Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Unofficial E2guardian package for pfSense

    Cache/Proxy
    70
    1.2k
    1.4m
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • R
      ravegen
      last edited by ravegen

      Marcelloc,

      Thanks for the update. All is well.

      1 Reply Last reply Reply Quote 0
      • D
        denisk
        last edited by

        @marcelloc, hello!
        I have a two questions:

        1. When we can update e2guardian to 5.1 version?
        2. How I can make that ALL traffic follows via icap server on another machine?

        In Squid I configured icap like this:

        icap_enable on
        icap_send_client_ip on
        icap_send_client_username on
        icap_service service_req reqmod_precache bypass=0 icap://some_icap_ip:1344/echo
        adaptation_access service_req allow all
        icap_service service_resp respmod_precache bypass=0 icap://some_icap_ip:1344/echo
        adaptation_access service_resp allow all

        marcellocM 1 Reply Last reply Reply Quote 0
        • marcellocM
          marcelloc @denisk
          last edited by

          @denisk said in Unofficial E2guardian package for pfSense:

          I have a two questions:

          1. When we can update e2guardian to 5.1 version?

          just update to the latest version. Gui package version does not follow binary number version(5.1_3).

          1. How I can make that ALL traffic follows via icap server on another machine?

          I Did not included icap settings on package gui. You can try to include it by hand editing package config template files.

          Treinamentos de Elite: http://sys-squad.com

          Help a community developer! ;D

          1 Reply Last reply Reply Quote 0
          • R
            ravegen
            last edited by

            Marcelloc,

            Hi,

            Is there a way that I can use Lightsquid, web proxy reporting tool with e2guardian. I can see that it needs squid package but your package also have squid.

            I believe it is only looking for some squid output file to read from it.

            Can you assist me on this ?

            1 Reply Last reply Reply Quote 0
            • R
              ravegen
              last edited by

              Marcelloc,

              Good day,

              I wanna ask how ACL- --> Antivirus Extension, Mime, Site and URL works ? What do you put there on the textbox ?

              P 1 Reply Last reply Reply Quote 0
              • R
                ravegen
                last edited by

                This post is deleted!
                1 Reply Last reply Reply Quote 0
                • reza3swR
                  reza3sw @marcelloc
                  last edited by reza3sw

                  @marcelloc I don't know the question I'm asking is right or wrong. Because I'm not too familiar with E2Guardian ....Just a little read about that in your posts and I guess the E2Guardian Somewhat is like squid and squid Guard. That's why I asked this question.

                  In squid with tcp_outgoing_address you can change outgoing interface from default to another interface

                  Can this be done on E2Guardian?
                  Where are the outgoing requests?
                  if my question is correct ...How we can change outgoin to VPN or another interface for LoadBalance or FaileOver?

                  Thank's advance

                  یاد کنید مرگ را، در هم کوبنده لذات و تیره و تلخ کننده شهوات را

                  نهج البلاغه

                  R 1 Reply Last reply Reply Quote 0
                  • R
                    ravegen @reza3sw
                    last edited by

                    @reza3sw

                    I wonder if you cant create an interface on the interfaces menu. I believe when an interface is created, it will show in the e2guardian interfaces choices.

                    reza3swR 1 Reply Last reply Reply Quote 0
                    • reza3swR
                      reza3sw @ravegen
                      last edited by

                      @ravegen
                      In E2Guardian Just show Listen Interface(s) (Input interfaces)

                      My question is where's the output interface?
                      When traffic come from LAN and Loopback interfaces and process....
                      Where does go outgoing traffic ?

                      یاد کنید مرگ را، در هم کوبنده لذات و تیره و تلخ کننده شهوات را

                      نهج البلاغه

                      P 1 Reply Last reply Reply Quote 0
                      • P
                        pfsensation @reza3sw
                        last edited by

                        @reza3sw For the time being, as far as I am aware. E2 Guardian hasn't got the option to select the Outgoing interface. Therefore it just uses the default interface.

                        I believe Marcello has requested the ability to change this and the E2 Guardian developers are considering it. Since we're on pfSense, it maybe possible to setup some NAT rules to force traffic over a different interface.

                        reza3swR 1 Reply Last reply Reply Quote 1
                        • P
                          pfsensation @ravegen
                          last edited by

                          @ravegen said in Unofficial E2guardian package for pfSense:

                          Marcelloc,

                          Good day,

                          I wanna ask how ACL- --> Antivirus Extension, Mime, Site and URL works ? What do you put there on the textbox ?

                          You put what you want to allow or disallow on there. Which one do you need examples for? MIME is a bit more of a hassle to setup than site lists for example.

                          1 Reply Last reply Reply Quote 0
                          • reza3swR
                            reza3sw @pfsensation
                            last edited by

                            @pfsensation Thank's for your good answer

                            یاد کنید مرگ را، در هم کوبنده لذات و تیره و تلخ کننده شهوات را

                            نهج البلاغه

                            P 1 Reply Last reply Reply Quote 0
                            • P
                              pfsensation @reza3sw
                              last edited by

                              @reza3sw سلام

                              No worries at all, is there a reason you're trying to use one interface over another? Load balancing?

