Dansguardian - Web Upload is banned – again



  • The 2.1.x fix for "Web upload is banned" for Dansguardian is not working for 2.2.

    It errors out with this ….. Shared object "libssl.so.6" not found, required by "dansguardian"

    Is anyone working on fixing dans? It has not been updated since months.



  • submit a bug report… its probably a problem with the PBI build as i've been finding them for a other packages. As a temp fix, you could link the the missing file... do a search for the file in the pbi install location and link it /usr/local/lib

    probably somthing like

    ln -s /usr/pbi/dansguardian-amd64/local/lib/libssl.so.6 /usr/local/lib/libssl.so.6
    


  • Let me try the linking first.

    Dansguardian has issues especially in clamav since start of 2.1.x days. It worked smoothly on 2.0.3  … I had to copy certain dans files for clamav from 2.0.3 and use them in 2.1 as no one updated the pbi despite calling it out multiple times. In fact yesterday I finally put time in getting 2.2RC work after repeated failed attempts in the past (on the packages area I mean). Squid3 started but icap/clamav gave issues and I found clamav.conf missing. Had to use the old 2.0.3 clamav.conf to make it work.

    Now the only issue is Dansguardian web upload. Hope this linking command resolves the final issue.



  • try the new squid update for 2.2. I've been working with the dev to assist with troubleshooting… I've tested it this morning and its working flawest as a non-transparent proxy with anti-virus..

    The same issue probably applies with danasguardain for clamav... Basically the  pbi and folder locations have to be updated... I can't remember but i think it was around 2.1 when PBIs were introduce which lead to many issues with file locations.

    When i use dansguardain, I have it feed Squid... So as long as squid has AV, your covered... No need to run it on squid and dans with that configure at the same time IMHO.

    btw, calling it out on the forum is one thing... make sure to submit a bug report so it can be tracked. https://redmine.pfsense.org



  • Yeah I am using Squid3 clamav and dont use dans clamav for 2.2  …

    After linking I now get this error... very frustrating  >:(

    php-fpm[4881]: /pkg_edit.php: The command '/usr/local/etc/rc.d/dansguardian.sh start' returned exit code '1', the output was 'kern.ipc.somaxconn: 16384 -> 16384 kern.maxfiles: 131072 -> 131072 kern.maxfilesperproc: 104856 -> 104856 kern.threads.max_threads_per_proc: 4096 -> 4096 Starting dansguardian. Shared object "libssl.so.6" not found, required by "dansguardian" /usr/local/etc/rc.d/dansguardian.sh: WARNING: failed to start dansguardian'



  • are you using the SSL option in dans? I have it running on a test box but i dont use SSL with it… try a link to /usr/lib/libssl.so.6 or /lib/libssl.so.6... do them one at a time and if it doesn't work, remove the link



  • An important point for now is that dasnguardian is no longer on freebsd ports and the project has no updates or fixes since a while.



  • @marcelloc:

    An important point for now is that dasnguardian is no longer on freebsd ports and the project has no updates or fixes since a while.

    I forgot about that :-(  Hasn't had an update since 2012. I'm betting Smoothwall version is getting the updates…hehehe



  • e2guardian is the replacement for dansguardian, The project started with comunity patches that was never merged to dansguardian code.



  • @marcelloc:

    e2guardian is the replacement for dansguardian, The project started with comunity patches that was never merged to dansguardian code.

    Will e2guardian be a package for pfSense?

    H.



  • When will e2guardian be added to pfSense package list? I don't like SquidGuard and have been using Dansguardian (and love it)



  • @Cino:

    are you using the SSL option in dans? I have it running on a test box but i dont use SSL with it… try a link to /usr/lib/libssl.so.6 or /lib/libssl.so.6... do them one at a time and if it doesn't work, remove the link

    Tried those combinations as well…. no go. Not using SSL


Log in to reply