Unofficial E2guardian package for pfSense

marcelloc · May 15, 2018, 1:59 PM

so to conclude, we really need to install CA cert on client browser for MITM to work and no other way.

NO!!!!!!

There is a really BIG difference between INVALID CERTIFICATE and CONNECTION REFUSED/FAILED.

Please, read the documentation e2guardian team sent to you, seriously .

https://openschoolsolutions.org/pfsense-web-filter-filter-https-squidguard/

ravegen · May 15, 2018, 2:35 PM

like I said, i followed your youtube video but in the end, i got error, that is why i asked you if you have preinstalled CA in your browser.

ucribrahim · May 16, 2018, 1:05 PM

Hi marcello,

I need help so much or advice. I want to use different blacklist not shallalist. So the blacklist that I use, it has same structure as shallalist. I try to download the blacklist but I get this error " E2guardian - Could not determine Blacklist extract dir. Categories not updated ". I searched so many times and tried so many ways to get it work. But I couldn't make the my blacklist work.

Shallalist working well, but I need use different blacklist as I said above. I put the blacklist categories into the /usr/local/etc/e2guardian/lists/blacklists or BL directory. But when I go to E2guardian > Site Lists > create a new one and I still see the old shallalist categories. I can't see new categories.

The problem is seeing old shallalist categories.

Please I need some advice. Thanks.

marcelloc · May 16, 2018, 2:08 PM

Can you check the directory structure of both lists extracting the compressed list file?

susamlicubuk · May 16, 2018, 8:40 PM

Marcello
Sometimes we are having problems with uninstall / reinstall
the way to completely delete old configuration settings
How to clean install e2Guardian lines in config.xml?

is there progress in blocking file extension
file extension blocking is not working.

And do you test the multiwan?
I tried it but it does not work
It would be nice if we could perceive the lan rules

it only detects bypass and works

marcelloc · May 16, 2018, 11:42 PM

E2guardian does not implement multiwan yet.
And as it is a local daemon, it does not match any lan rule.

I'll test file extension and mime types filtering to see what is going on.

ucribrahim · May 17, 2018, 6:23 AM

Marcello,

I will add the photos that I took picture of two blacklist directory and inside of their files..

Thanks again.

marcelloc · May 17, 2018, 6:35 AM

@susamlicubuk:

is there progress in blocking file extension
file extension blocking is not working.

I've pushed a fix to file extension. They should work after updating the package.
Mime types I've opened an issue on e2guardian project.

https://github.com/e2guardian/e2guardian/issues/380

marcelloc · May 17, 2018, 6:36 AM

@ucribrahim:

I will add the photos that I took picture of two blacklist directory and inside of their files..

It's difficult to see the difference on pictures, try to send me the blacklist. I can check the difference and tell you if it's easy or a big job.

ravegen · May 17, 2018, 6:51 AM

Marcelloc,

Can I make a BlockList Site ACL and ExemptedList Site ACL and then apply both ACL to a group.

I am doing this because ExemptedList might apply to multiple group and BlockList might also apply to multiple group. In this matter, I do need to copy paste the same sites or Banned Config and Exempted Config.

I am confused if it is really necessary if a certain ACL should contain Banned and related Grey and Exemption List.

Is that possible ?

ucribrahim · May 17, 2018, 6:53 AM

Marcello,

Sir, I will work on this thing a little bit more. I found something that it can he helpful for me to solve this problem. Also I will ask a friend who is a developer. Thank you so much for your help. I'll write you from the forum as soon as possible.

pfsensation · May 17, 2018, 10:49 AM

@ravegen:

Marcelloc,

Can I make a BlockList Site ACL and ExemptedList Site ACL and then apply both ACL to a group.

I am doing this because ExemptedList might apply to multiple group and BlockList might also apply to multiple group. In this matter, I do need to copy paste the same sites or Banned Config and Exempted Config.

I am confused if it is really necessary if a certain ACL should contain Banned and related Grey and Exemption List.

Is that possible ?

Just make two ACL's one to be used as default. And one to be used by your specific groups. Personally I have a few, I've kept default to apply ACL to clients outside any groups I've setup, then I've got a kids group with a lot of blocking, then an adult group with more relaxed blocking. All groups need to be assigned to at least one ACL.

ravegen · May 17, 2018, 11:01 AM

my confusion is if i create a site acl with enabled ban, disabled grey and exemption the i create another site acl with disabled ban, diabled gre and enabled exemption and apply to a group, will that exemption be enforced while on the other acl, there is no exemption. what is the flow of rule then?

pfsensation · May 17, 2018, 12:05 PM

@ravegen:

my confusion is if i create a site acl with enabled ban, disabled grey and exemption the i create another site acl with disabled ban, diabled gre and enabled exemption and apply to a group, will that exemption be enforced while on the other acl, there is no exemption. what is the flow of rule then?

It will apply the second exemption ACL because it isn't disabled. It's not rocket science and its not too hard to give it a test either. I've been working on a global exception list for common apps that don't work through the proxy. But now that Marcello has added bypass onto the transparent rule, I have been using aliases. It works well for me so far, although the annoying part is packet capturing and finding the remote IP's and domains.

willian_wcg · May 18, 2018, 12:24 PM

E aí Marcelo, tudo tranquilo?

Estou com um probleminha, não sei se é só comigo rsrsrs, estou com um lab virtual do Pfsense em VM e depois do instalar o e2Guardian, não consigo encontrar nenhum pacote para instalação, exemplo, tentei baixar o cron, pfblocker, etc. simplesmente não encontra nada na busca.

marcelloc · May 18, 2018, 1:52 PM

@willian_wcg:

E aí Marcelo, tudo tranquilo?

Estou com um probleminha, não sei se é só comigo rsrsrs, estou com um lab virtual do Pfsense em VM e depois do instalar o e2Guardian, não consigo encontrar nenhum pacote para instalação, exemplo, tentei baixar o cron, pfblocker, etc. simplesmente não encontra nada na busca.

Instala o repositório novamente, atualizei a estrutura de pastas dos pacotes no github essa semana e provavelmente seu pfSense tá reclamando disso.

fetch -q -o /usr/local/etc/pkg/repos/Unofficial.conf https://raw.githubusercontent.com/marcelloc/Unofficial-pfSense-packages/master/Unofficial.conf

susamlicubuk · May 19, 2018, 1:28 AM

@marcelloc:

@susamlicubuk:

is there progress in blocking file extension
file extension blocking is not working.

I've pushed a fix to file extension. They should work after updating the package.
Mime types I've opened an issue on e2guardian project.

https://github.com/e2guardian/e2guardian/issues/380

Exe file extension blocking problem still exists
there are oddities in logs
Perception as text/html is very strange

18.05.19 04:24:23 10.35.10.11 10.35.10.11 https://the.earth.li/~sgtatham/putty/latest/w32/putty.exe TRUSTED Banned MIME file type: text/html GET 302 0 - 1 302 - 10.35.10.11 Default - - - - -

marcelloc · May 19, 2018, 1:30 AM

Detected as text. :o

pfsensation · Jun 3, 2018, 2:22 AM

Looks like E2Guardian v5.1 is in the works!!

Still getting used to this new forum layout... D:

eneiasmg · Jun 22, 2018, 7:38 PM

This post is deleted!