro.com/e2g/e2guardian-5.0.2_7.txz, it failed to install.

It says, pkg: Missing dependency 'openssl'

How do we resolve this error ?

Follow instructions on the first post.
Add the repo and then install from gui

Do we need to configure WPAD, DNS and DHCP Options ?

PS: Do you have any tutorial on how to configure E2Guardian for http and https filtering like the ones in youtube for squid and squidguard for reference ? Thanks