Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Unofficial E2guardian package for pfSense

    Scheduled Pinned Locked Moved
    Cache/Proxy
    70
    1.2k
    1.2m
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • arch113A
      arch113 @pfsensation
      last edited by

      @pfsensation said in Unofficial E2guardian package for pfSense:

      @arch113 Download the system patches package and copy and paste everything in here: https://github.com/marcelloc/Unofficial-pfSense-packages/blob/master/244_unofficial_packages_list.patch

      Then give your system a reboot and the packages will show.

      I must be doing something wrong, still not showing up for me.

      P 2 Replies Last reply Reply Quote 0
      • L
        La6er
        last edited by

        Hi all, anyone faicing issues with the realtime tab after update to 5.3.1_1? only 1 gruop is been displayed on the tab, while using e2g format, if I change to squid format everything shows up, all my groups and traffic reported normally on the real time tab

        P 1 Reply Last reply Reply Quote 0
        • P
          pfsensation @arch113
          last edited by

          @arch113 said in Unofficial E2guardian package for pfSense:

          @pfsensation said in Unofficial E2guardian package for pfSense:

          @arch113 Download the system patches package and copy and paste everything in here: https://github.com/marcelloc/Unofficial-pfSense-packages/blob/master/244_unofficial_packages_list.patch

          Then give your system a reboot and the packages will show.

          I must be doing something wrong, still not showing up for me.

          Send a screenshot of the system patch screen where you copied and pasted the patch.

          1 Reply Last reply Reply Quote 0
          • P
            pfsensation @La6er
            last edited by

            @la6er said in Unofficial E2guardian package for pfSense:

            Hi all, anyone faicing issues with the realtime tab after update to 5.3.1_1? only 1 gruop is been displayed on the tab, while using e2g format, if I change to squid format everything shows up, all my groups and traffic reported normally on the real time tab

            I use Squid Format and had issues too. Had to switch to E2guardian format temporarily, uninstall E2 Guardian, install again and then switch back to Squid format and then it started to work.

            Give this a go the other way around for E2 Guardian format, it is a weird bug but those are the steps that fixed it for me.

            1 Reply Last reply Reply Quote 0
            • P
              pfsensation @arch113
              last edited by

              @arch113 Follow these steps to enable unofficial repos and get E2Guardian to show up:

              1. Install "patch" package from package manager.
              1. System > Patches > click "Add New Patch" button.
                Description: e2guardian patch
                URL/Commit ID: Leave empty
                Patch Contents: Copy/Paste all codes from here
                Path Strip Count: 1
                Base Directory: /
                Ignore Whitespace: Clicked
                Auto Apply: Clicked
              2. Save and then click "Apply" button.

              That's all for now. Now go to shell and add repo of e2guardian by following command.

              fetch -q -o /usr/local/etc/pkg/repos/Unofficial.conf https://raw.githubusercontent.com/marcelloc/Unofficial-pfSense-packages/master/Unofficial.24.conf

              Go to Package Manager and try to search e2guardian. If you don't see any package reboot system.

              arch113A 1 Reply Last reply Reply Quote 1
              • W
                wingman
                last edited by

                Can you get the regular http block page for https sites as well?
                Without getting the ‘Unable to connect’ browser error

                P 1 Reply Last reply Reply Quote 0
                • P
                  pfsensation @wingman
                  last edited by pfsensation

                  @wingman said in Unofficial E2guardian package for pfSense:

                  Can you get the regular http block page for https sites as well?
                  Without getting the ‘Unable to connect’ browser error

                  Yes you can, however it will require you to enable MITM and install the CA cert on your client devices. This will also allow the phrase detection filters on https sites and allow the proxy to see the full URL.

                  W 2 Replies Last reply Reply Quote 0
                  • W
                    wingman @pfsensation
                    last edited by

                    @pfsensation Thank you. I'll give it a shot.

                    1 Reply Last reply Reply Quote 0
                    • arch113A
                      arch113 @pfsensation
                      last edited by

                      @pfsensation
                      Thank you, finally have it installed.

                      1 Reply Last reply Reply Quote 1
                      • W
                        wingman @pfsensation
                        last edited by wingman

                        @pfsensation Thanks mate. It worked. I had to select sslmitm and automitm in my group. Thanks again.

                        1 Reply Last reply Reply Quote 0
                        • L
                          La6er
                          last edited by

                          Hi all, another question... is it possible to send the e2guardian logs to a syslog server?

                          1 Reply Last reply Reply Quote 0
                          • W
                            wingman
                            last edited by

                            Is there a way to forward some website requests to a upstream proxy server?
                            Say if a user requests google.com that request will go through a proxy.

                            1 Reply Last reply Reply Quote 0
                            • K
                              kenpachizaraki
                              last edited by

                              @pfsensation is there a way to use old e2g release?
                              my pfsense box is still on 2.4.1 i cant upgrade it on the latest pfsense release due to ipsec being broken.

