Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Squidguard configuration problem?

    Scheduled Pinned Locked Moved pfSense Packages
    3 Posts 2 Posters 1.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T Offline
      trinli
      last edited by

      I have squid, havp, squidguard installed.  But, I noticed that it looked like squidguard isn't blocking anything.  So, I set up a test.  Also, I temporarily disabled HAVP.  Squid is set up as transparent.

      
      The squid log shows access to these websites:
      1245418446.842    132 192.168.1.2 TCP_MISS/304 380 GET http://www.wikipedia.org/ - DIRECT/208.80.152.2 text/html
      
      From: squidGuard.conf:
      
      src testblock {
      ip 192.168.1.0/24
      log block.log
      }
      # test
      dest test {
      domainlist test/domains
      redirect https://192.168.1.1:80/sgerror.php?url=403%20ERROR%3A%20redirected&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u
      log block.log
      }
      acl {
      # test block
      testblock {
      pass !in-addr all
      redirect https://192.168.1.1:80/sgerror.php?url=403%20ERROR&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u
      log block.log
      }
      
      squid.conf:
      redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf
      redirector_bypass on
      redirect_children 3
      # Default block all to be sure
      http_access deny all
      
      from /var/db/squidGuard/test/domains:
      wikipedia.org
      newegg.com
      
      

      Is there something I'm overlooking or have configured incorrectly?

      1 Reply Last reply Reply Quote 0
      • D Offline
        dvserg
        last edited by

        squidGuard config not full - pls post full config
        And
        testblock {
        pass !in-addr all << pass all, exclude numeric IP's

        Check SG - how and where you wand block.

        SquidGuardDoc EN  RU Tutorial
        Localization ru_PFSense

        1 Reply Last reply Reply Quote 0
        • T Offline
          trinli
          last edited by

          Actually, I think I found the problem.  I had been choosing deny for test in the "overtime" column, and time was not defined.  This might have just been user error.  If I have more problems, I'll post.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.