Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Unofficial E2guardian package for pfSense

    Scheduled Pinned Locked Moved Cache/Proxy
    1.2k Posts 71 Posters 1.6m Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      plusbil
      last edited by

      0_1543877833818_pfSense.localdomain_-Status_System_Logs_System_General-_2018-12-04_01.55.49.bmp

      System working but e2guard access.log not working. I did port 8081, 8082; result same. Why?

      P 1 Reply Last reply Reply Quote 0
      • P
        pfsensation @plusbil
        last edited by

        @plusbil said in Unofficial E2guardian package for pfSense:

        0_1543877833818_pfSense.localdomain_-Status_System_Logs_System_General-_2018-12-04_01.55.49.bmp

        System working but e2guard access.log not working. I did port 8081, 8082; result same. Why?

        Can you check var/log/e2guardian/access.log and see if it's updating there?

        1 Reply Last reply Reply Quote 0
        • P
          plusbil
          last edited by

          Not update. New access.log zero byte. But when I restard pfsense system, e2guard log working.

          P 1 Reply Last reply Reply Quote 0
          • P
            plusbil
            last edited by

            And 3-4 days later again stop.

            1 Reply Last reply Reply Quote 0
            • Sei PineS
              Sei Pine
              last edited by Sei Pine

              0_1543990498177_0d335c3f-0fde-4caf-bc44-4c4d9ab236d0-image.png

              so far so good, the only problem i encounter is each day when sarg stops logging, i need to change time format to American or European then force refresh for sarg to continue logging. its a little hassle but still it works.

              0_1543990693231_ecea3ffe-6613-474f-89ae-e68a0dda3bb4-image.png

              btw, till now i still can't figure out how to use the Users tab on E2Guardian or do i need to use LDAP?, need help with this one thanks.

              what I've tried so far is to use PFSENSE\(Group name)
              (Group Name)\(Account Name)
              PFSENSE\(Group Name)\(Account Name)

              ^ Doesn't work

              P 1 Reply Last reply Reply Quote 0
              • P
                pfsensation @plusbil
                last edited by

                @plusbil said in Unofficial E2guardian package for pfSense:

                Not update. New access.log zero byte. But when I restard pfsense system, e2guard log working.

                Clear the logs file manually, restart E2 Guardian and let me know what you've got your log rotate settings set as. It's been brilliant for me and working without any issues.

                P 1 Reply Last reply Reply Quote 0
                • P
                  pfsensation @Sei Pine
                  last edited by

                  @sei-pine said in Unofficial E2guardian package for pfSense:

                  0_1543990498177_0d335c3f-0fde-4caf-bc44-4c4d9ab236d0-image.png

                  so far so good, the only problem i encounter is each day when sarg stops logging, i need to change time format to American or European then force refresh for sarg to continue logging. its a little hassle but still it works.

                  0_1543990693231_ecea3ffe-6613-474f-89ae-e68a0dda3bb4-image.png

                  btw, till now i still can't figure out how to use the Users tab on E2Guardian or do i need to use LDAP?, need help with this one thanks.

                  what I've tried so far is to use PFSENSE\(Group name)
                  (Group Name)\(Account Name)
                  PFSENSE\(Group Name)\(Account Name)

                  ^ Doesn't work

                  Although I personally haven't used that specific configuration, and I just use groups. You may need to enable a different authentication method to be able to use the users tab. What authentication method have you currently got enabled?

                  Sei PineS 1 Reply Last reply Reply Quote 0
                  • Sei PineS
                    Sei Pine @pfsensation
                    last edited by

                    @pfsensation ah i see! I was only using local users lmao. I'll try to configure freeradius first, thanks for the info!

                    1 Reply Last reply Reply Quote 0
                    • P
                      plusbil @pfsensation
                      last edited by

                      @pfsensation said in Unofficial E2guardian package for pfSense:

                      Clear the logs file manually, restart E2 Guardian and let me know what you've got your log rotate settings set as. It's been brilliant for me and working without any issues.

                      It's been five day. It working for now. I'il try when there's a problem. Thanks...

