Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Unofficial E2guardian package for pfSense

    Cache/Proxy
    70
    1.2k
    1.4m
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • marcellocM
      marcelloc
      last edited by

      @ravegen:

      so to conclude, we really need to install CA cert on client browser for MITM to work and no other way.

      NO!!!!!!

      There is a really BIG difference between INVALID CERTIFICATE and CONNECTION REFUSED/FAILED.

      Please, read the documentation e2guardian team sent to you, seriously .

      https://openschoolsolutions.org/pfsense-web-filter-filter-https-squidguard/

      Treinamentos de Elite: http://sys-squad.com

      Help a community developer! ;D

      1 Reply Last reply Reply Quote 0
      • R
        ravegen
        last edited by

        like I said, i followed your youtube video but in the end, i got error, that is why i asked you if you have preinstalled CA in your browser.

        1 Reply Last reply Reply Quote 0
        • U
          ucribrahim
          last edited by

          Hi marcello,

          I need help so much or advice. I want to use different blacklist not shallalist. So the blacklist that I use, it has same structure as shallalist. I try to download the blacklist but I get this error " E2guardian - Could not determine Blacklist extract dir. Categories not updated ". I searched so many times and tried so many ways to get it work. But I couldn't make the my blacklist work.

          Shallalist working well, but I need use different blacklist as I said above. I put the blacklist categories into the /usr/local/etc/e2guardian/lists/blacklists or BL directory. But when I go to E2guardian > Site Lists > create a new one and I still see the old shallalist categories. I can't see new categories.

          The problem is seeing old shallalist categories.

          Please I need some advice. Thanks.

          ” Online pfSense Firewall & Router Eğitimi | www.udemy.com/pfsense-training “

          1 Reply Last reply Reply Quote 0
          • marcellocM
            marcelloc
            last edited by

            Can you check the directory structure of both lists extracting the  compressed list file?

            Treinamentos de Elite: http://sys-squad.com

            Help a community developer! ;D

            1 Reply Last reply Reply Quote 0
            • S
              susamlicubuk
              last edited by

              Marcello
              Sometimes we are having problems with uninstall / reinstall
              the way to completely delete old configuration settings
              How to clean install e2Guardian lines in config.xml?

              is there progress in blocking file extension
              file extension blocking is not working.

              And do you test the multiwan?
              I tried it but it does not work
              It would be nice if we could perceive the lan rules

              it only detects bypass and works

              1 Reply Last reply Reply Quote 0
              • marcellocM
                marcelloc
                last edited by

                E2guardian does not implement multiwan yet.
                And as it is a local daemon, it does not match any lan rule.

                I'll test file extension and mime types filtering to see what is going on.

                Treinamentos de Elite: http://sys-squad.com

                Help a community developer! ;D

                1 Reply Last reply Reply Quote 0
                • U
                  ucribrahim
                  last edited by

                  Marcello,

                  I will add the photos that I took picture of two blacklist directory and inside of their files..

                  Thanks again.

                  shallalist.png
                  shallalist.png_thumb
                  shallalist_file.png
                  shallalist_file.png_thumb
                  my_blacklist.png
                  my_blacklist.png_thumb
                  my_blacklist_file.png
                  my_blacklist_file.png_thumb

                  ” Online pfSense Firewall & Router Eğitimi | www.udemy.com/pfsense-training “

                  1 Reply Last reply Reply Quote 0
                  • marcellocM
                    marcelloc
                    last edited by

                    @susamlicubuk:

                    is there progress in blocking file extension
                    file extension blocking is not working.

                    I've pushed a fix to file extension. They should work after updating the package.
                    Mime types I've opened an issue on e2guardian project.

                    https://github.com/e2guardian/e2guardian/issues/380

                    Treinamentos de Elite: http://sys-squad.com

                    Help a community developer! ;D

                    1 Reply Last reply Reply Quote 0
                    • marcellocM
                      marcelloc
                      last edited by

                      @ucribrahim:

                      I will add the photos that I took picture of two blacklist directory and inside of their files..

                      It's difficult to see the difference on pictures, try to send me the blacklist. I can check the difference and tell you if it's easy or a big job.

                      Treinamentos de Elite: http://sys-squad.com

                      Help a community developer! ;D

                      1 Reply Last reply Reply Quote 0
                      • R
                        ravegen
                        last edited by

                        Marcelloc,

                        Can I make a BlockList Site ACL and ExemptedList Site ACL and then apply both ACL to a group.

                        I am doing this because ExemptedList might apply to multiple group and BlockList might also apply to multiple group.  In this matter, I do need to copy paste the same sites or Banned Config and Exempted Config.

                        I am confused if it is really necessary if a certain ACL should contain Banned and related Grey and Exemption List.

                        Is that possible ?

                        1 Reply Last reply Reply Quote 0
                        • U
                          ucribrahim
                          last edited by

                          Marcello,

                          Sir, I will work on this thing a little bit more. I found something that it can he helpful for me to solve this problem. Also I will ask a friend who is a developer. Thank you so much for your help. I'll write you from the forum as soon as possible.

