SquidGuard Default Blacklist SafeSearch settings and Shallalist

BobFather

I have already reinstalled the package to get the search filtering back.
Was wondering how to "include" the search filtering in a more advanced list.
Or is there already a list out there that includes the default "safesearch" features?

dvserg

Shallalist Blacklist have searchengines option

BobFather

Yes but I can only set it to Allow or Deny.
I don't want to shut the search engine down, just control it.
Somehow the Default Settings before loading a blacklist (have tried Shallalist and several others)
Rewrite the search URL so the search engines run in SafeSearch mode and also seem to filter the Search Expresions directly. I would like to include this WITH a blacklist.

Have been researching and I think there might be a rewrite rule I can setup under SquidGuard to modify the URL's, but crashed my pfSense box trying to see what would work. Just finished reloading and restoring my backup.

Thanks for any help or ideas you may have.

BobFather

I just blew up my install again.
I am trying to use the Rewrite Rules under SquidGuard to modify the URL's of the searches to include SafeSearch paramagers.

I found these on one of my searches:
s@(google../search?.q=.)@\1&safe=active@i
s@(google../images.q=.)@\1&safe=active@i
s@(google../groups.q=.)@\1&safe=active@i
s@(google../news.q=.)@\1&safe=active@i

but taking the "(google..*/search?.q=.)" as the original match
and using "\1&safe=active" as the modification
is causing my pfSense to crash.

Is this the way to do what I want, or is there another way?
I know on the SquidGuard sight it talks about modifying the configuration file to include customizations,
but I am not familar with what file to modify or where to change it.

dvserg

@BobFather:

I just blew up my install again.
I am trying to use the Rewrite Rules under SquidGuard to modify the URL's of the searches to include SafeSearch paramagers.

I found these on one of my searches:
s@(google../search?.q=.)@\1&safe=active@i
s@(google../images.q=.)@\1&safe=active@i
s@(google../groups.q=.)@\1&safe=active@i
s@(google../news.q=.)@\1&safe=active@i

but taking the "(google..*/search?.q=.)" as the original match
and using "\1&safe=active" as the modification
is causing my pfSense to crash.

Is this the way to do what I want, or is there another way?
I know on the SquidGuard sight it talks about modifying the configuration file to include customizations,
but I am not familar with what file to modify or where to change it.

Use 'Rewrite' item for define Google safe search rule
Example:
Item s@(google../search?.q=.)@\1&safe=active@i
Must be added as
Target URL = (google../search?.q=.)
Replace To URL = \1&safe=active

And etc…

BobFather

I have already tried using a rewrite item to do this twice.
Target URL = (google..*/search?.q=.)
Replace To URL = \1&safe=active

Doing this caused something in the configuration to go bad and pfSense started acting like it was just installed.
Installed Packages disapeared, pfSense DropDown GUI reverted to default pfSense GUI, then it just quit working.

Restore of backup wouldn't run, so I reloaded from CD and restored.

I thought I had done something wrong, so tried again and got same results.

Are you positive this should work?
I can try again, but expect to have to reload if the results come out the same as the last 2 times.

I do appreciate the help.
Have everything else working by using Shallalist and Expression Rules.
This would be the "Icing on the cake".

Thanks

choup

I seem to have run into this same Google SafeSearch problem. I have implemented SquidGuard on a regular school K12LTSP server and this works perfectly.

It seems that there is something in the pfSense configuration file that is awry.

using rewrite item:
Target URL = (google..*/search?.q=.)
Replace To URL = \1&safe=active

Causes the system to lose its configuration? To my way of thinking, this sure seems like a bug in how pfSense handles data input in this area.

Has anyone found a fix/workaround for the Google SafeSearch?

Charlie

dvserg

http://forum.pfsense.org/index.php/topic,13074.0.html

choup

DVSERG

Looked at the link you provided, don't know how that resolves the problem, because it is still not working.

I have installed pfSense v1.2.2, reinstalled squid and squidguard packages, installed blacklists, and checked to make sure squidguard was working correctly.

