SquidGuard package TEST



  • Hi
    I found way for download my sources from public site.
    Near time i put all sources to my site and test this for installation.
    I must first repair my pfSense system  :-[
    After i put to this topic step-by-step instructions.

    Thanks.



  • 1. Need install local xml-rpc. How - pls looking for this topic
    http://forum.pfsense.org/index.php/topic,312.0.html
    2. Download pkg_config.xml for this package from
    http://diskatel.narod.ru/pfSense/packages/pkg_config.xml
    and put them to you xml-rpc. If all placed correct - in package list you looking one package -squidGuard
    3. Install this package.



  • Screenshots






  • Screenshots






  • This looks like an excellent package, but when I dloaded xmlrpc and then pointed my pf configs to the one specified, I didn't get anything showing up, is the location serving these up still online?  I read the notes on sullrich's post, but there is a good chance I could be doing something wrong since I don't know much about the packages system just yet.  Also the devoloper of this package would probably be very interested to know that there is a bounty posted for a content filtering packaged on an embedded system with a bounty of over $$1000 USD.  Granted of course that doing this on an embedded system is a bit trickier.  Here is the link to the post:
    http://forum.pfsense.org/index.php/topic,2703.0.html



  • @Justinw:

    This looks like an excellent package, but when I dloaded xmlrpc and then pointed my pf configs to the one specified, I didn't get anything showing up, is the location serving these up still online?  I read the notes on sullrich's post, but there is a good chance I could be doing something wrong since I don't know much about the packages system just yet.  Also the devoloper of this package would probably be very interested to know that there is a bounty posted for a content filtering packaged on an embedded system with a bounty of over $$1000 USD.  Granted of course that doing this on an embedded system is a bit trickier

    where x.x.x.x - you pfSense IP

    if all right, then in package list must be my package  :)



  • I may have given the wrong permissions, I'll try again when I have some time, thank you!



  • Sources returned to modification. I want change logic for more quickly work



  • i am testing your sources of squidguard.
    some points:
    1- need to add file squidguard_log.xml into your pkg_config.xml
    2- squidguard binary requires  "libdb3.so.3" to run properly
    3 - if you want a tester … i can do it



  • 1- need to add file squidguard_log.xml into your pkg_config.xml
    

    yes - fixed

    2- squidguard binary requires  "libdb3.so.3" to run properly
    

    must installed with squidGuard automaticly

    3 - if you want a tester ... i can do it 
    

    i will glad if you test this

    All changes will updated in near time (I posting this)
    Also will corrected some bugs



  • other little issues…
    change the name in pfsense services menu to other different of "proxy Server"  because is confusing to newbies.

    add new acl times is not working ?  i cant add time ranges

    apply new changes can be equal the pfsense add rule , it's too easy forgot to click that apply button in genreal settings tab.

    just a tought ... have the squid package installed together, with customized squid.conf and unified menus, look at squid config panels in pfsense has an options to acl, to blacklists, and an customized instalation can be more easy to maintain .



  • http://diskatel.narod.ru/squidguard/squidguard.zip  is not working .. was removed ? the site was in russian .. i cant understand …



  • @dhipo:

    http://diskatel.narod.ru/squidguard/squidguard.zip  is not working .. was removed ?

    Click on "save target as" does work however.



  • it's not working … i use wget .... and error 404 is file not found ....
    lucky!!



  • Hi all
    Sorry, now i can't update sources.
    Plz waite 1-2 day's -  i will repair this.
    Thanks



  • Yeah, you seem right. Sorry!
    I can DL the file but the zip archive is corrupt.

    Well, it just DLs the HTML page and saves it as the archive. Sorry for the confusion here!



  • This worked
    (1) http://diskatel.narod.ru/pfSense/packages/pkg_config.xml
    (2) http://diskatel.narod.ru/pfSense/packages/squidGuard-1.2.0_1.tbz
    but squidGuard-1.2.0_1.tbz need correct  - i tomorrow update
    Also you can prepare squidGuard-1.2.0_1.tbz file too - need unpack, remove squid from 'expected packages' list and pack to back.
    If take standart port from FreeBSD - this install latest version squid and system will have 2 squid versions (very bad  >:()
    Sorry

    ps You may need update only you local pkg_config.xml form  (1) source and all other's will downloaded and installed  automaticly.



