• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Proxy server - access control - blacklist problem

Scheduled Pinned Locked Moved pfSense Packages
18 Posts 5 Posters 17.5k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • D
    dvserg
    last edited by Nov 7, 2008, 2:20 PM

    Why you not use "Destinations" in SquidGuard ?
    Possible define self destinations and allow/deny this too.

    SquidGuardDoc EN  RU Tutorial
    Localization ru_PFSense

    1 Reply Last reply Reply Quote 0
    • J
      josey
      last edited by Nov 7, 2008, 6:32 PM

      hm, dont know didnt even think about that, and now try and it can block

      but this with blacklist worked in 1.2 alpha versions

      1 Reply Last reply Reply Quote 0
      • J
        josey
        last edited by Nov 10, 2008, 7:04 AM

        @dvserg:

        Why you not use "Destinations" in SquidGuard ?
        Possible define self destinations and allow/deny this too.

        nope, not working.

        tryed and nothing, want block added domains, and to be even more bad, blacklist seems to stop working …

        1 Reply Last reply Reply Quote 0
        • D
          dvserg
          last edited by Nov 10, 2008, 10:28 AM

          @josey:

          blacklist seems to stop working

          Possible view errors. logs. messages ?

          SquidGuardDoc EN  RU Tutorial
          Localization ru_PFSense

          1 Reply Last reply Reply Quote 0
          • J
            josey
            last edited by Nov 10, 2008, 1:17 PM

            nope, nothing in log, no errors, proxy just stop to block ???
            i think i can try to reinstall PFS from start, but i have already done that, and same thing…

            1 Reply Last reply Reply Quote 0
            • D
              dvserg
              last edited by Nov 10, 2008, 1:44 PM

              @josey:

              nope, nothing in log, no errors, proxy just stop to block ???
              i think i can try to reinstall PFS from start, but i have already done that, and same thing…

              Can you call from putty

              /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf -d

              Must be 3 last lines

              2008-11-10 16:42:37 [80344] squidGuard 1.2.0 started (1226324557.820)
              2008-11-10 16:42:37 [80344] recalculating alarm in 1043 seconds
              2008-11-10 16:42:37 [80344] squidGuard ready for requests (1226324557.980)

              SquidGuardDoc EN  RU Tutorial
              Localization ru_PFSense

              1 Reply Last reply Reply Quote 0
              • J
                josey
                last edited by Nov 11, 2008, 7:23 AM

                hm, yes it is started …
                nothing, it seems that i must accept that this cant work...

                1 Reply Last reply Reply Quote 0
                • D
                  dvserg
                  last edited by Nov 11, 2008, 8:47 AM

                  @josey:

                  hm, yes it is started …
                  nothing, it seems that i must accept that this cant work...

                  Sorry my question.
                  You say 'this cant work' - this is mean: squid not worked OR not filter sites?
                  What you squid/squidGuard services state?  Started or NO ?

                  SquidGuardDoc EN  RU Tutorial
                  Localization ru_PFSense

                  1 Reply Last reply Reply Quote 0
                  • J
                    josey
                    last edited by Nov 13, 2008, 7:17 AM

                    im talking about squid which works great (sometimes stops to block but reboot fix things) and manually entered domains to black list which are not blocked by squid…

                    here whatever i add on this page it wont work ...

                    and when i add here squid stops to block, but service is running…

                    1 Reply Last reply Reply Quote 0
                    • D
                      dvserg
                      last edited by Nov 13, 2008, 7:50 AM

                      I do, how you say

                      • adding site to squid blacklist
                      • create (only!)  squidGuard Dest item with this site

                      Result - all success blocked

                      SquidGuardDoc EN  RU Tutorial
                      Localization ru_PFSense

                      1 Reply Last reply Reply Quote 0
                      • F
                        fribert
                        last edited by Nov 13, 2008, 8:22 AM

                        I've defined my own destinations here as well, no problem.
                        Created destination with my own URL's listed

                        Under default blocked the destination
                        Under specific ACL's blocked the destination

                        Works like a charm.

                        The blacklist URL is for downloading a blacklist from a publisher.

                        1 Reply Last reply Reply Quote 0
                        • J
                          josey
                          last edited by Nov 13, 2008, 12:02 PM

                          ok then,
                          please put print screen of your configuration, and put, uumm,,,

                          www.google.com to blacklist

                          thanks

                          1 Reply Last reply Reply Quote 0
                          • P
                            phantom_cod3r
                            last edited by Jun 4, 2009, 5:04 PM

                            Hello,

                            I'm having the same issue with Squid; where the black list is not working. I have set "www.google.com" into the black list, and ALL" web traffic gets blocked by Squid even browsing to the GUI itself of PFsense "Localhost" gets blocked, even though I have checked the bypass proxy for local addresses.

                            I also tested this on the latest platform on PFsense "pfSense 1.2.3-RC1" and the Squid is worst on this one, the tabs are no longer present, there are drop down menus; which are not working on Internet Explorer only on firefox, in addition to the black list not working.  ???

                            Attached you will find the info of my platform and tests performed. Any help would be appreciated. Thanks!

                            untitled1.JPG
                            untitled1.JPG_thumb
                            untitled.JPG
                            untitled.JPG_thumb
                            untitled_config.JPG
                            untitled_config.JPG_thumb
                            untitled_version.JPG
                            untitled_version.JPG_thumb
                            untitled_version_pkg.JPG
                            untitled_version_pkg.JPG_thumb

                            1 Reply Last reply Reply Quote 0
                            • C
                              chudy
                              last edited by Jun 7, 2009, 3:06 PM Jun 7, 2009, 12:19 PM

                              you can always use the Custom Options under General Settings of Proxy Server:
                              for sample sites: www.youporn.com www.pornhub.com

                              acl blocksite url_regex youporn pornhub; http_access deny blocksite
                              ```this will only blocked if squid sees in URL youporn or pornhub now what if client will ping youporn.com and use the ip addess in exchange of domain name(youporn.com)…
                              then use dstdom_regex. But its slower than url_regex.
                              

                              acl blocksite dstdom_regex youporn pornhub; http_access deny blocksite

                              
                              now its up to you to decide. ;)
                              
                              This problem is just in GUI but squid 2.6 will always work as it should be. For more info about acl and http_access deny visit the wiki page of www.squid-cache.org
                              
                              In black list have you tried```
                              google;youporn;pornhub
                              ```it should be with ;
                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                [[user:consent.lead]]
                                [[user:consent.not_received]]