Dansguardian package for 2.0

marcelloc

thanks again! just so i'm on the same page, what were the options you selected when you ran the make command? i see there are a few options then more options depending of the depen its going to install.

That's my make config screen.

dansguardian_make_config.png_thumb

Cino

looks like the patch is for danguardian 2.10.1.1 :-( Going to try it out tho and see if it works.

I dont know if my steps are correct, but after running the commands you provided. I downloaded dansguardian src to /usr/ports/distfiles then ran cmd make. After that command finished, I change to the src dir and ran the patch command. make configure, and now i'm in the process of running make install. I'm thinking i should had untar the src in the /usr/ports/distfiles then ran the make command. Does it matter?

Once make install is down. How to do I turn it into a package?

btw, i've attached the missing blockedflash.swf file… not needed but the error in the log goes away. should be placed here /usr/local/share/dansguardian

thanks again for all your help

blockedflash.swf.txt

marcelloc

@Cino:

looks like the patch is for danguardian 2.10.1.1 :-( Going to try it out tho and see if it works.

I dont know if my steps are correct, but after running the commands you provided. I downloaded dansguardian src to /usr/ports/distfiles then ran cmd make. After that command finished, I change to the src dir and ran the patch command. make configure, and now i'm in the process of running make install. I'm thinking i should had untar the src in the /usr/ports/distfiles then ran the make command. Does it matter?

source is extracted to /usr/ports/www/dansguardian-devel/work/dansguardian-2.12.0.0
try to apply the patch there.

@Cino:

Once make install is down. How to do I turn it into a package?

instead of make install, do a make package. the dansguardian.tbz will be created on current dir.

@Cino:

btw, i've attached the missing blockedflash.swf file… not needed but the error in the log goes away. should be placed here /usr/local/share/dansguardian

Thanks, included in package install

Cino

thanks again… Looks like the patch doesn't work.. Its for 2.10.1.1 so I worked with that version just to see if it works but system is having problems binding to the IP.. I'll wait for it to be officially supported by dansguardian. You would think it would be supported by now. I know of a lot of companies including the one I work for that uses it.

I removed it from my box and went back to 2.12.0.0_1. It was a good learning experience tho :-)


Feb 3 13:58:12 	dansguardian[51970]: Error binding server socket (is something else running on the filter port and ip?
Feb 3 13:58:12 	dansguardian[51970]: Error binding socket: [135264876 :: 0] (Bad file descriptor)
Feb 3 13:57:37 	dansguardian[33681]: Exiting with error
Feb 3 13:57:37 	dansguardian[33681]: Error binding server socket (is something else running on the filter port and ip?
Feb 3 13:57:37 	dansguardian[33681]: Error binding socket: [135264876 :: 0] (Bad file descriptor)
Feb 3 13:57:22 	dansguardian[59298]: Exiting with error
Feb 3 13:57:22 	dansguardian[59298]: Error binding server socket (is something else running on the filter port and ip?
Feb 3 13:57:22 	dansguardian[59298]: Error binding socket: [135264876 0.0.0.0 0] (Bad file descriptor)
Feb 3 13:56:59 	dansguardian[9179]: Exiting with error
Feb 3 13:56:59 	dansguardian[9179]: Error binding server socket (is something else running on the filter port and ip?
Feb 3 13:56:59 	dansguardian[9179]: Error binding socket: [135264876 192.168.0.1 0] (Bad file descriptor)

marcelloc

Just pushed 0.1.4 version with

Include missing blockedflash.swf (thanks cino)
Include ip based list tab

Cino

IP tab works good! Was able to put the whole subnet in the default and add some within the range to the filtered group.

