Unofficial E2guardian package for pfSense

cova16 · Oct 7, 2019, 5:46 PM

@ugurk Hi. In squidguard I made a category that I called videos, there I put all these domains that contain videos, so I block almost everything and every day I add other domains:
dailymotion.com googlevideo.com i.ytimg.com m.youtube.com metacafe.com netflix.com nflxvideo.net screen.yahoo.com skype.com vimeo.com vine.co 3r2---sn-j5caxupj5-nwvl.googlevideo.com r1---sn-5hoxuj5cax-wv6.googlevideo.com r1---sn-hp57kn6l.googlevideo.com r1---sn-hp57knsl.googlevideo.com r1---sn-hp57yn7y.googlevideo.com r1---sn-hp57yne7.googlevideo.com r1---sn-hp57ynes.googlevideo.com r1---sn-j5caxupj5-nwve.googlevideo.com r1---sn-j5caxupj5-nwvl.googlevideo.com r2---sn-5hoxuj5cax-nwv6.googlevideo.com r2---sn-hp57kn7z.googlevideo.com r2---sn-hp57knlr.googlevideo.com r2---sn-hp57knzz.googlevideo.com r2---sn-hp57yne6.googlevideo.com r2---sn-hp57ynee.googlevideo.com r2---sn-hp57ynez.googlevideo.com r2---sn-j5caxupj5-nwve.googlevideo.com r2---sn-q4f7sn7k.googlevideo.com r3---sn-5hoxuj5cax-nwv6.googlevideo.com r3---sn-hp57kn7s.googlevideo.com r3---sn-j5caxupj5-nwve.googlevideo.com r3---sn-j5caxupj5-nwvl.googlevideo.com r4---sn-5hoxuj5cax-nwv6.googlevideo.com r4---sn-j5caxupj5-nwve.googlevideo.com r4---sn-j5caxupj5-nwvl.googlevideo.com r5---sn-hp57knls.googlevideo.com r5---sn-hp57ynez.googlevideo.com r5---sn-j5caxupj5-nwve.googlevideo.com r5---sn-j5caxupj5-nwvl.googlevideo.com r6---sn-hp57kn7l.googlevideo.com r6---sn-hp57knz6.googlevideo.com
Buena suerte

ugurk. · Oct 7, 2019, 7:21 PM

@cova16 ty for response. ill try it asap

kenrutt · Oct 8, 2019, 10:42 PM

@ugurk Hello, I think mobile youtube app uses different port number. Not sure which port. Use packet capture and then export to wire shark to find out.

Albertopfsense · Jan 17, 2020, 2:23 PM

good morning marcello
i have execute fetch in pfsense 2.4.4 actual ver
but now i dont view any program for install ( many info in attach image)
how can i do ?
Thanks login-to-view Alberto

kenpachizaraki · Feb 10, 2020, 8:02 AM

@pfsensation @marcelloc
does anyone had a success in setting up e2g in multiwan environment?
currently having latest pfsense + latest e2g...when i enable e2g all traffic are routed to "default" wan...

marcopzz · Feb 26, 2020, 12:05 PM

Hi to everybody, my name is Marco and i'm a new in this forum.
I used pfsense from many years as simple router, firewall, openvpn server and load balancing server.

Now i'm trying to proxy and filter contents with Squid and e2guardian.
First of all i want to thanks @marcelloc for his great work with the porting of e2guardian. Marcello i hope that you and other users can help me, i'm trying to obtain my goal from many days, with no results.

I have a pfsense box with Squid and e2guardian installed. In the same lan there is a samba4 LDAP.

My goal is to have from 2 to 4 users0s groups in LDAP that can browse the web with LDAP authentication on proxy with different e2guardian ACL based on content list (like Shalla's Blacklist).

The situation now is that i can autenthicate with the LDAP users but e2guardian seems not to recognize the correct LDAP group and so the applied filter list is wrong. Can you help me?

If is not possible is ok to have just 2 list: the first, for unauthenticated users, with filtered navigation, and the second, for some autenticathed ldap users, with unfiltered navigation.

Hope @marcelloc o someone can help me.

Good work, and byeee ;-)

rogercwb · Mar 16, 2020, 9:50 PM

@Albertopfsense ~~Same problem here.~~

@Albertopfsense I found how to revert to show official packages again.

Just execute the command below with SSH access or by Diagnostic | Command Prompt.

rm /usr/local/etc/pkg/repos/Unofficial.conf

plusbil · Mar 16, 2020, 2:12 PM

@Albertopfsense Before Patch, after fetch apply. Later pfsense pc restart.

plusbil · Mar 16, 2020, 2:17 PM

@kenpachizaraki E2guardian not work multiwan, unfortunately. Only failover working.

Morlac · Mar 24, 2020, 5:45 PM

Hello all,

Hope all are safe and healthy

Can anyone provide a binary release of e2g 5.3.4? @marcelloc ?