                              RicoR 1 Reply Last reply Reply Quote 0
                              • RicoR
                                Rico LAYER 8 Rebel Alliance @kenpachizaraki
                                last edited by

                                @kenpachizaraki said in Unofficial E2guardian package for pfSense:

                                i cant upgrade it on the latest pfsense release due to ipsec being broken

                                ?!
                                Check https://forum.netgate.com/category/17/ipsec
                                There is like no one complaining about IPSEC being broken in 2.4.4-p2

                                -Rico

                                2x Netgate XG-7100 | 11x Netgate SG-5100 | 6x Netgate SG-3100 | 2x Netgate SG-1100

                                K arch113A 2 Replies Last reply Reply Quote 0
                                • K
                                  kenpachizaraki @Rico
                                  last edited by

                                  @Rico we have IPSEC connecting to AWS VPN. We tried the latest release using clean install.
                                  IPSec cant connect.
                                  We tried 2.4.1 then upgrade to 2.4.4, still can not connect to AWS VPN.
                                  I'll try to boot the backup pfsense and upgrade it to get the logs.
                                  Maybe someone could help if i posted the logs..
                                  Will update the thread.

                                  1 Reply Last reply Reply Quote 0
                                  • arch113A
                                    arch113 @Rico
                                    last edited by

                                    I have a weird to me problem. Got the filtering all setup, blocking adult site works, going to playboydotcom, I get the denied page saying its block by category:adult. But if I remove the Enable checkbox from all ACL's (Site, URL, etc), the site is still blocked. If I remove the adult domains from all ACL's, the site is also still blocked by category:adult. Only way I can get to playboydotcom (for example) is to disable the E2guardian service.

                                    The reason this came about is, I am trying to get Software update to work on ipads on the network, i see in the real time log that a really long url starting with updates-http.cdn-apple.com is be denied. When I to the jsut that site, it works, but when I input the actual long url, I get denied by category:/Regular Expression URLs, and for the life of me, can't seem to get around it/unblock it.

                                    It seems whatever config change I put in the pfsense is .ot making to the actual e2guardian config.

                                    P U 2 Replies Last reply Reply Quote 0
                                    • P
                                      pfsensation @arch113
                                      last edited by

                                      @arch113 said in Unofficial E2guardian package for pfSense:

                                      I have a weird to me problem. Got the filtering all setup, blocking adult site works, going to playboydotcom, I get the denied page saying its block by category:adult. But if I remove the Enable checkbox from all ACL's (Site, URL, etc), the site is still blocked. If I remove the adult domains from all ACL's, the site is also still blocked by category:adult. Only way I can get to playboydotcom (for example) is to disable the E2guardian service.

                                      The reason this came about is, I am trying to get Software update to work on ipads on the network, i see in the real time log that a really long url starting with updates-http.cdn-apple.com is be denied. When I to the jsut that site, it works, but when I input the actual long url, I get denied by category:/Regular Expression URLs, and for the life of me, can't seem to get around it/unblock it.

                                      It seems whatever config change I put in the pfsense is .ot making to the actual e2guardian config.

                                      Sounds like you have things misconfigured. E2 Guardian has a lot of blocking methods, it's up to you to modify the configs and adapt to your needs and enable it.

                                      My guess is you have something enabled even when you disable the site list. E2G now has a few main blocking methods, Site URL, Phrase weights, Regex and Pics (although not in use much). If you make sure they're all disabled, your blocked site will work.

                                      arch113A 1 Reply Last reply Reply Quote 0
                                      • arch113A
                                        arch113 @pfsensation
                                        last edited by

                                        @pfsensation
                                        They all appear to be off

                                        e2url.JPG e2site.JPG e2search.JPG e2phrase.JPG e2header.JPG e2extension.JPG e2content.JPG

                                        1 Reply Last reply Reply Quote 0
                                        • U
                                          User43617 @arch113
                                          last edited by

                                          @arch113

                                          @arch113 said in Unofficial E2guardian package for pfSense:

                                          I have a weird to me problem. Got the filtering all setup, blocking adult site works, going to playboydotcom, I get the denied page saying its block by category:adult. But if I remove the Enable checkbox from all ACL's (Site, URL, etc), the site is still blocked. If I remove the adult domains from all ACL's, the site is also still blocked by category:adult. Only way I can get to playboydotcom (for example) is to disable the E2guardian service.

                                          The reason this came about is, I am trying to get Software update to work on ipads on the network, i see in the real time log that a really long url starting with updates-http.cdn-apple.com is be denied. When I to the jsut that site, it works, but when I input the actual long url, I get denied by category:/Regular Expression URLs, and for the life of me, can't seem to get around it/unblock it.

                                          It seems whatever config change I put in the pfsense is .ot making to the actual e2guardian config.

                                          I solved it by putting "updates-http.cdn-apple.com" (without quotes) in the Exception Config box in the URL lists ACL.

                                          arch113A 1 Reply Last reply Reply Quote 0
                                          • arch113A
                                            arch113 @User43617
                                            last edited by arch113

                                            @User43617
                                            I did that too
                                            Its like the config the GUI is 'changing' is not the same config E2guardian is using, although I can turn the daemon off, that part works.
                                            e2urlexception.JPG

                                            P 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post