  • When you are ready please send all of the needed bits to coreteam@pfsense.com and we will integrate this package into our master package area.



  • @sullrich:

    When you are ready please send all of the needed bits to coreteam@pfsense.com and we will integrate this package into our master package area.

    OK
    Now i catch bugs gui and fix specificity work SG.



  • Updated new _http://diskatel.narod.ru/pfSense/packages/squidGuard-1.2.0_1.tbz
    Now this package not need squid on installation (i remove this settings from this port)
    May be possible uninstall/reinstall squid without deinstallation squidGuard.
    –-----------------------------
    Updated new version sources files. I rebuild core gui for faster work.
    Plz anybody test new installation too.

    1\. Need install local xml-rpc. How - pls looking for this topic
    http://forum.pfsense.org/index.php/topic,312.0.html
    2\. Download pkg_config.xml for this package from
    http://diskatel.narod.ru/pfSense/packages/pkg_config.xml
    and put them to you xml-rpc. If all placed correct - in package list you looking one package -squidGuard
    3\. Install this package.
    


  • Found problems first installation

    • config not autocreate
    • blacklist not scanned&updated

    For fix - need in gui install (upload) blacklist and Apply changes
    PS i near time fix this problems for auto update on first installation



  • Ok
    Ready for test  ;)



  • i'm testing now …. instalations sounds good .. upload blacklist good.... interface good... some tip .... change the name on pfsense menu to other different of proxy server... hummm may be content filtering ….

    i still testing ....



  • when configuration was done on filter , the line of redirector appears on squid … right .. .good ...
    but the contents of  /usr/local/etc/squidGuard/squidGuard.conf are same on all situations ... no changes were made on file .... every time is look like this :

    more /usr/local/etc/squidGuard/squidGuard.conf

    ============================================================

    SquidGuard configuration file

    This file generated automaticly with SquidGuard configurator

    (C)2006 Serg Dvoriancev

    email: dv_serg@mail.ru

    ============================================================

    logdir /var/squidGuard/log
    dbhome /var/db/squidGuard

    acl {
            default {
                    pass none
                    redirect http://127.0.0.1/sgerror.php
            }
    }



  • i find the error ,
    when you define an time in acl , default or other acls , the config shows only that above squidguard.conf, if no time is used in acl ,,, evething is fine ,,



  • other typos

    when click save on squid properties, this remove the line of redirector on squid.conf, and the filter stops working …

    if you click the button start of squidguard in "Status > Services " menu , this hangs squid an stop then all.



  • Notation: If exists error in configuration data, Configurator maked small default config with DenyAll access. All error's posts in log on the firts page webGUI.
    This is default block config.

    # ============================================================
    # SquidGuard configuration file
    #
    # This file generated automaticly with SquidGuard configurator
    #
    # (C)2006 Serg Dvoriancev
    # email: dv_serg@mail.ru
    # ============================================================
    
    logdir /var/squidGuard/log
    dbhome /var/db/squidGuard
    
    acl {
             default {
                     pass none
                     redirect http://127.0.0.1/sgerror.php
             }
    }
    
    

    If You have this config - pleace looking Log on first page squidGuard gui (checkbox must be checked). Latest errors added when Apply button pressed

    ps I planing add 'ERROR config DATA' notification on first page .Thanks for you test - i will analyze bugs
    –---------------------------------
    BagBeer - beer for real programmer's



  • when click save on squid properties, this remove the line of redirector on squid.conf, and the filter stops working ...
    

    i know this problem, but temporary no see way to solve(only hack squid GUI src :( ).
    Now after change squid config need press Apply button in squidGuard gui. This renew all config's.

    if you click the button start of squidguard in "Status > Services " menu , this hangs squid an stop then all.
    

    OK, thanks



  • just an idea …. why don't you install squid togheter with squidguard, an proxy complete solution with filtering, and people can decide if they want only a proxy , they use squid or if want content filtreing proxy they will use your package ...

    i am running on a new trouble ....

    the message says

    The url_rewriter helpers are crashing too rapidly, need help!

    and squid crash ...

    and idea ?