Thanks.

yogeesh · Mar 31, 2020, 12:24 PM

@marcelloc Hi,
I am getting below error when I am opening the social media websites in my network.
Once I switch to my home network I can easily access social media website
PFA of an error message .login-to-view

pfsensation · May 12, 2020, 10:53 AM

@yogeesh said in Unofficial E2guardian package for pfSense:

@marcelloc Hi,
I am getting below error when I am opening the social media websites in my network.
Once I switch to my home network I can easily access social media website
PFA of an error message .login-to-view

If you have MITM enabled, you need to install the CA certificate on the client machine. As E2 Guardian essentially breaks the HTTPS encryption.

ravegen · Jan 22, 2021, 6:44 AM

Is there a way to download the E2Guardian package and install it offline ?

La6er · Apr 30, 2021, 2:26 PM

Hi everyone, I am having an issue maybe some of you guys have faced this same behavior,
my e2g just randomy stopped listening to the config, if I change an IP on a group the change does not take effect, If I add a new site to an ACL it does not take effect, anyone with this kind of issue?

pfsensation · Apr 30, 2021, 3:18 PM

@la6er said in Unofficial E2guardian package for pfSense:

Hi everyone, I am having an issue maybe some of you guys have faced this same behavior,
my e2g just randomy stopped listening to the config, if I change an IP on a group the change does not take effect, If I add a new site to an ACL it does not take effect, anyone with this kind of issue?

Enable the soft restart option, press apply and see if that helps.

kenrutt · Apr 30, 2021, 5:40 PM

@la6er
It seems when making changes to an IP in a group. I need to stop E2G and restart under Status\Services. I have very little trouble with E2G stopping on me. In fact I do not even enable the watchdog feature. It just runs. It does take some tweeking when first setting up E2G. Make sure to go through the various lists and turn off or delete entries that reference any file that does not exist. I found it very helpful to SSH into router with WinSCP and modify some config files directly.

drmwndr · Jul 5, 2021, 12:27 PM

Hi all,
I'm using E2Guardian 5 from Unofficial Repository, not as transparent proxy and I'm getting some "The site requested does not exist" for simple local websites.
All filters were disabled, for tests.
Log error shows "2021.07.05 08:21:04 192.168.0.2 http://portal.mydomain.local 403 192.168.0.2 Default NETERROR Exceção do sítio confere. (Site on Exception list)"

The local site is working when accessed by Squid, or directly, does someone here have some idea of how to fix it? I was wondering if the problem is something DNS related but I can't find a way of how to force DNS servers on E2Guardian and taking a look at DNS logs, everything appears to be Ok.

Can someone help?

Thanks in advance.

pfsensation · Jul 5, 2021, 1:09 PM

@drmwndr said in Unofficial E2guardian package for pfSense:

Hi all,
I'm using E2Guardian 5 from Unofficial Repository, not as transparent proxy and I'm getting some "The site requested does not exist" for simple local websites.
All filters were disabled, for tests.
Log error shows "2021.07.05 08:21:04 192.168.0.2 http://portal.mydomain.local 403 192.168.0.2 Default NETERROR Exceção do sítio confere. (Site on Exception list)"

The local site is working when accessed by Squid, or directly, does someone here have some idea of how to fix it? I was wondering if the problem is something DNS related but I can't find a way of how to force DNS servers on E2Guardian and taking a look at DNS logs, everything appears to be Ok.

Can someone help?

Thanks in advance.

Definitely something to do with your DNS setup, are you using DNS resolver? I've got internal sites too and haven't run into any issues although I'm no longer using squid.

drmwndr · Jul 5, 2021, 1:11 PM

@pfsensation said in Unofficial E2guardian package for pfSense:

Definitely something to do with your DNS setup, are you using DNS resolver? I've got internal sites too and haven't run into any issues although I'm no longer using squid.

Hi @pfsensation. I have Bind installed on my pfsense box as DNS Server. I also have a NAT and a Firewall Rule redirecting all LAN1 Interface Traffic to port 53 to my pfSense box.
Is it necessary to enable and set pfSense DNS Resolver? Looks like e2guardian is bypassing this rule and looking directly on outside DNSs.

pfsensation · Jul 5, 2021, 1:20 PM

@drmwndr said in Unofficial E2guardian package for pfSense:

@pfsensation said in Unofficial E2guardian package for pfSense:

Definitely something to do with your DNS setup, are you using DNS resolver? I've got internal sites too and haven't run into any issues although I'm no longer using squid.

Hi @pfsensation. I have Bind installed on my pfsense box as DNS Server. I also have a NAT and a Firewall Rule redirecting all LAN1 Interface Traffic to port 53 to my pfSense box.
Is it necessary to enable and set pfSense DNS Resolver? Looks like e2guardian is bypassing this rule and looking directly on outside DNSs.

Unfortunately I don't use BIND either, but when you run nslookup on the client device, can it resolve your internal domains? Another gotcha is DNS over HTTPS/TLS, make sure that's disabled in the browser and lock down port 853 from LAN1.