Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Unofficial E2guardian package for pfSense

    Cache/Proxy
    70
    1.2k
    1.4m
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      cova16 @ugurk.
      last edited by

      @ugurk Hi. In squidguard I made a category that I called videos, there I put all these domains that contain videos, so I block almost everything and every day I add other domains:
      dailymotion.com googlevideo.com i.ytimg.com m.youtube.com metacafe.com netflix.com nflxvideo.net screen.yahoo.com skype.com vimeo.com vine.co 3r2---sn-j5caxupj5-nwvl.googlevideo.com r1---sn-5hoxuj5cax-wv6.googlevideo.com r1---sn-hp57kn6l.googlevideo.com r1---sn-hp57knsl.googlevideo.com r1---sn-hp57yn7y.googlevideo.com r1---sn-hp57yne7.googlevideo.com r1---sn-hp57ynes.googlevideo.com r1---sn-j5caxupj5-nwve.googlevideo.com r1---sn-j5caxupj5-nwvl.googlevideo.com r2---sn-5hoxuj5cax-nwv6.googlevideo.com r2---sn-hp57kn7z.googlevideo.com r2---sn-hp57knlr.googlevideo.com r2---sn-hp57knzz.googlevideo.com r2---sn-hp57yne6.googlevideo.com r2---sn-hp57ynee.googlevideo.com r2---sn-hp57ynez.googlevideo.com r2---sn-j5caxupj5-nwve.googlevideo.com r2---sn-q4f7sn7k.googlevideo.com r3---sn-5hoxuj5cax-nwv6.googlevideo.com r3---sn-hp57kn7s.googlevideo.com r3---sn-j5caxupj5-nwve.googlevideo.com r3---sn-j5caxupj5-nwvl.googlevideo.com r4---sn-5hoxuj5cax-nwv6.googlevideo.com r4---sn-j5caxupj5-nwve.googlevideo.com r4---sn-j5caxupj5-nwvl.googlevideo.com r5---sn-hp57knls.googlevideo.com r5---sn-hp57ynez.googlevideo.com r5---sn-j5caxupj5-nwve.googlevideo.com r5---sn-j5caxupj5-nwvl.googlevideo.com r6---sn-hp57kn7l.googlevideo.com r6---sn-hp57knz6.googlevideo.com
      Buena suerte

      U 1 Reply Last reply Reply Quote 0
      • U
        ugurk. @cova16
        last edited by

        @cova16 ty for response. ill try it asap

        1 Reply Last reply Reply Quote 0
        • K
          kenrutt @ugurk.
          last edited by

          @ugurk Hello, I think mobile youtube app uses different port number. Not sure which port. Use packet capture and then export to wire shark to find out.

          1 Reply Last reply Reply Quote 0
          • A
            Albertopfsense
            last edited by

            good morning marcello
            i have execute fetch in pfsense 2.4.4 actual ver
            but now i dont view any program for install ( many info in attach image)
            how can i do ?
            Thankspfsense-e2guardian.PNG Alberto

            rogercwbR P 2 Replies Last reply Reply Quote 1
            • K
              kenpachizaraki
              last edited by

              @pfsensation @marcelloc
              does anyone had a success in setting up e2g in multiwan environment?
              currently having latest pfsense + latest e2g...when i enable e2g all traffic are routed to "default" wan...

              P 1 Reply Last reply Reply Quote 0
              • M
                marcopzz
                last edited by

                Hi to everybody, my name is Marco and i'm a new in this forum.
                I used pfsense from many years as simple router, firewall, openvpn server and load balancing server.

                Now i'm trying to proxy and filter contents with Squid and e2guardian.
                First of all i want to thanks @marcelloc for his great work with the porting of e2guardian. Marcello i hope that you and other users can help me, i'm trying to obtain my goal from many days, with no results.

                I have a pfsense box with Squid and e2guardian installed. In the same lan there is a samba4 LDAP.

