Squidguard-squid3 systempatch for use with squid3-dev

webstor · Oct 14, 2014, 8:51 AM

Strange, is your squidguard configured as parent for squid?

Could you maybe post your squid.conf please?

Thanx.

aGeekhere · Oct 14, 2014, 9:14 AM

in squidgard set Blacklist proxy as the ip of pfsense

webstor · Oct 14, 2014, 9:31 AM

That is not working correctly, squidguard won't start if I enter the ip of pfsense in the blacklist proxy.

aGeekhere · Oct 14, 2014, 9:38 AM

Same, I have to cut every thing out of integrations then start squidgaurd then renter it back in

webstor · Oct 14, 2014, 10:16 AM

And after that it was working, I mean ssl bump and squidguard filtering?

aGeekhere · Oct 14, 2014, 10:20 AM

both, sometimes a restart is needed and then cut everying out from integrations, start squidgaurd and then paste it back into squid.

webstor · Oct 15, 2014, 1:12 PM

Nope, won't help. I don't get it.

aGeekhere · Oct 17, 2014, 7:53 AM

Hi all, still stuck on getting windows update working, any advice?.

webstor · Oct 17, 2014, 8:00 AM

When I got it working with squidguard, I will attend to that problem.

aGeekhere · Oct 17, 2014, 8:07 AM

I am a bit stumped on why Squidguard is not working for you (as I am new to this) list your squid, Squidguard and System: Advanced: Firewall and NAT settings.

webstor · Oct 17, 2014, 8:12 AM

Transparent Proxy.

Integrations Settings:
cache_peer 127.0.0.1 parent 3125 0 name=havp no-query no-digest no-netdb-exchange default;url_rewrite_program /usr/pbi/squidguard-squid3-amd64/bin/squidGuard -c /usr/pbi/squidguard-squid3-amd64/etc/squidGuard/squidGuard.conf;url_rewrite_bypass off;url_rewrite_children 16 startup=8 idle=4 concurrency=0

Custom Acls:
always_direct allow all
ssl_bump server-first all

Only one nat rue for redirecting https traffic to squid.

aGeekhere · Oct 17, 2014, 8:20 AM

do you put amd64 instead of i386 by mistake or are you running amd64?

webstor · Oct 17, 2014, 8:34 AM

I'm running a 64bit pfsense.

aGeekhere · Oct 17, 2014, 8:58 AM

is the squidGuard service able to run? or is it erroring? Also try using proxy port 3128 in Proxy port under Squid General Settings.

Also here is my Custom ACLS (Before_Auth) in squid (Trying to get windows updates working)

acl WindowsUpdate dstdomain windowsupdate.microsoft.com
acl WindowsUpdate dstdomain update.microsoft.com
acl WindowsUpdate dstdomain activex.microsoft.com
acl WindowsUpdate dstdomain download.windowsupdate.com
acl WindowsUpdate dstdomain codecs.microsoft.com
acl WindowsUpdate dstdomain stats.updates.microsoft.com
acl WindowsUpdate dstdomain c.microsoft.com
no_cache deny WindowsUpdate
http_access allow WindowsUpdate
always_direct allow all
ssl_bump server-first all

This does not work

webstor · Oct 17, 2014, 9:02 AM

Hi, squidguard is running and no error in the log files.
Port squid is 3128.

aGeekhere · Oct 17, 2014, 9:09 AM

But it is not filtering anything? Check Target Rules in squidGuard.
In SquidGuard: General settings
tic Check this option to enable blacklist
Blacklist proxy is your pfsense router ip

then clear your cache or try private search and try now

webstor · Oct 17, 2014, 9:15 AM

If I deactivate ssl bumping it works just fine.

webstor · Oct 17, 2014, 9:17 AM

could you post your squid.conf please?

aGeekhere · Oct 17, 2014, 9:20 AM

Are you using squidGuard-squid3 ? how do i find the squid.conf file

webstor · Oct 17, 2014, 9:56 AM

Yes, squid3-dev. The squid.conf is under Diagnostic / edit File/ browse to /usr/pbi/squid-amd64 or squid-i386 /etc / squid / squid.conf