Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Unofficial E2guardian package for pfSense

    Scheduled Pinned Locked Moved
    Cache/Proxy
    70
    1.2k
    1.2m
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      pfsensation @kenrutt
      last edited by pfsensation

      @kenrutt said in Unofficial E2guardian package for pfSense:

      @pfsensation said in Unofficial E2guardian package for pfSense:

      I use both source and destination bypass. All work perfectly fine for me. I'm using it through Alias to keep things clean.

      Do are you talking about the bypass ip's? I was asking about the bypass on the block page when pressing the "Acknowledge".

      Ohh, I was referring to the IP's bit. I couldn't get that working either and didn't have time to investigate. Naturally, forgot. :(

      I did go as far as to debugging my own code on the block page and making sure that the "Acknowledge" does generate a bypass key. But the key doesn't appear to work when used. Strange. It will need more digging.

      Definitely an issue with the back end bypass code.

      1 Reply Last reply Reply Quote 0
      • K
        kenrutt
        last edited by

        @pfsensation said in Unofficial E2guardian package for pfSense:

        Ohh, I was referring to the IP's bit. I couldn't get that working either and didn't have time to investigate. Naturally, forgot. :(
        I did go as far as to debugging my own code on the block page and making sure that the "Acknowledge" does generate a bypass key. But the key doesn't appear to work when used. Strange. It will need more digging.
        Definitely an issue with the back end bypass code.

        Ok. Hey if you figure something out keep me posted.
        Thanks a bunch.

        1 Reply Last reply Reply Quote 0
        • A
          abhijitmore007
          last edited by

          How to configure mitm with pfsense please help me

          K 1 Reply Last reply Reply Quote 0
          • K
            kenrutt @abhijitmore007
            last edited by

            @abhijitmore007 Under "Daemon" tab make sure "Check to enable E2guardian SSL interception" is checked and make sure Cert is selected. Then under the groups tab in group options select and highlight "Filter ssl sites forging SSL Certificates (off)".

            A 3 Replies Last reply Reply Quote 0
            • A
              abhijitmore007
              last edited by

              Can you provide step by step configuration

              1 Reply Last reply Reply Quote 0
              • A
                abhijitmore007 @kenrutt
                last edited by

                @kenrutt I am using pfsens 2.4.4 and squid with e2d for filtering but squid not integrated with e2d for ssl cert. there is no need of squid for ssl filtering

                1 Reply Last reply Reply Quote 0
                • H
                  heloplus
                  last edited by

                  I've updated the install code to use version 3.5.1 and ssl interception.
                  Motivational Quotes in Hindi

                  1 Reply Last reply Reply Quote 0
                  • A
                    abhijitmore007 @kenrutt
                    last edited by

                    @kenrutt thank you problem resloved
                    now https filter is working

                    1 Reply Last reply Reply Quote 0
                    • A
                      abhijitmore007 @kenrutt
                      last edited by

                      @kenrutt some site get error
                      3e27802d-5e7f-4ac2-92dc-2037bbd5a4c0-image.png

                      J P 2 Replies Last reply Reply Quote 0
                      • J
                        jetberrocal @abhijitmore007
                        last edited by

                        @abhijitmore007
                        The error maybe this site requires a secure connection. mitm is a man in the middle attack and will fail with such sites. Yo may need to create an exception rule with a list for those sites to not use mitm. You still can filter the sites but not filter/read the content.

                        1 Reply Last reply Reply Quote 0
                        • P
                          pfsensation @abhijitmore007
                          last edited by pfsensation

                          @abhijitmore007 said in Unofficial E2guardian package for pfSense:

                          @kenrutt some site get error
                          3e27802d-5e7f-4ac2-92dc-2037bbd5a4c0-image.png

                          I stopped using squid due to problems, try with direct mode without squid. I pretty much have no problems with any site via the browser. The apps I have issues with I have made exceptions for.

                          K 1 Reply Last reply Reply Quote 0
                          • K
                            kenrutt @pfsensation
                            last edited by

                            @pfsensation My experience has been the same. With e2guardian in direct mode things work fairly well. Only a few things I needed to bypass.

                            P 1 Reply Last reply Reply Quote 1
                            • P
                              pfsensation @kenrutt
                              last edited by

                              @kenrutt said in Unofficial E2guardian package for pfSense:

                              @pfsensation My experience has been the same. With e2guardian in direct mode things work fairly well. Only a few things I needed to bypass.

                              Yeah, I gave up trying to use Squid. The current implementation wasn't worth my time anyways, since HTTPS content that E2 Guardian decrypts and sees wasn't being added to Squid cache. Furthermore, I noticed a speed improvement when bypassing squid in the setup, the Squid in pfsense is an older version (although I think Marcelloc has a newer one in his repo).