                My goal is to have from 2 to 4 users0s groups in LDAP that can browse the web with LDAP authentication on proxy with different e2guardian ACL based on content list (like Shalla's Blacklist).

                The situation now is that i can autenthicate with the LDAP users but e2guardian seems not to recognize the correct LDAP group and so the applied filter list is wrong. Can you help me?

                If is not possible is ok to have just 2 list: the first, for unauthenticated users, with filtered navigation, and the second, for some autenticathed ldap users, with unfiltered navigation.

                Hope @marcelloc o someone can help me.

                Good work, and byeee ;-)

                1 Reply Last reply Reply Quote 0
                • rogercwbR
                  rogercwb @Albertopfsense
                  last edited by rogercwb

                  @Albertopfsense Same problem here.

                  @Albertopfsense I found how to revert to show official packages again.

                  Just execute the command below with SSH access or by Diagnostic | Command Prompt.

                  rm /usr/local/etc/pkg/repos/Unofficial.conf
                  
                  1 Reply Last reply Reply Quote 0
                  • P
                    plusbil @Albertopfsense
                    last edited by

                    @Albertopfsense Before Patch, after fetch apply. Later pfsense pc restart.

                    1 Reply Last reply Reply Quote 0
                    • P
                      plusbil @kenpachizaraki
                      last edited by

                      @kenpachizaraki E2guardian not work multiwan, unfortunately. Only failover working.

                      1 Reply Last reply Reply Quote 0
                      • M
                        Morlac
                        last edited by Morlac

                        Hello all,

                        Hope all are safe and healthy

                        Can anyone provide a binary release of e2g 5.3.4? @marcelloc ?

                        Thanks.

                        1 Reply Last reply Reply Quote 0
                        • Y
                          yogeesh @marcelloc
                          last edited by

                          @marcelloc Hi,
                          I am getting below error when I am opening the social media websites in my network.
                          Once I switch to my home network I can easily access social media website
                          PFA of an error message .Screenshot 2020-03-06 at 1.09.12 PM.png

                          P 1 Reply Last reply Reply Quote 0
                          • P
                            pfsensation @yogeesh
                            last edited by

                            @yogeesh said in Unofficial E2guardian package for pfSense:

                            @marcelloc Hi,
                            I am getting below error when I am opening the social media websites in my network.
                            Once I switch to my home network I can easily access social media website
                            PFA of an error message .Screenshot 2020-03-06 at 1.09.12 PM.png

                            If you have MITM enabled, you need to install the CA certificate on the client machine. As E2 Guardian essentially breaks the HTTPS encryption.

                            1 Reply Last reply Reply Quote 0
                            • R
                              ravegen
                              last edited by

                              Is there a way to download the E2Guardian package and install it offline ?

                              1 Reply Last reply Reply Quote 0
                              • L
                                La6er
                                last edited by

                                Hi everyone, I am having an issue maybe some of you guys have faced this same behavior,
                                my e2g just randomy stopped listening to the config, if I change an IP on a group the change does not take effect, If I add a new site to an ACL it does not take effect, anyone with this kind of issue?

                                P K 2 Replies Last reply Reply Quote 0
                                • P
                                  pfsensation @La6er
                                  last edited by

                                  @la6er said in Unofficial E2guardian package for pfSense:

                                  Hi everyone, I am having an issue maybe some of you guys have faced this same behavior,
                                  my e2g just randomy stopped listening to the config, if I change an IP on a group the change does not take effect, If I add a new site to an ACL it does not take effect, anyone with this kind of issue?

                                  Enable the soft restart option, press apply and see if that helps.

                                  1 Reply Last reply Reply Quote 0
                                  • K
                                    kenrutt @La6er
                                    last edited by

                                    @la6er
                                    It seems when making changes to an IP in a group. I need to stop E2G and restart under Status\Services. I have very little trouble with E2G stopping on me. In fact I do not even enable the watchdog feature. It just runs. It does take some tweeking when first setting up E2G. Make sure to go through the various lists and turn off or delete entries that reference any file that does not exist. I found it very helpful to SSH into router with WinSCP and modify some config files directly.

