Unofficial E2guardian package for pfSense

ravegen · Nov 6, 2018, 1:12 AM

@marcelloc ,

The clamav content scanner is not working again after there was a fix update for the rotate log.

Can you kindly fix this error again or can you tell us what to do to fix this error if we can do it ourselves.

Thanks

Sei Pine · Nov 7, 2018, 7:46 AM

hi guys! im trying out to configure e2guardian, but first, i wanna know do's and don't's

is it ok to run along side squid + squidguard ?
is it ok to run with pfblockerNG?

ucribrahim · Nov 7, 2018, 7:49 AM

@sei-pine I wrote a blog post about configure e2guardian. Here is the blog post linked here.

It is okay to run without squid + squidGuard. Don't install both.

It is okay to run with pfBlockerng.

Sei Pine · Nov 7, 2018, 7:52 AM

@ucribrahim thanks! i'll try to visit your blog post later.

pfsensation · Nov 7, 2018, 8:14 AM

@sei-pine said in Unofficial E2guardian package for pfSense:

hi guys! im trying out to configure e2guardian, but first, i wanna know do's and don't's

is it ok to run along side squid + squidguard ?
is it ok to run with pfblockerNG?

You can run it along with Squid without problems but I don't recommend using Squid Guard. It's a broken mess and one of the main reasons I started looking at E2 Guardian instead.

pfBlockerNG runs well alongside E2 Guardian. I'm running it myself and I've had no problems.

Sei Pine · Nov 7, 2018, 8:27 AM

@pfsensation so true, squidguard is making my life harder </3

i'll try to run it alongside pfblockerNG. i'll feed back later

pfsensation · Nov 7, 2018, 8:32 AM

@sei-pine said in Unofficial E2guardian package for pfSense:

@pfsensation so true, squidguard is making my life harder </3

i'll try to run it alongside pfblockerNG. i'll feed back later

Ditch SquidGuard. It's not worth the effort or hassle.

With E2 Guardian you have a lot more flexibility, I have different users in different groups with different levels of restrictions. It's awesome!

Filtering via E2 Guardian is simple, create an ACL and block all the categories you don't want. Then edit a group you want to apply the ACL to. Save then Apply. That's all. Let me know if you need any help, I'll try my best. There's more advanced level stuff too like phrase filtering and enforcing YouTube restricted mode / Google safe search that I also apply on my network.

Sei Pine · Nov 7, 2018, 8:38 AM

@pfsensation thanks! and yes i'm gonna ditch squidguard after seeing e2guard was able to properly display an error message on a blocked https website while squidguard just display some kind of ssl error omegelul.

pfsensation · Nov 7, 2018, 8:43 AM

@sei-pine said in Unofficial E2guardian package for pfSense:

@pfsensation thanks! and yes i'm gonna ditch squidguard after seeing e2guard was able to properly display an error message on a blocked https website while squidguard just display some kind of ssl error omegelul.

E2 Guardian properly displays an error page for HTTP traffic, for HTTPS traffic you must install the certificate and enable MITM. Then the page will display correctly.

This is just how the security process works for HTTPS, E2 Guardian cannot see any content inside the HTTPS stream without MITM. It can only see the domain name, but only reset the connection.

I've got my Guest Wireless filtered without MITM because I can't install the certificate everywhere. But for all the other networks I've installed the certificate and the block page works perfectly.

Although the default template is alright (I made it a while back) I use a customised version of it. Let me know if you want a copy.

Sei Pine · Nov 7, 2018, 8:49 AM

@pfsensation yeah im using a certificate from pfsense. installed it on my sample client but squidguard just shows an ssl error. weird

pfsensation · Nov 7, 2018, 9:10 AM

@sei-pine said in Unofficial E2guardian package for pfSense:

@pfsensation yeah im using a certificate from pfsense. installed it on my sample client but squidguard just shows an ssl error. weird

Squid Guard does that, select the cert on E2 Guardian. Remove Squid Guard then give it a shot!

Sei Pine · Nov 7, 2018, 10:18 AM

@pfsensation i'll try it and give a feed back

marcelloc · Nov 7, 2018, 3:19 PM

Latest version 5.2 looks more stable then previous 5.1.If you are on pfSense 2.4.4, try the new version.

pfsensation · Nov 7, 2018, 4:00 PM

@marcelloc said in Unofficial E2guardian package for pfSense:

Latest version 5.2 looks more stable then previous 5.1.If you are on pfSense 2.4.4, try the new version.

I'm on 5.2, everything running all good for me. Very stable now too! V5 in general has been really good.

Sei Pine · Nov 8, 2018, 9:00 AM

hi how can i update to 5.2 ? i installed 5.1 but it doesn't show up on my installed packages hahaha weird

also i can't seem to block any website. i followed a youtube video that was provided here. and also viewed a blog by @ucribrahim

im using mitm, transparent proxy. should i also configure squid or leave it as is? i use my squid with squidguard last time so i already got it configured, also lightsquid.

edit: ok wait i did manage to block facebook, but i can still access youtube.com any tips ?

edit: ok nvm i get it now . i manage to properly display a blocked https website like fb and yt.

thanks to e2guardian and you guys for the help!

more power!

pfsensation · Nov 8, 2018, 2:37 PM

@sei-pine said in Unofficial E2guardian package for pfSense:

hi how can i update to 5.2 ? i installed 5.1 but it doesn't show up on my installed packages hahaha weird

also i can't seem to block any website. i followed a youtube video that was provided here. and also viewed a blog by @ucribrahim

im using mitm, transparent proxy. should i also configure squid or leave it as is? i use my squid with squidguard last time so i already got it configured, also lightsquid.

edit: ok wait i did manage to block facebook, but i can still access youtube.com any tips ?

edit: ok nvm i get it now . i manage to properly display a blocked https website like fb and yt.

thanks to e2guardian and you guys for the help!

more power!

One thing I'd like to do in a new version is improve the acknowledge button. It's meant to be a bypass for admins which means it doesn't need to be shown for non admin groups.

I also recommend using a better Blacklist, I used to support Shallalist however they don't remove dead or parked domains. Which means it's become less efficient.

Here's one I've come to prefer (out of the free ones): ftp://ftp.ut-capitole.fr/pub/reseau/cache/squidguard_contrib/blacklists.tar.gz

ravegen · Nov 8, 2018, 11:23 PM

@marcelloc ,

do you have time to fix the content scanner that was broken after they have fix for the rotate log ?

pfsensation · Nov 9, 2018, 5:26 AM

@ravegen said in Unofficial E2guardian package for pfSense:

@marcelloc ,

do you have time to fix the content scanner that was broken after they have fix for the rotate log ?

I think Marcello was talking to you earlier on his last post. He said to try the latest version, which I think you're already on?

Have you tried a reinstall?

Sei Pine · Nov 9, 2018, 3:17 AM

@pfsensation gonna try this blacklist now

kenrutt · Nov 10, 2018, 2:29 PM

Is anybody using the content lists under ACLs in e2guardian?
I have been experimenting with it and when I put in a more complex regex, e2guardian crashes when I go to certain web sites such as google.