                              I also had other issues with Squid, such as not generating fake certs properly (when using the SSL intercept feature). The certs didn't have a Subject alternative name which caused a tonne of sites and stuff to fail.

                              On top of that, nowadays browsers do a really good job of caching things locally. The benefits have become quite minimal, unless your bandwidth is completely trash and you have users visiting the same content over and over.

                              If @marcelloc has a newer version of Squid, that doesn't have the certs issue and slow down issue. I may give it a shot when I have time. But so far I'm pretty content with E2 Guardian, I'm using it at home with no issues. Only thing missing is an updated word list and a good blacklist that's maintained well.

                              1 Reply Last reply Reply Quote 0
                              • A
                                abhijitmore007
                                last edited by

                                There is one more issue when how to configure e2g for ad authentication??
                                i am configure squid for that but when we allow in e2g transparent proxy there is error occurs Proxy authentication error......

                                1 Reply Last reply Reply Quote 0
                                • R
                                  ravegen
                                  last edited by ravegen

                                  Good day Marcelloc,

                                  E2Guardian has antivirus feature. I just want to ask, how do you know or check that the antivirus is running and if the antivirus is up to date ?

                                  In E2Guardian, you can setup the frequency on updating blacklist url.

                                  Can you possibly add feature to check if the antivirus service is running and can be started or restarted and updated. I don't know if it make sense because I dont know how you program how it works.

                                  I just really want to know if the antivirus service is running and if it is up to date.

                                  1 Reply Last reply Reply Quote 0
                                  • G
                                    genesislubrigas
                                    last edited by

                                    I found out that clamd is not starting when e2guardian is stopped and restarted.

                                    What can be done about this ? Can we do our own adjustment somewhere ?

                                    1 Reply Last reply Reply Quote 0
                                    • A
                                      abhijitmore007
                                      last edited by abhijitmore007

                                      after implantation https filter I want to filter search keyword filter but Google search keyword filter not working
                                      Add keyword in phases but client not block by keyword

                                      1 Reply Last reply Reply Quote 0
                                      • U
                                        ugurk.
                                        last edited by

                                        hello,

                                        i cant block youtube mobile (android or ios applications). e2guardian blocks youtube at pc but on the phones it cant block. any ideas?

                                        C K 2 Replies Last reply Reply Quote 0
                                        • C
                                          cova16 @ugurk.
                                          last edited by

                                          @ugurk Hi. In squidguard I made a category that I called videos, there I put all these domains that contain videos, so I block almost everything and every day I add other domains:
                                          dailymotion.com googlevideo.com i.ytimg.com m.youtube.com metacafe.com netflix.com nflxvideo.net screen.yahoo.com skype.com vimeo.com vine.co 3r2---sn-j5caxupj5-nwvl.googlevideo.com r1---sn-5hoxuj5cax-wv6.googlevideo.com r1---sn-hp57kn6l.googlevideo.com r1---sn-hp57knsl.googlevideo.com r1---sn-hp57yn7y.googlevideo.com r1---sn-hp57yne7.googlevideo.com r1---sn-hp57ynes.googlevideo.com r1---sn-j5caxupj5-nwve.googlevideo.com r1---sn-j5caxupj5-nwvl.googlevideo.com r2---sn-5hoxuj5cax-nwv6.googlevideo.com r2---sn-hp57kn7z.googlevideo.com r2---sn-hp57knlr.googlevideo.com r2---sn-hp57knzz.googlevideo.com r2---sn-hp57yne6.googlevideo.com r2---sn-hp57ynee.googlevideo.com r2---sn-hp57ynez.googlevideo.com r2---sn-j5caxupj5-nwve.googlevideo.com r2---sn-q4f7sn7k.googlevideo.com r3---sn-5hoxuj5cax-nwv6.googlevideo.com r3---sn-hp57kn7s.googlevideo.com r3---sn-j5caxupj5-nwve.googlevideo.com r3---sn-j5caxupj5-nwvl.googlevideo.com r4---sn-5hoxuj5cax-nwv6.googlevideo.com r4---sn-j5caxupj5-nwve.googlevideo.com r4---sn-j5caxupj5-nwvl.googlevideo.com r5---sn-hp57knls.googlevideo.com r5---sn-hp57ynez.googlevideo.com r5---sn-j5caxupj5-nwve.googlevideo.com r5---sn-j5caxupj5-nwvl.googlevideo.com r6---sn-hp57kn7l.googlevideo.com r6---sn-hp57knz6.googlevideo.com
                                          Buena suerte

                                          U 1 Reply Last reply Reply Quote 0
                                          • U
                                            ugurk. @cova16
                                            last edited by

                                            @cova16 ty for response. ill try it asap

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post