                      1 Reply Last reply Reply Quote 0
                      • R
                        ravegen @pfsensation
                        last edited by

                        @pfsensation

                        @ravegen said in Unofficial E2guardian package for pfSense:

                        @pfsensation ,

                        Is there a progress on the content scanner fix ?

                        What is our update on this ?

                        P 1 Reply Last reply Reply Quote 0
                        • P
                          pfsensation @ravegen
                          last edited by

                          @ravegen said in Unofficial E2guardian package for pfSense:

                          @pfsensation

                          @ravegen said in Unofficial E2guardian package for pfSense:

                          @pfsensation ,

                          Is there a progress on the content scanner fix ?

                          What is our update on this ?

                          Nothing yet unfortunately. @marcelloc Have you had a chance now to take a look at this problem?

                          1 Reply Last reply Reply Quote 0
                          • fabricioguzzyF
                            fabricioguzzy
                            last edited by

                            UPDATE

                            Hello folks,
                            I´ve been testing E2Guardian+SQUID with SSO NTLM and it is working REALLY fine.
                            There are some small/cosmetic issues, but at all, it's working fine.
                            Issues that I could get so far:
                            *The LDAP search group/users mechanism has some issues. It seems the script created by the package (see crontab) doesn't have the proper env setting. I tested it assing "sh -c" in front of it, and it resolved the issue.
                            *The e2guardian service sometimes got stuck.the GUI start/stop/restart icons doesn't work and you have to kill the PID from shell console. It seems it's something related to the "save/apply" process after the LDAP update script runs. I am still investigating.

                            The e2guardian is "really" better than "squidguard" - There is no comparison! Forget about squidguard,

                            Hope that helps,
                            Fabricio.

                            P S 2 Replies Last reply Reply Quote 0
                            • P
                              pfsensation @fabricioguzzy
                              last edited by

                              @fabricioguzzy said in Unofficial E2guardian package for pfSense:

                              UPDATE

                              Hello folks,
                              I´ve been testing E2Guardian+SQUID with SSO NTLM and it is working REALLY fine.
                              There are some small/cosmetic issues, but at all, it's working fine.
                              Issues that I could get so far:
                              *The LDAP search group/users mechanism has some issues. It seems the script created by the package (see crontab) doesn't have the proper env setting. I tested it assing "sh -c" in front of it, and it resolved the issue.
                              *The e2guardian service sometimes got stuck.the GUI start/stop/restart icons doesn't work and you have to kill the PID from shell console. It seems it's something related to the "save/apply" process after the LDAP update script runs. I am still investigating.

                              The e2guardian is "really" better than "squidguard" - There is no comparison! Forget about squidguard,

                              Hope that helps,
                              Fabricio.

                              Most of us have known or have come to know how much of a broken mess SquidGuard is. E2 Guardian filtering is much more advanced and granular.

                              I suggest you report the issues on the E2 Guardian Github page for quicker response/fixes. Thank you for the update, and I'm glad you've got it working with LDAP!

                              fabricioguzzyF 1 Reply Last reply Reply Quote 0
                              • fabricioguzzyF
                                fabricioguzzy @pfsensation
                                last edited by

                                @pfsensation hi there!

                                It seems the issue is related to the pfsense package only (Web GUI -PHP code). There is nothing wrong with the E2guardian binary package at all, so, I could not report it at the e2guardian forum I guess.
                                Anyway, YES, people should simply forget about squidguard... I am very happy and excited with the results of E2guardian as a Content Filter and etc.
                                Still investigating the issues with the service/ldap package.

                                Thanks!
                                Fabricio.

                                P 1 Reply Last reply Reply Quote 0
                                • P
                                  pfsensation @fabricioguzzy
                                  last edited by

                                  @fabricioguzzy said in Unofficial E2guardian package for pfSense:

                                  @pfsensation hi there!

                                  It seems the issue is related to the pfsense package only (Web GUI -PHP code). There is nothing wrong with the E2guardian binary package at all, so, I could not report it at the e2guardian forum I guess.
                                  Anyway, YES, people should simply forget about squidguard... I am very happy and excited with the results of E2guardian as a Content Filter and etc.
                                  Still investigating the issues with the service/ldap package.

