Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    SquidGuard Blocked URL Bug

    pfSense Packages
    2
    4
    2.6k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • I
      itsmorefun
      last edited by

      Hello,
      In Squidguard, with "Use safe search engine" enabled, the SquidGuard "Blocked URL" log all google traffic…

      Exemple: (note: blk_blacklists_liste_bu is a witheliste)
      42  2009-03-02 11:07:16  192.168.254.254  http://clients1.google.com/complete/search?hl=fr&gl=fr&q=a  MGTPASS/blk_blacklists_liste_bu/safesearch  31012  GET
      43 2009-03-02 11:07:16 192.168.254.254 http://clients1.google.com/complete/search?hl=fr&gl=fr&q=an MGTPASS/blk_blacklists_liste_bu/safesearch 31012 GET
      44 2009-03-02 11:07:17 192.168.254.254 http://clients1.google.com/complete/search?hl=fr&gl=fr&q=ang MGTPASS/blk_blacklists_liste_bu/safesearch 31012 GET
      45 2009-03-02 11:07:17 192.168.254.254 http://clients1.google.com/complete/search?hl=fr&gl=fr&q=ange MGTPASS/blk_blacklists_liste_bu/safesearch 31012 GET
      46 2009-03-02 11:07:17 192.168.254.254 http://clients1.google.com/complete/search?hl=fr&gl=fr&q=anger MGTPASS/blk_blacklists_liste_bu/safesearch 31012 GET
      47 2009-03-02 11:07:17 192.168.254.254 http://clients1.google.com/complete/search?hl=fr&gl=fr&q=angers MGTPASS/blk_blacklists_liste_bu/safesearch 31012 GET
      48 2009-03-02 11:07:18 192.168.254.254 http://www.google.fr/search?hl=fr&q=angers&meta=&aq=f&oq= MGTPASS/blk_blacklists_liste_bu/safesearch 31012 GET
      49 2009-03-02 11:07:18 192.168.254.254 http://news.google.fr/news?hl=fr&q=angers&safe=active&um=1&ie=UTF-8&imgefp=YBCaTU
      rqMSYJ&imgurl=www.ouest-france.fr/of-photos/2009/03/01/09PDL_2439755_1_apx_470__w
      ouestfrance.jpg MGTPASS/blk_blacklists_liste_bu/safesearch 31012 GET

      54  2009-03-02 11:11:20  172.17.72.35  http://clients1.google.com/complete/search?hl=fr&gl=fr&q=or  default/blk_blacklists_liste_bu/safesearch  31012  GET
      55 2009-03-02 11:11:20 172.17.72.35 http://clients1.google.com/complete/search?hl=fr&gl=fr&q=oran default/blk_blacklists_liste_bu/safesearch 31012 GET
      56 2009-03-02 11:11:20 172.17.72.35 http://clients1.google.com/complete/search?hl=fr&gl=fr&q=orang default/blk_blacklists_liste_bu/safesearch 31012 GET
      57 2009-03-02 11:11:20 172.17.72.35 http://clients1.google.com/complete/search?hl=fr&gl=fr&q=orange default/blk_blacklists_liste_bu/safesearch 31012 GET
      58 2009-03-02 11:11:21 172.17.72.35 http://clients1.google.com/complete/search?hl=fr&gl=fr&q=orange. default/blk_blacklists_liste_bu/safesearch 31012 GET
      59 2009-03-02 11:11:21 172.17.72.35 http://clients1.google.com/complete/search?hl=fr&gl=fr&q=orange.fr default/blk_blacklists_liste_bu/safesearch 31012 GET
      60 2009-03-02 11:11:21 172.17.72.35 http://www.google.fr/search?hl=fr&q=orange.fr&meta=&aq=f&oq= default/blk_blacklists_liste_bu/safesearch 31012 GET

      because:
      rew safesearch {
      s@(google../search?.q=.)@\1&safe=active@i
      s@(google..
      /images.q=.)@\1&safe=active@i
      s@(google../groups.q=.)@\1&safe=active@i
      s@(google..
      /news.q=.)@\1&safe=active@i
      s@(yandex../yandsearch?.text=.)@\1&fyandex=1@i
      s@(search.yahoo..
      /search.p=.)@\1&vm=r@i
      s@(search.live../.q=.)@\1&adlt=strict@i
      s@(search.msn..
      /.q=.)@\1&adlt=strict@i
      log block.log
      }

      Please remove log block.log to safesearch rewrite rules.

      Thank in advance

      1 Reply Last reply Reply Quote 0
      • D
        dvserg
        last edited by

        Repleace pls
        /usr/local/pkg/squidGuard.inc [ln 1366]

        $res[F_LOG]         = 'on';

        with

        $res[F_LOG]         = 'off';

        SquidGuardDoc EN  RU Tutorial
        Localization ru_PFSense

        1 Reply Last reply Reply Quote 0
        • I
          itsmorefun
          last edited by

          not $res[F_LOG]        = 'off';

          but $res[F_LOG]        = '';

          ;)

          because in /usr/local/pkg/squidguard_configurator.inc :
          if ($rew[F_LOG])
                              $sg_tag->items[] = "log " . SQUIDGUARD_ACCESSBLOCK_FILE;

          Thank.  :)

          1 Reply Last reply Reply Quote 0
          • D
            dvserg
            last edited by

            @itsmorefun:

            not $res[F_LOG]         = 'off';

            but $res[F_LOG]         = '';

            ;)

            because in /usr/local/pkg/squidguard_configurator.inc :
            if ($rew[F_LOG])
                                $sg_tag->items[] = "log " . SQUIDGUARD_ACCESSBLOCK_FILE;

            Thank.  :)

            upsss Sorry my error.
            Thanks!

            SquidGuardDoc EN  RU Tutorial
            Localization ru_PFSense

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.