Have you ever seen this error yet when restarting the service after a reinstall


dansguardian[23364]: Error binding ipc server file (try using the SysV to stop DansGuardian then try starting it again or doing an 'rm /tmp/.dguardianipc').

squid account doesn't have permission to the /tmp dir i'm thinking… or it does but the /tmp gets deleted on every reboot i believe. i change the permission for a quick fix but also a reboot seems to solve it but it does come back here and there.

marcelloc

@Cino:

Have you ever seen this error yet when restarting the service after a reinstall

dansguardian[23364]: Error binding ipc server file (try using the SysV to stop DansGuardian then try starting it again or doing an 'rm /tmp/.dguardianipc').

squid account doesn't have permission to the /tmp dir i'm thinking… or it does but the /tmp gets deleted on every reboot i believe. i change the permission for a quick fix but also a reboot seems to solve it but it does come back here and there.

This is related to dansguardian process user.

As clamav socket and dansguardian must be run by the same user, I read clam user from conf and assign it to dansguardian. This user translation generates ipc file error.
Maybe a better uninstall script solve this.

Is it happening just on reinstalls or every time?

Cino

just when I re-installs for far

marcelloc

I've pushed a fix on interface select description reported by mschiek01.

Cino

In the dansguardan.conf file, you can configure where the log file is stored. Would it be possible to add a field within the log menu to allow us to change the location? I'm also going to see if lightsquid and squidguard can have the same options add to the their packages.. This would allow users to use lightsquid for logging web access

marcelloc

I'm working on sarg to get these logs.
It has time reports better then lightsquid.

Cino

you are the MAN!!! Sarg time reports are a lot better IMHO!!! I've attach a script i've used in the past, found it on the net so you may have seen it already… Only problem I had it with(why i dont use it) it doesnt like when I would rotate the logs for some reason. I didn't spend alot of time on it since we there was lightsquid already.

Not to ask for too much, but would this be a package or built-in to dansguardian? Be nice to have it as a package and be able to use dansguardian and/or squid log file for reporting. Now i'm asking for too much,have it create separate reports for each system if possible. There have been many users that have brought up sarg, but no one ever finished it for pfsense.

Stephen

sarg-report.txt

marcelloc

@Cino:

I've attach a script i've used in the past, found it on the net so you may have seen it already… Only problem I had it with(why i dont use it) it doesnt like when I would rotate the logs for some reason. I didn't spend alot of time on it since we there was lightsquid already.

Thank's. reading docs and tutorias is the first step to understand what gui needs for a good setup.

@Cino:

Not to ask for too much, but would this be a package or built-in to dansguardian? Be nice to have it as a package and be able to use dansguardian and/or squid log file for reporting.

Package. I`ll try to detect logs and but that option on gui.

@Cino:

Now i'm asking for too much,have it create separate reports for each system if possible.

Maybe on second release :)

@Cino:

There have been many users that have brought up sarg, but no one ever finished it for pfsense.

If you want to do some tests before gui, here are the packages:
i386
http://e-sac.siteseguro.ws/packages/8/All/sarg-2.3.2.tbz

amd64
http://e-sac.siteseguro.ws/packages/amd64/8/All/sarg-2.3.2.tbz

Cino

good stuff!! I'm using an old port, sarg-2.2.7.1_2. I'll uninstall and give this one a try with the script I have.

rollandh73

Does Squid have to be installed to use Dansguardian? Or is it included in the package? Thanks for the great work.

marcelloc

Dansguardian requires squid but not squid package for pfsense.

If you want to use both packages, install first squid package and then dansguardian.

marcelloc

Not so good news for those who want ssl filtering on pfsense

http://forum.pfsense.org/index.php/topic,46207.msg242062.html#msg242062

Cino

:-(

svtlightning

Can't seem to get this working, installed, set to LAN interface, added IPs to filter group. Set browser proxy to LAN IP Port 8080, but I keep getting a dansguardian error connection to proxy in the system log and PC can't get to internet.

Did I miss something? Are there other packages that have to be installed?

marcelloc

You must set a proxy to dansguardian send requests after filtering.

users -> dansguardian -> proxy(squid) -> internet

Also check if you have firewall rules allowing access to dansguardian port.