SquidGuard package TEST

dvserg

Updated new _http://diskatel.narod.ru/pfSense/packages/squidGuard-1.2.0_1.tbz
Now this package not need squid on installation (i remove this settings from this port)
May be possible uninstall/reinstall squid without deinstallation squidGuard.
–-----------------------------
Updated new version sources files. I rebuild core gui for faster work.
Plz anybody test new installation too.

1\. Need install local xml-rpc. How - pls looking for this topic
http://forum.pfsense.org/index.php/topic,312.0.html
2\. Download pkg_config.xml for this package from
http://diskatel.narod.ru/pfSense/packages/pkg_config.xml
and put them to you xml-rpc. If all placed correct - in package list you looking one package -squidGuard
3\. Install this package.

dvserg

Found problems first installation

config not autocreate
blacklist not scanned&updated

For fix - need in gui install (upload) blacklist and Apply changes
PS i near time fix this problems for auto update on first installation

dvserg

Ok
Ready for test ;)

dhipo

i'm testing now …. instalations sounds good .. upload blacklist good.... interface good... some tip .... change the name on pfsense menu to other different of proxy server... hummm may be content filtering ….

i still testing ....

dhipo

when configuration was done on filter , the line of redirector appears on squid … right .. .good ...
but the contents of /usr/local/etc/squidGuard/squidGuard.conf are same on all situations ... no changes were made on file .... every time is look like this :

more /usr/local/etc/squidGuard/squidGuard.conf

============================================================

SquidGuard configuration file

This file generated automaticly with SquidGuard configurator

(C)2006 Serg Dvoriancev

email: dv_serg@mail.ru

============================================================

logdir /var/squidGuard/log
dbhome /var/db/squidGuard

acl {
default {
pass none
redirect http://127.0.0.1/sgerror.php
}
}

dhipo

i find the error ,
when you define an time in acl , default or other acls , the config shows only that above squidguard.conf, if no time is used in acl ,,, evething is fine ,,

dhipo

other typos

when click save on squid properties, this remove the line of redirector on squid.conf, and the filter stops working …

if you click the button start of squidguard in "Status > Services " menu , this hangs squid an stop then all.

dvserg

Notation: If exists error in configuration data, Configurator maked small default config with DenyAll access. All error's posts in log on the firts page webGUI.
This is default block config.

# ============================================================
# SquidGuard configuration file
#
# This file generated automaticly with SquidGuard configurator
#
# (C)2006 Serg Dvoriancev
# email: dv_serg@mail.ru
# ============================================================

logdir /var/squidGuard/log
dbhome /var/db/squidGuard

acl {
         default {
                 pass none
                 redirect http://127.0.0.1/sgerror.php
         }
}

If You have this config - pleace looking Log on first page squidGuard gui (checkbox must be checked). Latest errors added when Apply button pressed

ps I planing add 'ERROR config DATA' notification on first page .Thanks for you test - i will analyze bugs
–---------------------------------
BagBeer - beer for real programmer's

dvserg

when click save on squid properties, this remove the line of redirector on squid.conf, and the filter stops working ...

i know this problem, but temporary no see way to solve(only hack squid GUI src :( ).
Now after change squid config need press Apply button in squidGuard gui. This renew all config's.

if you click the button start of squidguard in "Status > Services " menu , this hangs squid an stop then all.

OK, thanks

dhipo

just an idea …. why don't you install squid togheter with squidguard, an proxy complete solution with filtering, and people can decide if they want only a proxy , they use squid or if want content filtreing proxy they will use your package ...

i am running on a new trouble ....

the message says

The url_rewriter helpers are crashing too rapidly, need help!

and squid crash ...

and idea ?

dvserg

Need Log list, SG config and more information about
(log - from 1 page SG gui)

PS How you name of package 'Proxy Content filter'?
Word 'proxy' must exists in name, what makes it easy to understand

dhipo

ok … NAME .. Proxy Content Filter .. great..

the error on squid were because package db3 was missing ..... an pkg_add -r db3 solves all ...

now in production ...

dhipo

but …. ACLs with Times .... causes configuration error .. i try several ways .. with no success.

look the log

09.05.2007 11:39:09: sg_build_config: create squidGuard config
09.05.2007 11:39:09: sg_build_config: check configuration data
09.05.2007 11:39:09: sg_build_config: error configuration data. It's all errors:
ACL 'default' error: overtime destination name '[' not found
09.05.2007 11:39:09: sg_build_config: terminated.
09.05.2007 11:39:09: sg_build_default_config: Created default configuration. All content will blocked.
09.05.2007 11:39:09: sg_reconfigure: generate squidGuard config and save to /usr/local/etc/squidGuard/squidGuard.conf.

dvserg

OK Big thanks I found problem source, but update only in evning or tomorrow

dhipo

DVSerg ..what time is it you on UTC ?? i amin Brazil -3 UTC … and you?

dvserg

@dhipo:

DVSerg ..what time is it you on UTC ?? i amin Brazil -3 UTC … and you?

Now i have 16:05 09-05-2007 ;D

You can change self File /usr/local/pkgsquidGuard.inc
need add line

 $sgx[FLD_OVERDESTINATIONNAME] = trim( str_replace('[', '', $sgx[FLD_OVERDESTINATIONNAME]) );

LOOK this
Line 1120 must be

                } else {
                    $sgx[FLD_DESTINATIONNAME]     = trim( substr($pfx['dest'], 0, strpos($pfx['dest'], '[')) );
                    $sgx[FLD_OVERDESTINATIONNAME] = trim( strstr($pfx['dest'], '[') );
                    $sgx[FLD_OVERDESTINATIONNAME] = trim( str_replace(']', '', $sgx[FLD_OVERDESTINATIONNAME]) );
                    $sgx[FLD_OVERDESTINATIONNAME] = trim( str_replace('[', '', $sgx[FLD_OVERDESTINATIONNAME]) ); // add this
                }

and line 1159-1165

        } else {
            $sgx[FLD_DESTINATIONNAME]     = trim( substr($pfx['dest'], 0, strpos($pfx['dest'], '[')) );
            $sgx[FLD_OVERDESTINATIONNAME] = trim( strstr($pfx['dest'], '[') );
            $sgx[FLD_OVERDESTINATIONNAME] = trim( str_replace(']', '', $sgx[FLD_OVERDESTINATIONNAME]) );
            $sgx[FLD_OVERDESTINATIONNAME] = trim( str_replace('[', '', $sgx[FLD_OVERDESTINATIONNAME]) ); // add this
        }

dhipo

other suggestion

in destinations tab

domains , expressions and/or urls can be separeted always with a new line…

like this

anydomian.com
xyz.ccom
zzz.com
and so on

same to urls or expressions

sexy
pussy
etc

it's make more sense to use other imported lists

dvserg

I did not get a correct list of the transfer line from HTML form
I set 'space' as separator from the need
In expressions use '|' as separator by default in squidGuard db files
Expressions may contains any other RegularExpression string ;)

'sex|porno' - mean as expression 'sex OR porno'

ps I explore this problem once more.. but the first need test all other bugs

dhipo

new thing … is a must have thing ..... the log of squid access.log ... to the admins look and insert new blocked content

dhipo

other little bug

redirect field in destinations …. is no accepting any inputs ...