Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Proxy server - access control - blacklist problem

    pfSense Packages
    5
    18
    17.5k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      josey
      last edited by

      nope, nothing in log, no errors, proxy just stop to block ???
      i think i can try to reinstall PFS from start, but i have already done that, and same thing…

      1 Reply Last reply Reply Quote 0
      • D
        dvserg
        last edited by

        @josey:

        nope, nothing in log, no errors, proxy just stop to block ???
        i think i can try to reinstall PFS from start, but i have already done that, and same thing…

        Can you call from putty

        /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf -d

        Must be 3 last lines

        2008-11-10 16:42:37 [80344] squidGuard 1.2.0 started (1226324557.820)
        2008-11-10 16:42:37 [80344] recalculating alarm in 1043 seconds
        2008-11-10 16:42:37 [80344] squidGuard ready for requests (1226324557.980)

        SquidGuardDoc EN  RU Tutorial
        Localization ru_PFSense

        1 Reply Last reply Reply Quote 0
        • J
          josey
          last edited by

          hm, yes it is started …
          nothing, it seems that i must accept that this cant work...

          1 Reply Last reply Reply Quote 0
          • D
            dvserg
            last edited by

            @josey:

            hm, yes it is started …
            nothing, it seems that i must accept that this cant work...

            Sorry my question.
            You say 'this cant work' - this is mean: squid not worked OR not filter sites?
            What you squid/squidGuard services state?  Started or NO ?

            SquidGuardDoc EN  RU Tutorial
            Localization ru_PFSense

            1 Reply Last reply Reply Quote 0
            • J
              josey
              last edited by

              im talking about squid which works great (sometimes stops to block but reboot fix things) and manually entered domains to black list which are not blocked by squid…

              here whatever i add on this page it wont work ...

              and when i add here squid stops to block, but service is running…

              1 Reply Last reply Reply Quote 0
              • D
                dvserg
                last edited by

                I do, how you say

                • adding site to squid blacklist
                • create (only!)  squidGuard Dest item with this site

                Result - all success blocked

                SquidGuardDoc EN  RU Tutorial
                Localization ru_PFSense

                1 Reply Last reply Reply Quote 0
                • F
                  fribert
                  last edited by

                  I've defined my own destinations here as well, no problem.
                  Created destination with my own URL's listed

                  Under default blocked the destination
                  Under specific ACL's blocked the destination

                  Works like a charm.

                  The blacklist URL is for downloading a blacklist from a publisher.

                  1 Reply Last reply Reply Quote 0
                  • J
                    josey
                    last edited by

                    ok then,
                    please put print screen of your configuration, and put, uumm,,,

                    www.google.com to blacklist

                    thanks

                    1 Reply Last reply Reply Quote 0
                    • P
                      phantom_cod3r
                      last edited by

                      Hello,

                      I'm having the same issue with Squid; where the black list is not working. I have set "www.google.com" into the black list, and ALL" web traffic gets blocked by Squid even browsing to the GUI itself of PFsense "Localhost" gets blocked, even though I have checked the bypass proxy for local addresses.

                      I also tested this on the latest platform on PFsense "pfSense 1.2.3-RC1" and the Squid is worst on this one, the tabs are no longer present, there are drop down menus; which are not working on Internet Explorer only on firefox, in addition to the black list not working.  ???

                      Attached you will find the info of my platform and tests performed. Any help would be appreciated. Thanks!

                      untitled1.JPG
                      untitled1.JPG_thumb
                      untitled.JPG
                      untitled.JPG_thumb
                      untitled_config.JPG
                      untitled_config.JPG_thumb
                      untitled_version.JPG
                      untitled_version.JPG_thumb
                      untitled_version_pkg.JPG
                      untitled_version_pkg.JPG_thumb

                      1 Reply Last reply Reply Quote 0
                      • C
                        chudy
                        last edited by

                        you can always use the Custom Options under General Settings of Proxy Server:
                        for sample sites: www.youporn.com www.pornhub.com

                        acl blocksite url_regex youporn pornhub; http_access deny blocksite
                        ```this will only blocked if squid sees in URL youporn or pornhub now what if client will ping youporn.com and use the ip addess in exchange of domain name(youporn.com)…
                        then use dstdom_regex. But its slower than url_regex.
                        

                        acl blocksite dstdom_regex youporn pornhub; http_access deny blocksite

                        
                        now its up to you to decide. ;)
                        
                        This problem is just in GUI but squid 2.6 will always work as it should be. For more info about acl and http_access deny visit the wiki page of www.squid-cache.org
                        
                        In black list have you tried```
                        google;youporn;pornhub
                        ```it should be with ;
                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.