Problem with web uploads in new dansguardian 2.12.0.3

bmbeverst

I found that these fixes did not work for pfsense 2.1.3 and 2.12.0.3_2 pkg v.0.1.12 on a 32 bit system.

I was able to fix it by backing up and overwriting the dansguardian executable at /usr/pbi/dansguardian-i386/sbin.

Commands:


cd /usr/pbi/dansguardian-i386/sbin/
mv dansguardian{,.org}
fetch http://e-sac.siteseguro.ws/pfsense/8/dansguardian
/usr/pbi/dansguardian-i386/etc/rc.d/dansguardian onerestart

Please note that the commands will be different if you are on a 64 bit machine.

Samuel_R

Here is the fix for 64-bit, worked like a charm:

rm -rf /usr/local/etc/dansguardian
ln -s /usr/pbi/dansguardian-amd64/etc/dansguardian /usr/local/etc/dansguardian
killall dansguardian
cd /usr/local/sbin
fetch http://e-sac.siteseguro.ws/pfsense/8/amd64/dansguardian
chmod +x /usr/local/sbin/dansguardian
/usr/local/etc/rc.d/dansguardian.sh start

As a note: this does not work on 2.2.2. libssl.so.6 and libcrypto.so.6 no longer exist. they are .7's. Soft linking to these files as .6 causes a permission denied error. (yes, I did chmod +x on the dansguardian download.

This is on the x64 version. Not sure of the 32 bit version.

Also, is there an ETA on E2Guardian being a package for pfsense?

(edited for spelling)

ismaelnoble

@Samuel_R:

Here is the fix for 64-bit, worked like a charm:

rm -rf /usr/local/etc/dansguardian
ln -s /usr/pbi/dansguardian-amd64/etc/dansguardian /usr/local/etc/dansguardian
killall dansguardian
cd /usr/local/sbin
fetch http://e-sac.siteseguro.ws/pfsense/8/amd64/dansguardian
chmod +x /usr/local/sbin/dansguardian
/usr/local/etc/rc.d/dansguardian.sh start

As a note: this does not work on 2.2.2. libssl.so.6 and libcrypto.so.6 no longer exist. they are .7's. Soft linking to these files as .6 causes a permission denied error. (yes, I did chmod +x on the dansguardian download.

This is on the x64 version. Not sure of the 32 bit version.

Also, is there an ETA on E2Guardian being a package for pfsense?

(edited for spelling)

i am also experienceing the above mentioned issue regarding the dansguardian upload limit, and the fixed bin file needing the lib crypto.so.6 on amd64 install. has anyone managed to put this to rest. or am i looking at a downgrade to pf 2.1

TheLimey

I'm curious as to how this is still an issue over two years later. If there is a fix why isn't it included in the repo's? :o

I just set a customer up with a pair of SG-2440's ($1,000 wasn't pocket change for them) and found that this isn't working, …and now it appears there is no way to even patch it as they are running 2.2.3 (I upgraded the boxes from the 2.2.2 they came with).

Any ideas other than a downgrade (which isn't an option)? :'(

NOTE: Sorry for the mini rant, but I just don't understand why this hasn't been fixed in the package yet. :)

EDIT: OK, I just found that it's being replaced by e2guardian, but although it seems to be ready, a pfSense package doesn't seem to be happening. =(

TheLimey

I tried the old fix (just to be sure) and can confirm that it doesn't work:
```
Shared object "libssl.so.6" not found, required by "dansguardian"


I've had to disable the filtering until an e2guardian package appears, but I'm not too expectant as there hasn't been ANY action for over a month now. Filtering was pretty much the point of having the SG-2440's, so this is very disappointing.  :-\

TheLimey

See here for update: https://forum.pfsense.org/index.php?topic=87526.msg537585#msg537585

ismaelnoble

welcome news to me, ill continue to wait patiently for the package and probably try out the test version if i get the time. i ended up deploying squidguard for the time being and even that had its bugs, thankfully i did manage to get a workaround for the bugs going. …. patience patience patience...

jamesandruth

@marcelloc:

I've fixed the code. ;D
…
amd64
http://e-sac.siteseguro.ws/packages/amd64/8/All/dansguardian-2.12.0.3_1.tbz

i386
http://e-sac.siteseguro.ws/packages/8/All/dansguardian-2.12.0.3_1.tbz

Do not forget to kill dansguardian process before trying new packge binaries.

I downloaded your 64-bit tarball, and copied over the binary.

This did not work at first, failing for few missing shared libs, as that binary seems to want only to use it's own libs.


[stop Dansguardian]
cp /usr/pbi/dansguardian-amd64/local/sbin/dansguardian /usr/pbi/dansguardian-amd64/local/sbin/dansguardian.2.12.0.3_2
cp sbin/dansguardian /usr/pbi/dansguardian-amd64/local/sbin/dansguardian
cd /usr/pbi/dansguardian-amd64/local/lib/
ln -s /usr/local/lib/compat/libssl.so.6 libssl.so.6
ln -s /usr/local/lib/compat/libcrypto.so.6
pkg install libiconv    # I needed to, anyway
ln -s /usr/local/lib/libiconv.so.2.5.1 libiconv.so.3
ln -s /usr/local/lib/compat/libstdc++.so.6
ln -s /usr/local/lib/compat/libz.so.5

Then, it worked and there is peace in the house.

HTH,

James

2.2.2-RELEASE (amd64)
built on Mon Apr 13 20:10:22 CDT 2015
FreeBSD 10.1-RELEASE-p9

marcelloc

HI James,

Thank's for the feedback.

Consider using e2guardian as well. It has many bug fixes from 2.12 dansguardian version

https://forum.pfsense.org/index.php?topic=87526.msg538417#msg538417