                              I haven't tested the NAT method myself as I've only got one outgoing WAN link at the moment. If you do give it a shot, let us know if it works!

                              reza3swR 1 Reply Last reply Reply Quote 1
                              • reza3swR
                                reza3sw @pfsensation
                                last edited by reza3sw

                                @pfsensation درود
                                Thanks for your follow up

                                In my area some site are blocked and fillter by goverment
                                That's why ..I have to use VPN for bypass filltering

                                I use 5 VPN conection on 1 WAN and create gateway group(loadbalncing) with 5 vpn conection
                                So I want pass traffic from squid or E2Guardian to loadbalancing vpn gateway and block some site like (windows update.. social network , etc...) with E2guardian or squidGuard
                                But E2guardian or squid sent traffic to default gateway... and I can't use VPN for bypass traffic............


                                I created Topic for this problem
                                But no answer
                                https://forum.netgate.com/topic/134796/squid-5-vpn-conection-on-one-wan

                                یاد کنید مرگ را، در هم کوبنده لذات و تیره و تلخ کننده شهوات را

                                نهج البلاغه

                                P 1 Reply Last reply Reply Quote 0
                                • P
                                  pfsensation @reza3sw
                                  last edited by pfsensation

                                  @reza3sw said in Unofficial E2guardian package for pfSense:

                                  @pfsensation درود
                                  Thanks for your follow up

                                  In my area some site are blocked and fillter by goverment
                                  That's why ..I have to use VPN for bypass filltering

                                  I use 5 VPN conection on 1 WAN and create gateway group(loadbalncing) with 5 vpn conection
                                  So I want pass traffic from squid or E2Guardian to loadbalancing vpn gateway and block some site like (windows update.. social network , etc...) with E2guardian or squidGuard
                                  But E2guardian or squid sent traffic to default gateway... and I can't use VPN for bypass traffic............


                                  I created Topic for this problem
                                  But no answer
                                  https://forum.netgate.com/topic/134796/squid-5-vpn-conection-on-one-wan

                                  You are a clever man! I used separate VPN instances too and load balanced across them when I realised that they have speed caps.

                                  I haven't been to Iran myself, but I assume they do the typical DNS level blocking? You can give Cloudflare DNS over TLS a go and see if those sites are unblocked. If it's DNS level blocking, that should circumvent it.

                                  reza3swR 2 Replies Last reply Reply Quote 0
                                  • reza3swR
                                    reza3sw @pfsensation
                                    last edited by

                                    @pfsensation Thank's you are very good
                                    I will check with cloudflare and I say the result.

                                    But the main subject : ( If we have e.g : 3 WAN and use loadbalancing or failover ) and use E2guardian or Squid we can't set outgoing address to loadbalancing or failover.. because E2guardian and squid just use default WAN..

                                    This means traffic port 80,443 just pass from WAN1 (default)

                                    We can use floating rule for OUT Wan control.. But I checked with 1 Wan and 5 VPN connection ...but no answer

                                    I hope the pfsense group provides a solution

                                    یاد کنید مرگ را، در هم کوبنده لذات و تیره و تلخ کننده شهوات را

                                    نهج البلاغه

                                    P 1 Reply Last reply Reply Quote 0
                                    • P
                                      pfsensation @reza3sw
                                      last edited by

                                      @reza3sw If the DNS encryption method I mentioned before works. You can use that for the time being instead until E2 Guardian properly gets this feature of supporting multiple WANs natively.

                                      Have you experimented with trying to get E2 Guardian to use a gateway group?

                                      reza3swR 1 Reply Last reply Reply Quote 0
                                      • reza3swR
                                        reza3sw @pfsensation
                                        last edited by reza3sw

                                        @pfsensation Yes I do
                                        But E2Guardian uses default gateway

                                        یاد کنید مرگ را، در هم کوبنده لذات و تیره و تلخ کننده شهوات را

                                        نهج البلاغه

                                        1 Reply Last reply Reply Quote 0
                                        • reza3swR
                                          reza3sw @pfsensation
                                          last edited by

                                          @pfsensation I checked with (DNS over TLS) step by step

                                          https://www.netgate.com/blog/dns-over-tls-with-pfsense.html

                                          This does not work

                                          یاد کنید مرگ را، در هم کوبنده لذات و تیره و تلخ کننده شهوات را

                                          نهج البلاغه

                                          P 1 Reply Last reply Reply Quote 0
                                          • P
                                            pfsensation @reza3sw
                                            last edited by

                                            @reza3sw Those steps worked perfectly fine for me. You must have something else conflicting or blocking it.

                                            1 Reply Last reply Reply Quote 1
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.