                                  Thanks!
                                  Fabricio.

                                  Sorry, I meant @marcelloc has his own Github page for E2 Guardian on pfSense issues.

                                  fabricioguzzyF 1 Reply Last reply Reply Quote 0
                                  • S
                                    susamlicubuk @fabricioguzzy
                                    last edited by

                                    @fabricioguzzy said in Unofficial E2guardian package for pfSense:

                                    UPDATE

                                    Hello folks,
                                    I´ve been testing E2Guardian+SQUID with SSO NTLM and it is working REALLY fine.
                                    There are some small/cosmetic issues, but at all, it's working fine.
                                    Issues that I could get so far:
                                    *The LDAP search group/users mechanism has some issues. It seems the script created by the package (see crontab) doesn't have the proper env setting. I tested it assing "sh -c" in front of it, and it resolved the issue.
                                    *The e2guardian service sometimes got stuck.the GUI start/stop/restart icons doesn't work and you have to kill the PID from shell console. It seems it's something related to the "save/apply" process after the LDAP update script runs. I am still investigating.

                                    The e2guardian is "really" better than "squidguard" - There is no comparison! Forget about squidguard,

                                    Hope that helps,
                                    Fabricio.

                                    Can you share a screenshot of sso ntlm settings?

                                    fabricioguzzyF 1 Reply Last reply Reply Quote 0
                                    • fabricioguzzyF
                                      fabricioguzzy @susamlicubuk
                                      last edited by fabricioguzzy

                                      @susamlicubuk
                                      Sure. Here it goes.

                                      Keep in mind that I have it like: USER --> E2Guardian --> SQUID --> INTERNET
                                      I have SAMBA in the background (for NTLM)

                                      Here E2Guardian Config:

                                      2_1548258169718_e2guard-ntlm-option.JPG 1_1548258169717_e2guard-Misc-settings.JPG 0_1548258169715_e2guard-advanced-features.JPG

                                      Here SQUID Config:

                                      0_1548258244944_squid-adv-config-auth.JPG

                                      S 1 Reply Last reply Reply Quote 0
                                      • fabricioguzzyF
                                        fabricioguzzy @pfsensation
                                        last edited by

                                        @pfsensation -
                                        I will contact him for sure. I thought he was writing here to the forum only.
                                        Thanks for the heads up!!

                                        1 Reply Last reply Reply Quote 0
                                        • S
                                          susamlicubuk @fabricioguzzy
                                          last edited by

                                          @fabricioguzzy said in Unofficial E2guardian package for pfSense:

                                          @susamlicubuk
                                          Sure. Here it goes.

                                          Keep in mind that I have it like: USER --> E2Guardian --> SQUID --> INTERNET
                                          I have SAMBA in the background (for NTLM)

                                          Here E2Guardian Config:

                                          2_1548258169718_e2guard-ntlm-option.JPG 1_1548258169717_e2guard-Misc-settings.JPG 0_1548258169715_e2guard-advanced-features.JPG

                                          Here SQUID Config:

                                          0_1548258244944_squid-adv-config-auth.JPG

                                          How are your groups section and your users partition settings?
                                          Please display the screenshot
                                          Can you share the samba settings?

                                          fabricioguzzyF 1 Reply Last reply Reply Quote 0
                                          • fabricioguzzyF
                                            fabricioguzzy @susamlicubuk
                                            last edited by

                                            @susamlicubuk

                                            there you go:

                                            USERS:
                                            5_1548263239109_users2.JPG

                                            4_1548263239107_users1.JPG

                                            SAMBA smb.conf file (replace DOMAIN and DOMAIN.CORP by your actual DOMAIN name)
                                            3_1548263239106_samba-ntlm.JPG
                                            GROUPS: (in the "masked" LDAP line, you add your Active Directory Server hostname)
                                            2_1548263239106_groups3.JPG
                                            1_1548263239105_groups2.JPG
                                            0_1548263239104_groups1.JPG

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.