shalla list off

ENC

@emanuelgaio
I'm researching a good quality "blacklist" too, if you find any good alternatives, share if you can. I'm from Brazil, excuse the bad english.

JonathanLee

@emanuelgaio I would also like to know if there is a replacement list.

https://forum.netgate.com/topic/169408/shalla-urlblacklist-for-squidguard-service-has-been-stopped/2

emanuelgaio

@enc Good afternoon my friend.
I found this site in it has several lists, I tested the "blacklists_for_pfsense.tar.gz"
Full download link: http://dsi.ut-capitole.fr/blacklists/download/blacklists_for_pfsense.tar.gz
Hope this helps.

netblues

How do we add a new category feed then?

emanuelgaio

@netblues I don't know how to insert new category. This other list has some similar to shallist. I'm testing too.
http://dsi.ut-capitole.fr/blacklists/download/blacklists_for_dansguardian.tar.gz

ENC

@netblues In Squid: Services/Squidguard proxy filter/Target Categories/Add. Then choose a name and place the domains or links.

netblues

I was looking for the pfblockerng entry :)

sebden

Anyone else have the Squidguard running wild since using the capitole list?

After one update of the new list, the squidguard starts around 20-24 processes and the UI runs slow to almost unusable. I have 3 Boxes testet and 2 are unable to use the list. Happens with pf 2.5.2 and after update to 2.6.0 too.

Are there other trustfull lists out there for testing?

JonathanLee

@sebden someone just recommended this list

http://dsi.ut-capitole.fr/blacklists/download/blacklists_for_pfsense_reducted.tar.gz

Waqar.UK

@jonathanlee

Anyone tried this link?

JonathanLee

@waqar-uk Not me want to test it out first???? Please??? I do not want to reimage the firmware if it fails again.

Waqar.UK

@jonathanlee

I understand. Reinstalled ver 2.60 - to get a ZFS file system. Took about 10 minutes. Suricata and PfgBlocker next. So far so good.

Tried that link: got this message

Hmm. We’re having trouble finding that site.

We can’t connect to the server at dsi.ut-capitole.fr.

JonathanLee

@waqar-uk Dang The original version I used I had to reimage after it installed it broke my system. I got this link from someone else I have not tested it yet because its exam week

stephenw10

@jonathanlee said in shalla list off:

http://dsi.ut-capitole.fr/blacklists/download/blacklists_for_pfsense_reducted.tar.gz

The file downloads fine for me. I haven't tried it in Squid.

Waqar.UK

@stephenw10 said in shalla list off:

http://dsi.ut-capitole.fr/blacklists/download/blacklists_for_pfsense_reducted.tar.gz

Now it works for me. I wonder why before it did not?

Does it work in Suricata?

JonathanLee

@waqar-uk

This works!!!
I just tested this after the summer semester has been completed!!

(Image: Blacklist loading)

(Image: Blacklist Loaded)

(Image: SquidGuard Catagories restored

nimrod

@jonathanlee said in shalla list off:

@waqar-uk

This works!!!
I just tested this after the summer semester has been completed!!

(Image: Blacklist loading)

(Image: Blacklist Loaded)

(Image: SquidGuard Catagories restored

UT1 is not working in pfBlockerNG because its using this link:

 ftp://ftp.ut-capitole.fr/pub/reseau/cache/squidguard_contrib/blacklists.tar.gz

First i thought its the issue with pfBlockerNG, but if i try to manually download this file from my desktop machine by using wget, this is what i get:

 wget ftp://ftp.ut-capitole.fr/pub/reseau/cache/squidguard_contrib/blacklists.tar.gz
--2022-08-03 20:27:53--  ftp://ftp.ut-capitole.fr/pub/reseau/cache/squidguard_contrib/blacklists.tar.gz
           => ‘blacklists.tar.gz’
Resolving ftp.ut-capitole.fr (ftp.ut-capitole.fr)... 193.49.48.249
Connecting to ftp.ut-capitole.fr (ftp.ut-capitole.fr)|193.49.48.249|:21... connected.
Logging in as anonymous ... Logged in!
==> SYST ... done.    ==> PWD ... done.
==> TYPE I ... done.  ==> CWD (1) /pub/reseau/cache/squidguard_contrib ... done.
==> SIZE blacklists.tar.gz ... 30615325
==> PASV ...

And thats where its stuck. I edited /usr/local/pkg/pfblockerng/ut1_global_usage and changed the link to point to

https://dsi.ut-capitole.fr/blacklists/download/blacklists.tar.gz

It gets downloaded without any issues, but it fails to install. I downloaded blacklists.tar.gz manually and unpacked it with tar, and there is another tar archive inside. pfBlockerNG extracts the content of the archive and expects folders containing category lists, but instead, its just another archive and thats where it fails.

I can extract the initial archive, and upload extracted tar file somewhere else, and update the link in ut1_global_usage file, and that works. But that needs to be done very time there is a update.

Is it safe to say that both Shallalist and UT1 are dead on pfBlockerNG ?

JonathanLee

@nimrod http://dsi.ut-capitole.fr/blacklists/download/blacklists_for_pfsense_reducted.tar.gz

Try this it works for me and I have lists again inside of squid guard. The website has support I have emailed to have URLs added and they add them also.

This was the same issue I had it would download and not install, this list works it ends with reducted. Yes shalla list is gone, I wanted to save the last list that was available but I didn't get to in time.

Squidguard is different than PfblockerNG

nimrod

@jonathanlee said in shalla list off:

@nimrod http://dsi.ut-capitole.fr/blacklists/download/blacklists_for_pfsense_reducted.tar.gz

Try this it works for me and I have lists again inside of squid guard. The website has support I have emailed to have URLs added and they add them also.

This was the same issue I had it would download and not install, this list works it ends with reducted. Yes shalla list is gone, I wanted to save the last list that was available but I didn't get to in time.

Squidguard is different than PfblockerNG

I know.

But i dont use Squidguard. I use pfBlockerNG. And these lists are not working in pfBlockerNG. That was the whole pont of my post.

JonathanLee

@nimrod this list states PfSense