Unofficial E2guardian package for pfSense
-
good day,
I enabled the e2guardian antivirus, selected clamdscan and icapscan from General Tab and checked extension, mime, site, url from the ACL Antivirus Tab but this causes e2guardian to stop.
does anybody knows how to solve this ?
-
Is there nobody else now in this thread that can answer ?
-
@ravegen I don't think anyone uses the AV module yet and it probably hasn't been tested. I found that the signatures themselves weren't very good anyways with ClamAV. You're better off using anti virus on your endpoints for now until something that's efficient and includes a lot of signatures comes out.
-
I wonder what is the reply of Marcelloc about this since he included this AV module on his E2Guardian package.
-
-
Hi Marcello,
how to block file extension
-
@oktaykumas , it's under acls -> extension list.
-
@marcelloc said in Unofficial E2guardian package for pfSense:
extension list.
do you have sample screen view I did not. work version I'm using
-
Create on or more extension acl with banned/exception file extensions and apply it to a group.
take a look on the screen,This video is in portuguese but you can follow to get basic setup working
https://www.youtube.com/watch?v=tao1tiXFefk
-
@marcelloc thank you worked
-
Marcelloc, how do you make antivirus work. Everytime i enable it, e2guardian stops.
-
@genesislubrigas said in Unofficial E2guardian package for pfSense:
Marcelloc, how do you make antivirus work. Everytime i enable it, e2guardian stops.
I did not had time to review antivirus settings changes from versions 4 to 5.
Try to run e2guardian on console(e2guardian -g) to see what config errors it shows.
-
If i select clamdscan or icapscan, it says no process found. If i disselect, it shows no output.
-
This post is deleted! -
Marcelloc,
Thanks for the update. All is well.
-
@marcelloc, hello!
I have a two questions:- When we can update e2guardian to 5.1 version?
- How I can make that ALL traffic follows via icap server on another machine?
In Squid I configured icap like this:
icap_enable on
icap_send_client_ip on
icap_send_client_username on
icap_service service_req reqmod_precache bypass=0 icap://some_icap_ip:1344/echo
adaptation_access service_req allow all
icap_service service_resp respmod_precache bypass=0 icap://some_icap_ip:1344/echo
adaptation_access service_resp allow all -
@denisk said in Unofficial E2guardian package for pfSense:
I have a two questions:
- When we can update e2guardian to 5.1 version?
just update to the latest version. Gui package version does not follow binary number version(5.1_3).
- How I can make that ALL traffic follows via icap server on another machine?
I Did not included icap settings on package gui. You can try to include it by hand editing package config template files.
-
Marcelloc,
Hi,
Is there a way that I can use Lightsquid, web proxy reporting tool with e2guardian. I can see that it needs squid package but your package also have squid.
I believe it is only looking for some squid output file to read from it.
Can you assist me on this ?
-
Marcelloc,
Good day,
I wanna ask how ACL- --> Antivirus Extension, Mime, Site and URL works ? What do you put there on the textbox ?
-
This post is deleted!