  • Need Log list, SG config and more information about
    (log - from 1 page SG gui)

    PS How you name of package 'Proxy Content filter'?
    Word 'proxy' must exists in name, what makes it easy to understand



  • ok … NAME .. Proxy Content Filter .. great..

    the error on squid were because package db3 was missing ..... an pkg_add -r db3 solves all ...

    now in production ...



  • but …. ACLs with Times .... causes configuration error .. i try several ways .. with no success.

    look the log

    09.05.2007 11:39:09: sg_build_config: create squidGuard config
    09.05.2007 11:39:09: sg_build_config: check configuration data
    09.05.2007 11:39:09: sg_build_config: error configuration data. It's all errors:
    ACL 'default' error: overtime destination name '[' not found
    09.05.2007 11:39:09: sg_build_config: terminated.
    09.05.2007 11:39:09: sg_build_default_config: Created default configuration. All content will blocked.
    09.05.2007 11:39:09: sg_reconfigure: generate squidGuard config and save to /usr/local/etc/squidGuard/squidGuard.conf.



  • OK Big thanks I found problem source, but update only in evning or tomorrow



  • DVSerg ..what time is it you on UTC ?? i amin Brazil -3 UTC … and you?



  • @dhipo:

    DVSerg ..what time is it you on UTC ?? i amin Brazil -3 UTC … and you?

    Now i have 16:05 09-05-2007  ;D

    You can change self File /usr/local/pkgsquidGuard.inc
    need add line

     $sgx[FLD_OVERDESTINATIONNAME] = trim( str_replace('[', '', $sgx[FLD_OVERDESTINATIONNAME]) );
    

    LOOK this
    Line 1120 must be

                    } else {
                        $sgx[FLD_DESTINATIONNAME]     = trim( substr($pfx['dest'], 0, strpos($pfx['dest'], '[')) );
                        $sgx[FLD_OVERDESTINATIONNAME] = trim( strstr($pfx['dest'], '[') );
                        $sgx[FLD_OVERDESTINATIONNAME] = trim( str_replace(']', '', $sgx[FLD_OVERDESTINATIONNAME]) );
                        $sgx[FLD_OVERDESTINATIONNAME] = trim( str_replace('[', '', $sgx[FLD_OVERDESTINATIONNAME]) ); // add this
                    }
    

    and line 1159-1165

            } else {
                $sgx[FLD_DESTINATIONNAME]     = trim( substr($pfx['dest'], 0, strpos($pfx['dest'], '[')) );
                $sgx[FLD_OVERDESTINATIONNAME] = trim( strstr($pfx['dest'], '[') );
                $sgx[FLD_OVERDESTINATIONNAME] = trim( str_replace(']', '', $sgx[FLD_OVERDESTINATIONNAME]) );
                $sgx[FLD_OVERDESTINATIONNAME] = trim( str_replace('[', '', $sgx[FLD_OVERDESTINATIONNAME]) ); // add this
            }
    


  • other suggestion

    in destinations tab

    domains , expressions and/or urls can be separeted always with a new line…

    like this

    anydomian.com
    xyz.ccom
    zzz.com
    and so on

    same to urls or expressions

    sexy
    pussy
    etc

    it's make more sense to use other imported lists



  • I did not get a correct list of the transfer line from HTML form
    I set 'space' as separator from the need
    In expressions use '|' as separator by default in squidGuard db files
    Expressions may contains any other RegularExpression string  ;)

    'sex|porno' - mean as expression 'sex OR porno'

    ps I explore this problem once more.. but the first need test all other bugs



  • new thing … is a must have thing ..... the log of squid access.log ... to the admins look and insert new blocked content



  • other little bug

    redirect field in destinations …. is no accepting any inputs ...



  • new thing ... is a must have thing ..... the log of squid access.log ... to the admins look and insert new blocked content 
    ```Aaa .. my translator can't eat this  ;D More information plz.
    
    

    i find the error ,
    when you define an time in acl , default or other acls , the config shows only that above squidguard.conf, if no time is used in acl ,,, evething is fine ,,

    It's not a bug - it's gui future. This field take all you ACL settings and store to config.xml

Log in to reply