                          ” Online pfSense Firewall & Router Eğitimi | www.udemy.com/pfsense-training “

                          1 Reply Last reply Reply Quote 0
                          • P
                            pfsensation
                            last edited by

                            @ravegen:

                            Marcelloc,

                            Can I make a BlockList Site ACL and ExemptedList Site ACL and then apply both ACL to a group.

                            I am doing this because ExemptedList might apply to multiple group and BlockList might also apply to multiple group.  In this matter, I do need to copy paste the same sites or Banned Config and Exempted Config.

                            I am confused if it is really necessary if a certain ACL should contain Banned and related Grey and Exemption List.

                            Is that possible ?

                            Just make two ACL's one to be used as default. And one to be used by your specific groups. Personally I have a few, I've kept default to apply ACL to clients outside any groups I've setup, then I've got a kids group with a lot of blocking, then an adult group with more relaxed blocking. All groups need to be assigned to at least one ACL.

                            1 Reply Last reply Reply Quote 0
                            • R
                              ravegen
                              last edited by

                              my confusion is if i create a site acl with enabled ban, disabled grey and exemption  the i create another site acl with disabled ban, diabled gre and enabled exemption and apply to a group, will that exemption be enforced while on the other acl, there is no exemption.  what is the flow of rule then?

                              1 Reply Last reply Reply Quote 0
                              • P
                                pfsensation
                                last edited by

                                @ravegen:

                                my confusion is if i create a site acl with enabled ban, disabled grey and exemption  the i create another site acl with disabled ban, diabled gre and enabled exemption and apply to a group, will that exemption be enforced while on the other acl, there is no exemption.  what is the flow of rule then?

                                It will apply the second exemption ACL because it isn't disabled. It's not rocket science and its not too hard to give it a test either. I've been working on a global exception list for common apps that don't work through the proxy. But now that Marcello has added bypass onto the transparent rule, I have been using aliases. It works well for me so far, although the annoying part is packet capturing and finding the remote IP's and domains.

                                1 Reply Last reply Reply Quote 0
                                • W
                                  willian_wcg
                                  last edited by

                                  E aí Marcelo, tudo tranquilo?

                                  Estou com um probleminha, não sei se é só comigo rsrsrs, estou com um lab virtual do Pfsense em VM e depois do instalar o e2Guardian, não consigo encontrar nenhum pacote para instalação, exemplo,  tentei baixar o cron, pfblocker, etc. simplesmente não encontra nada na busca.

                                  1 Reply Last reply Reply Quote 0
                                  • marcellocM
                                    marcelloc
                                    last edited by

                                    @willian_wcg:

                                    E aí Marcelo, tudo tranquilo?

                                    Estou com um probleminha, não sei se é só comigo rsrsrs, estou com um lab virtual do Pfsense em VM e depois do instalar o e2Guardian, não consigo encontrar nenhum pacote para instalação, exemplo,  tentei baixar o cron, pfblocker, etc. simplesmente não encontra nada na busca.

                                    Instala o repositório novamente, atualizei a estrutura de pastas dos pacotes no github essa semana e provavelmente seu pfSense tá reclamando disso.

                                    fetch -q -o /usr/local/etc/pkg/repos/Unofficial.conf https://raw.githubusercontent.com/marcelloc/Unofficial-pfSense-packages/master/Unofficial.conf
                                    

                                    Treinamentos de Elite: http://sys-squad.com

                                    Help a community developer! ;D

                                    1 Reply Last reply Reply Quote 0
                                    • S
                                      susamlicubuk
                                      last edited by

                                      @marcelloc:

                                      @susamlicubuk:

                                      is there progress in blocking file extension
                                      file extension blocking is not working.

                                      I've pushed a fix to file extension. They should work after updating the package.
                                      Mime types I've opened an issue on e2guardian project.

                                      https://github.com/e2guardian/e2guardian/issues/380

                                      Exe file extension blocking problem still exists
                                      there are oddities in logs
                                      Perception as text/html is very strange

                                      18.05.19 04:24:23 10.35.10.11 10.35.10.11 https://the.earth.li/~sgtatham/putty/latest/w32/putty.exe TRUSTED Banned MIME file type: text/html GET 302 0 - 1 302 - 10.35.10.11 Default - - - - -

                                      1 Reply Last reply Reply Quote 0
                                      • marcellocM
                                        marcelloc
                                        last edited by

                                        Detected as text.  :o

                                        Treinamentos de Elite: http://sys-squad.com

                                        Help a community developer! ;D

                                        1 Reply Last reply Reply Quote 0
                                        • P
                                          pfsensation
                                          last edited by

                                          Looks like E2Guardian v5.1 is in the works!!

                                          • Still getting used to this new forum layout... D:
                                          1 Reply Last reply Reply Quote 0
                                          • E
                                            eneiasmg @marcelloc
                                            last edited by

                                            This post is deleted!
                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.