However, once you try to add the rewrite info for Google SafeSearch it blows out, defaults to different web admin theme, loses all package settings and base configuration. Cannot re-load from backups either. If you close and reopen the browser, it won't even let you access the web console.

The only way you're going to see this problem and understand it is for you to try doing it on a system.

Your response to BobFather is the same one I'm trying and it's not working.

"Use 'Rewrite' item for define Google safe search rule"
Example:
Item s@(google../search?.q=.)@\1&safe=active@i
Must be added as
Target URL = (google../search?.q=.)
Replace To URL = \1&safe=active

Thanks for the feedback.

Charlie

dvserg

Looked at the link you provided, don't know how that resolves the problem, because it is still not working.

Exists package manager bug with 'rowhelper' field and \1 \2 \x codes - config will crashed
Neet fix this bug.

choup

Thanks again for the response DVSERG.

Hopefully this bug will get fixed soon, otherwise pfSense is really not usable in an educational environment due to not being able to properly block unwanted content.

Charlie

dvserg

SquidGuard safesearch Google and Yandex(ru/com) update. ! For test ONLY, Not for worked systems !

download 'http://diskatel.narod.ru/pfSense/packages/squidguard_safesearch.zip'
unpack to '/usr/local/pkg'

Changes:

ACL: order
ACL/Default: rewrite
– added sys rewrite 'safesrch_google'

Please test..

dvserg

Any body interested this? ???

choup

You the man! I've been testing the proxy and web filter most of the evening and everything seems to be working like it needs to.

I had a little trouble figuring out how to enable the safesrch_google rewrite, but finally did. The Google SafeSearch appears to be working perfectly as I tried numerous searches for various content.

I now feel a lot more comfortable putting this in an educational environment.

Thank you very much for your hard work here, it is very much appreciated!

Thanks again,

Charlie

dvserg

I want add more search engines what support safesearch.
Any body know, what engines (exclude Google) do it ?

jsg

I am highly interested by this and downloaded the file.
But I need first to make a backup of my pfsense box to try it.

jsg

Hi, I found this : http://www.safesearchlive.com/
They have a list of search engines (some of them is first time I hear about…)

dvserg

@jsg:

Hi, I found this : http://www.safesearchlive.com/
They have a list of search engines (some of them is first time I hear about…)

Thanks

jsg

I just tried your add but I can't get it working.
Do I only have to select the 'rewrite' to google in the default tab and tehn apply to activate Google safe search?
Looking at the log , it looks to be enable:
default {
pass !in-addr !blk_BL_aggressive !blk_BL_dating !blk_BL_downloads !blk_BL_drugs !blk_BL_hacking !blk_BL_porn !blk_BL_sex_lingerie !blk_BL_spyware !blk_BL_tracker !blk_BL_violence !blk_BL_warez !blk_BL_weapons all
redirect 301:http://192.168.1.1:8000/captiveportal-contenu.html
rewrite safesrch_google
log block.log
}

But if I put 'porn' in the search box, I am given a long choice of site. If I happen manually safe=active to the URL , this activate the safesearch thought…

Thanks

jsg

I have played a bit with the regexp string and it looks like either:

squidguard doesn't recognise goole string
squid doesn't use squidguard rewritten url

I also found this:

02.02.2009 12:00:45 : sg_create_config: add rewrites:
success safesrch_google;
error
02.02.2009 12:00:45 : sg_create_config: add Default
02.02.2009 12:00:45 : sg_redirector_base_url: Select redirector base url (301:http://192.168.1.1:8000/captiveportal-contenu.html)
02.02.2009 12:00:45 : sg_reconfigure: save squidGuard config to '/usr/local/etc/squidGuard/squidGuard.conf'.
02.02.2009 12:00:45 : squid_reconfigure: Remove old redirector options from Squid config.
02.02.2009 12:00:45 : squid_reconfigure: Add new redirector options to Squid config.

But I do not know what is this error and where to look for. Other blocking (website) is correctly filtered and redirected to the 301 webpage.