                                    1 Reply Last reply Reply Quote 0
                                    • D
                                      drmwndr
                                      last edited by

                                      Hi all,
                                      I'm using E2Guardian 5 from Unofficial Repository, not as transparent proxy and I'm getting some "The site requested does not exist" for simple local websites.
                                      All filters were disabled, for tests.
                                      Log error shows "2021.07.05 08:21:04 192.168.0.2 http://portal.mydomain.local 403 192.168.0.2 Default NETERROR Exceção do sítio confere. (Site on Exception list)"

                                      The local site is working when accessed by Squid, or directly, does someone here have some idea of how to fix it? I was wondering if the problem is something DNS related but I can't find a way of how to force DNS servers on E2Guardian and taking a look at DNS logs, everything appears to be Ok.

                                      Can someone help?

                                      Thanks in advance.

                                      P 1 Reply Last reply Reply Quote 0
                                      • P
                                        pfsensation @drmwndr
                                        last edited by

                                        @drmwndr said in Unofficial E2guardian package for pfSense:

                                        Hi all,
                                        I'm using E2Guardian 5 from Unofficial Repository, not as transparent proxy and I'm getting some "The site requested does not exist" for simple local websites.
                                        All filters were disabled, for tests.
                                        Log error shows "2021.07.05 08:21:04 192.168.0.2 http://portal.mydomain.local 403 192.168.0.2 Default NETERROR Exceção do sítio confere. (Site on Exception list)"

                                        The local site is working when accessed by Squid, or directly, does someone here have some idea of how to fix it? I was wondering if the problem is something DNS related but I can't find a way of how to force DNS servers on E2Guardian and taking a look at DNS logs, everything appears to be Ok.

                                        Can someone help?

                                        Thanks in advance.

                                        Definitely something to do with your DNS setup, are you using DNS resolver? I've got internal sites too and haven't run into any issues although I'm no longer using squid.

                                        D 1 Reply Last reply Reply Quote 0
                                        • D
                                          drmwndr @pfsensation
                                          last edited by drmwndr

                                          @pfsensation said in Unofficial E2guardian package for pfSense:

                                          Definitely something to do with your DNS setup, are you using DNS resolver? I've got internal sites too and haven't run into any issues although I'm no longer using squid.

                                          Hi @pfsensation. I have Bind installed on my pfsense box as DNS Server. I also have a NAT and a Firewall Rule redirecting all LAN1 Interface Traffic to port 53 to my pfSense box.
                                          Is it necessary to enable and set pfSense DNS Resolver? Looks like e2guardian is bypassing this rule and looking directly on outside DNSs.

                                          P 1 Reply Last reply Reply Quote 0
                                          • P
                                            pfsensation @drmwndr
                                            last edited by

                                            @drmwndr said in Unofficial E2guardian package for pfSense:

                                            @pfsensation said in Unofficial E2guardian package for pfSense:

                                            Definitely something to do with your DNS setup, are you using DNS resolver? I've got internal sites too and haven't run into any issues although I'm no longer using squid.

                                            Hi @pfsensation. I have Bind installed on my pfsense box as DNS Server. I also have a NAT and a Firewall Rule redirecting all LAN1 Interface Traffic to port 53 to my pfSense box.
                                            Is it necessary to enable and set pfSense DNS Resolver? Looks like e2guardian is bypassing this rule and looking directly on outside DNSs.

                                            Unfortunately I don't use BIND either, but when you run nslookup on the client device, can it resolve your internal domains? Another gotcha is DNS over HTTPS/TLS, make sure that's disabled in the browser and lock down port 853 from LAN1.

                                            D 1 Reply Last reply Reply Quote 1
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.