What Squid version and SquidGuard or DansGuardian?

MrGlasspoole

Hi,

for me Snort and SquidGuard/DansGuardian are the main reasons to use pfSense.
If i look around here there are allot of problems when it comes to SquidGuard/DansGuardian.
Also ClamAV would be nice but if it will work someday: https://forum.pfsense.org/index.php?topic=83404

The question is: What Squid version plus SquidGuard or DansGuardian combination works?
I want to use the blacklists from squidblacklist.org.

And i have another question:
If you use Adblock Plus in Firefox some sites don't work the way they should.
Is this also the case with SquidGuard on the router?

marcelloc

squid and clamav is working on 2.2 (tested on amd64 version)

squidguard-devel installs if you disable package signature check on system advanced.

Dansguardian is not updated since two years. I'm working to port e2guardian to pfsense.
If you like to help, follow these topics
https://forum.pfsense.org/index.php?topic=87440.0

MrGlasspoole

So the old Squid that isn't updated for a really long time is the way to go?
And for ClamAV the old HAVP?

For what do i need squidguard-devel?

I wonder that all this packages are all still beta after such a long time?
HAVP is from 2010 and squidGuard from 2009.

marcelloc

@MrGlasspoole:

I wonder that all this packages are all still beta after such a long time?

pfsense package gui version status beta is different from freebsd ports package version and status

MrGlasspoole

But I'm still not sure what to use - what packages?

And is e2guardian the new dansguardian?

And what to use for ClamAV cause as in my old thread it did not work: https://forum.pfsense.org/index.php?topic=83404

Is there some tutorial that works without messing around with hacking stuff?

rjcrowder

I'm not sure which Squid version is working best in 2.2, but I've never had any problem using any of them with Dansguardian.

E2Guardian is the new (fork of) Dansguardian. Dansguardian and Squidguard are not functionally equivalent. If you only want blacklist based blocking then Squidguard is fine… if you want content based filtering use Dansguardian (or E2Guardian).

MrGlasspoole

What means "content based filtering"?

Whats the difference between squidGuard and squidGuard-devel?

marcelloc

@MrGlasspoole:

Whats the difference between squidGuard and squidGuard-devel?

Binary version and gui options

rjcrowder

E2/Dansguardian will look at the content of pages returned and decide whether to block or allow them based on a weighting calculation of "phrases" in the content. Blacklist blocking only looks at the URL. E2/Dansguardian will do both…

MrGlasspoole

Ok, after looking around more i found out you don't need HAVP anymore - why nobody told me that here >:(

But it does not work and I'm not the only one. It's frustrating if you are new to pfSense and if you think that
packages you can install are working :(

It's the latest 2.2 x64 and it's 2.2 since october (no update).
I installed squid3 and squidGuard-squid3.
I changed: "Service squid_clamav squidclamav.so"
I removed: "ldap configuration'Manager:Apassword@ldap.chtsanti.net?o=chtsanti?mermberUid?(&(objectClass=posixGroup)(cn=%s))'"
I changed to: "redirect https://192.168.0.1/clwarn.cgi"

But clamd and squidGuard are not starting.
ps ax | grep -i fresclam or tail -f /var/log/clamav/freshclam.log tells me:

grep: fresclam: No such file or directory
grep: or: No such file or directory
grep: tail: No such file or directory

doktornotor

@MrGlasspoole:

ps ax | grep -i fresclam or tail -f /var/log/clamav/freshclam.log tells me:
grep: fresclam: No such file or directory
grep: or: No such file or directory
grep: tail: No such file or directory

LULz… :D Those were supposed to be two separate commands....


ps ax | grep -i freshclam


tail -f /var/log/clamav/freshclam.log

MrGlasspoole

lol - nobody told this guy neither: https://forum.pfsense.org/index.php?topic=87562.msg481208#msg481208

The output is:

 2560  -  Is     0:01.78 /usr/local/bin/freshclam --daemon -p /var/run/clamav/freshclam.pid
48264  0  S+     0:00.00 grep -i freshclam

getfile: Can't write 1448 bytes to /var/db/clamav/clamav-e7d674823863b493974d944efdd05df5.tmp/clamav-b69402a7fda033c3acff60eb7da8b732.tmp
WARNING: Can't download main.cvd from database.clamav.net
Received signal: wake up
ClamAV update process started at Thu Jan 29 16:42:08 2015
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.98.5 Recommended version: 0.98.6
DON'T PANIC! Read http://www.clamav.net/support/faq
getfile: Can't write 1448 bytes to /var/db/clamav/clamav-26487302f658d4bfe55c0f00608d77a0.tmp/clamav-51d39e1a1042c682cfd37d9fe5df5094.tmp
WARNING: Can't download main.cvd from database.clamav.net

OUTDATED? I just installed it…

marcelloc

@MrGlasspoole:

OUTDATED? I just installed it…

Minor version changes that need a long update sequence. (clamav developer, freebsd package maintainer, pfsense package update, pfsense pbi build,…)

MrGlasspoole

And what to do now?

marcelloc

@MrGlasspoole:

And what to do now?

Update virus definitions, the version alert is just a warning, not a service stop.

MrGlasspoole

I can't find a tab where i see something like update definitions…

marcelloc

@MrGlasspoole:

I can't find a tab where i see something like update definitions…

run freshclam via console/ssh

MrGlasspoole

still the same message:

getfile: Can't write 1448 bytes to /var/db/clamav/clamav-e1dc9c51263e0827cd2a0b973ba41d4e.tmp/clamav-d6889ae227e0a4134d824971de0a4a84.tmp
WARNING: Can't download main.cvd from database.clamav.net

Cino

Can your ping database.clamav.net from your box?

MrGlasspoole

Yes

PING db.other.clamav.net (193.1.193.64): 56 data bytes
64 bytes from 193.1.193.64: icmp_seq=0 ttl=51 time=35.980 ms
64 bytes from 193.1.193.64: icmp_seq=1 ttl=51 time=40.412 ms
64 bytes from 193.1.193.64: icmp_seq=2 ttl=51 time=35.124 ms

--- db.other.clamav.net ping statistics ---
3 packets transmitted, 3 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 35.124/37.172/40.412/2.318 ms