Unofficial E2guardian package for pfSense

ravegen

I wonder if you cant create an interface on the interfaces menu. I believe when an interface is created, it will show in the e2guardian interfaces choices.

reza3sw

@ravegen
In E2Guardian Just show Listen Interface(s) (Input interfaces)

My question is where's the output interface?
When traffic come from LAN and Loopback interfaces and process....
Where does go outgoing traffic ?

pfsensation

@reza3sw For the time being, as far as I am aware. E2 Guardian hasn't got the option to select the Outgoing interface. Therefore it just uses the default interface.

I believe Marcello has requested the ability to change this and the E2 Guardian developers are considering it. Since we're on pfSense, it maybe possible to setup some NAT rules to force traffic over a different interface.

pfsensation

@ravegen said in Unofficial E2guardian package for pfSense:

Marcelloc,

Good day,

I wanna ask how ACL- --> Antivirus Extension, Mime, Site and URL works ? What do you put there on the textbox ?

You put what you want to allow or disallow on there. Which one do you need examples for? MIME is a bit more of a hassle to setup than site lists for example.

reza3sw

@pfsensation Thank's for your good answer

pfsensation

@reza3sw سلام

No worries at all, is there a reason you're trying to use one interface over another? Load balancing?

I haven't tested the NAT method myself as I've only got one outgoing WAN link at the moment. If you do give it a shot, let us know if it works!

reza3sw

@pfsensation درود
Thanks for your follow up

In my area some site are blocked and fillter by goverment
That's why ..I have to use VPN for bypass filltering

I use 5 VPN conection on 1 WAN and create gateway group(loadbalncing) with 5 vpn conection
So I want pass traffic from squid or E2Guardian to loadbalancing vpn gateway and block some site like (windows update.. social network , etc...) with E2guardian or squidGuard
But E2guardian or squid sent traffic to default gateway... and I can't use VPN for bypass traffic............

I created Topic for this problem
But no answer
https://forum.netgate.com/topic/134796/squid-5-vpn-conection-on-one-wan

pfsensation

@reza3sw said in Unofficial E2guardian package for pfSense:

@pfsensation درود
Thanks for your follow up

In my area some site are blocked and fillter by goverment
That's why ..I have to use VPN for bypass filltering

I use 5 VPN conection on 1 WAN and create gateway group(loadbalncing) with 5 vpn conection
So I want pass traffic from squid or E2Guardian to loadbalancing vpn gateway and block some site like (windows update.. social network , etc...) with E2guardian or squidGuard
But E2guardian or squid sent traffic to default gateway... and I can't use VPN for bypass traffic............

I created Topic for this problem
But no answer
https://forum.netgate.com/topic/134796/squid-5-vpn-conection-on-one-wan

You are a clever man! I used separate VPN instances too and load balanced across them when I realised that they have speed caps.

I haven't been to Iran myself, but I assume they do the typical DNS level blocking? You can give Cloudflare DNS over TLS a go and see if those sites are unblocked. If it's DNS level blocking, that should circumvent it.

reza3sw

@pfsensation Thank's you are very good
I will check with cloudflare and I say the result.

But the main subject : ( If we have e.g : 3 WAN and use loadbalancing or failover ) and use E2guardian or Squid we can't set outgoing address to loadbalancing or failover.. because E2guardian and squid just use default WAN..

This means traffic port 80,443 just pass from WAN1 (default)

We can use floating rule for OUT Wan control.. But I checked with 1 Wan and 5 VPN connection ...but no answer

I hope the pfsense group provides a solution

pfsensation

@reza3sw If the DNS encryption method I mentioned before works. You can use that for the time being instead until E2 Guardian properly gets this feature of supporting multiple WANs natively.

Have you experimented with trying to get E2 Guardian to use a gateway group?

reza3sw

@pfsensation Yes I do
But E2Guardian uses default gateway

reza3sw

@pfsensation I checked with (DNS over TLS) step by step

https://www.netgate.com/blog/dns-over-tls-with-pfsense.html

This does not work

pfsensation

@reza3sw Those steps worked perfectly fine for me. You must have something else conflicting or blocking it.

genesislubrigas

How to use lightsquid for e2guardian ?

ucribrahim

I worked successfully Squid + E2guardian + Lightsquid. If it's works stabil, I'll write blog post about how to make them work together as soon as fast in my website. I can see HTTP and HTTPS domains in Lightsquid report and more.

susamlicubuk

ibrahim lightsquid kurulumundan sonra sadece aşağıdaki kodu çalıştırman ve pf i yeniden başlatman yeterli.
fetch -o /usr/local/pkg/lightsquid.inc http://e-sac.siteseguro.ws/lightsquid/inc.txt

ucribrahim

Hmm, ben onu sadece E2guardian tek başına çalıştığında, bu patch uygulanıyor sanıyorum 'ki öyle. Çünkü forumlarda öyle yazıyor. Yarın denerim sana yazarım geri.

genesislubrigas

@ucribrahim

Only e2guardian and lightsquid.

ucribrahim

@genesislubrigas After you used the following code. Lightsquid can be worked with Squid + E2guardian without problem. After you used command, please restart your pfsense.

fetch -o /usr/local/pkg/lightsquid.inc http://e-sac.siteseguro.ws/lightsquid/inc.txt

genesislubrigas

@ucribrahim

Yes but i dont use squid, I only use e2guardian. How do you use squid with e2guardian?