Unofficial E2guardian package for pfSense

[ravegen]

@pfsensation

after updating the e2guardian package, I am having issues on the system logs that says on the screenshot.

I am using Content Scanner clamdscan. I have already up to date freshclam. But if my clamdscan content scanner is selected, e2guardian wont start but if not selected, e2guardian starts.

How do you solve that error ?

login-to-view

[Sei Pine]

Hello, i followed the instructions on the first post on how to make e2guardian pop out on system > packages but it seems it doesn't work. am i doing something wrong ?

i also did try patching System > Patches provided by the thread owner, still no e2guardian on packages.

[pfsensation]

@ravegen said in Unofficial E2guardian package for pfSense:

@pfsensation

after updating the e2guardian package, I am having issues on the system logs that says on the screenshot.

I am using Content Scanner clamdscan. I have already up to date freshclam. But if my clamdscan content scanner is selected, e2guardian wont start but if not selected, e2guardian starts.

How do you solve that error ?

login-to-view

The AV isn't something I have tested or used yet as I find Clam's signatures not very good. Did you attempt a reinstall? According to the errors there are some configs missing.

[pfsensation]

@sei-pine said in Unofficial E2guardian package for pfSense:

Hello, i followed the instructions on the first post on how to make e2guardian pop out on system > packages but it seems it doesn't work. am i doing something wrong ?

i also did try patching System > Patches provided by the thread owner, still no e2guardian on packages.

You've most likely not applied the patch correctly. From 2.4.4 pfSense by default hides any packages that aren't official.

[Sei Pine]

@pfsensation i did applied the patch provided on github. can you pls help me on how to patch it correctly ?

[ucribrahim]

@sei-pine Well, let me help you. @pfsensation helped me how to do that, when I was trying to do this patch thing. Now I help you then you'll help someone else.)

1. Install "patch" package from package manager.
2. System > Patches > click "Add New Patch" button.
   Description: e2guardian patch
   URL/Commit ID: Leave empty
   Patch Contents: Copy/Paste all codes from here
   Path Strip Count: 1
   Base Directory: /
   Ignore Whitespace: Clicked
   Auto Apply: Clicked
3. Save and then click "Apply" button.

That's all for now. Now go to shell and add repo of e2guardian by following command.

fetch -q -o /usr/local/etc/pkg/repos/Unofficial.conf https://raw.githubusercontent.com/marcelloc/Unofficial-pfSense-packages/master/Unofficial.24.conf

Go to Package Manager and try to search e2guardian. If you don't see any package reboot system.

It's working!

[Sei Pine]

@ucribrahim hello! thanks for the reply, but the patch just doesn't work on me. i manually applied the given patch code ($repo_param = "";) in pkg-util.inc on line 388, saved then e2guardian popped out on System > Packages.

login-to-view

gonna try it out on my test lab when i got time, thanks again.

[pfsensation]

@ucribrahim Thanks for helping a fellow user! I am actually at work, therefore couldn't reply earlier.

@Sei-Pine Sometimes when the unofficial repo is added, you need to install any package such as Cron for E2Guardian to show up. It's just how the GUI works on pfSense. I found that installing a package or uninstalling one forces the GUI to refresh. That may have been it, other than that the patch works perfectly. I've applied it to many virtual pfSense installs and all went fine.

[Sei Pine]

@pfsensation hi! thanks for the info. i'll try that next time on my other vm

[ravegen]

@pfsensation said in Unofficial E2guardian package for pfSense:

@ravegen said in Unofficial E2guardian package for pfSense:

@pfsensation

after updating the e2guardian package, I am having issues on the system logs that says on the screenshot.

I am using Content Scanner clamdscan. I have already up to date freshclam. But if my clamdscan content scanner is selected, e2guardian wont start but if not selected, e2guardian starts.

How do you solve that error ?

login-to-view

The AV isn't something I have tested or used yet as I find Clam's signatures not very good. Did you attempt a reinstall? According to the errors there are some configs missing.

clamav content scanner was made working by Marcelloc around 3 or 4 months ago when I requested it from him but after this rotate log fix, it is not working now.
Regardless where the clam's signatures are very good or not but it somehow works its purpose thus somewhat useful. I hope you could fix it or we could ask Marcelloc to fix it back again.

[ravegen]

@marcelloc ,

The clamav content scanner is not working again after there was a fix update for the rotate log.

Can you kindly fix this error again or can you tell us what to do to fix this error if we can do it ourselves.

Thanks

[Sei Pine]

hi guys! im trying out to configure e2guardian, but first, i wanna know do's and don't's

is it ok to run along side squid + squidguard ?
is it ok to run with pfblockerNG?

[ucribrahim]

@sei-pine I wrote a blog post about configure e2guardian. Here is the blog post linked here.

It is okay to run without squid + squidGuard. Don't install both.

It is okay to run with pfBlockerng.

[Sei Pine]

@ucribrahim thanks! i'll try to visit your blog post later.

[pfsensation]

@sei-pine said in Unofficial E2guardian package for pfSense:

hi guys! im trying out to configure e2guardian, but first, i wanna know do's and don't's

is it ok to run along side squid + squidguard ?
is it ok to run with pfblockerNG?

You can run it along with Squid without problems but I don't recommend using Squid Guard. It's a broken mess and one of the main reasons I started looking at E2 Guardian instead.

pfBlockerNG runs well alongside E2 Guardian. I'm running it myself and I've had no problems.

[Sei Pine]

@pfsensation so true, squidguard is making my life harder </3

i'll try to run it alongside pfblockerNG. i'll feed back later

[pfsensation]

@sei-pine said in Unofficial E2guardian package for pfSense:

@pfsensation so true, squidguard is making my life harder </3

i'll try to run it alongside pfblockerNG. i'll feed back later

Ditch SquidGuard. It's not worth the effort or hassle.

With E2 Guardian you have a lot more flexibility, I have different users in different groups with different levels of restrictions. It's awesome!

Filtering via E2 Guardian is simple, create an ACL and block all the categories you don't want. Then edit a group you want to apply the ACL to. Save then Apply. That's all. Let me know if you need any help, I'll try my best. There's more advanced level stuff too like phrase filtering and enforcing YouTube restricted mode / Google safe search that I also apply on my network.

[Sei Pine]

@pfsensation thanks! and yes i'm gonna ditch squidguard after seeing e2guard was able to properly display an error message on a blocked https website while squidguard just display some kind of ssl error omegelul.

[pfsensation]

@sei-pine said in Unofficial E2guardian package for pfSense:

@pfsensation thanks! and yes i'm gonna ditch squidguard after seeing e2guard was able to properly display an error message on a blocked https website while squidguard just display some kind of ssl error omegelul.

E2 Guardian properly displays an error page for HTTP traffic, for HTTPS traffic you must install the certificate and enable MITM. Then the page will display correctly.

This is just how the security process works for HTTPS, E2 Guardian cannot see any content inside the HTTPS stream without MITM. It can only see the domain name, but only reset the connection.

I've got my Guest Wireless filtered without MITM because I can't install the certificate everywhere. But for all the other networks I've installed the certificate and the block page works perfectly.

Although the default template is alright (I made it a while back) I use a customised version of it. Let me know if you want a copy.

[Sei Pine]

@pfsensation yeah im using a certificate from pfsense. installed it on my sample client but squidguard just shows an ssl error. weird