Squidguard… problems and questions

hinze57 · Mar 21, 2008, 8:42 PM

Don't misunderstand me, I think the package is awesome. I'm almost ready to move it into production and replace IPCOP. URLFilter has configuration parameters to pull the blacklist daily, weekly or monthly and apply it. I have it running very late after hours so no to disrupt anything. There is also a nice block page which shows client IP, site trying to connect to, and category which triggered the block.

Is there a way to do the above with this SquidGuard package?

Thank you,
KH

hinze57 · Mar 21, 2008, 9:01 PM

Okay, problem was with https. I now get a block page.

Still trying to figure out how to automatically grab new blacklist file. I can grab via cron, but what would be the commands to reconfigure just like if pressing upload button?

KH

dvserg · Mar 22, 2008, 4:05 PM

@hinze57:

Okay, problem was with https. I now get a block page.

Still trying to figure out how to automatically grab new blacklist file. I can grab via cron, but what would be the commands to reconfigure just like if pressing upload button?

KH

From GUI - nothig
You may use in you php script
php function from squidGuard.inc
sg_reconfigure_blacklist($url, $proxy);

You can create script and adding him to the cron.
…
require_once('squidguard.inc');
$url="URL";
sg_reconfigure_blacklist($url, '');
...

squid & squidGuard will restart automaticly

There is also a nice block page which shows client IP, site trying to connect to, and category which triggered the block.
Is there a way to do the above with this SquidGuard package?

Possible in HTTP webgui & Redirect mode= 'Internal'
GUI HTTPS - know problem and expected Redirect mode='External' with you self Error-page from external www server

Test
http://youpfSense/sgerror.php?url=403%20No%20access&a=10.0.0.0&n=MyClient&i=clientUser&s=clientgroup&t=porno/sex&u=http://porno.ru&

mwdiers · Mar 25, 2008, 3:30 PM

I just did a clean pfSense install last night, and managed to get squidGuard running. However, this was very difficult. I had many of the same problems noted here.

It was VERY touchy. Often squidGuard would say STOPPED. The only way to make it say STARTED was to upload the blacklist again. Then, if I changed ANY setting, the filter would stop working.

For example: I uploaded the blacklist. Clicked Save. I changed default destination to:```
!all


I changed squidGuard to:```
!blk_BL_porn all
```I clicked **Apply**. Now nothing was blocked. Porn and everything else was let through. I saw squid logging the website access. I saw no errors of any kind in the squidGuard or the squid logs.

Very frustrating. I checked permissions. I tried changing /var/squidGuard to proxy:proxy (chmod -R proxy:proxy /var/squidGuard). No help.

It was very slow downloading the blacklist over and over, so I fetched it to: /var/tmp/squidGuard/hold/shallalist.tar.gz and set that path for **Blacklist URL**. That way I could just click **Upload Url**, and the DB would be processed again.

Everything works ONLY when I perform the following steps:

1) Change filter settings.
2) **Apply**.
3) Click **Upload Url**.
4) Click **Apply**.

In other words, the filter stops working every time I change a squidGuard setting. It works again if I re-process the database.

As I said, there were never any error messages, so there is nothing I can send from the logs.

wompy · Mar 25, 2008, 7:01 PM

I had similar problems to you, did you also change permissions to " /var/db/squidGurad" ? that is what finally fixed it for me.
see my previous post.

dvserg · Mar 25, 2008, 8:31 PM

Thanks!
I fix bug with '/var/db/squidGuard' right's in installation.
Pls test.

Monoecus · Apr 2, 2008, 8:02 AM

I have reinstalled pfSense yesterday and could thus test your fixes for the rights. Anything seems to be ok now.

Many thanks.

hinze57 · May 8, 2008, 1:52 AM

Is there a way to enable safe search?

Monoecus · May 12, 2008, 8:54 PM

What do you mean by “safe search”?

xhark · May 15, 2008, 1:32 PM

I have same problem, all is ok but nothing is filtered

dvserg · May 15, 2008, 1:37 PM

Renew package (today updated) and try now.

xhark · May 15, 2008, 1:43 PM

I delete and reinstall ?

dvserg · May 15, 2008, 1:46 PM

@xhark:

I delete and reinstall ?

Hm.. Try full reinstall :D

xhark · May 15, 2008, 1:47 PM

I talk about package ^^

dvserg · May 15, 2008, 1:49 PM

@xhark:

I talk about package ^^

Yes. Reinstall package

xhark · May 15, 2008, 2:48 PM

It's done but not filtering is active :(

Can I delete times ?

here is my log :

5.05.2008 16:44:52 : sg_reconfigure: Begin.
15.05.2008 16:44:52 : sg_reconfigure_user_db: Begin with '/var/db/squidGuard'
15.05.2008 16:44:52 : sg_reconfigure_user_db: Nothing. User destinations list empty.
15.05.2008 16:44:52 : sg_remove_unused_db_entries: Begin.
15.05.2008 16:44:52 : sg_remove_unused_db_entries: end
15.05.2008 16:44:52 : sg_create_config: Create squidGuard config.
15.05.2008 16:44:52 : sg_create_config: Checking configuration data.
15.05.2008 16:44:52 : sg_create_config: Error configuration data. It's all errors:
BLACKLIST 'blk_blacklists_agressif' error: file '/var/db/squidGuard/blk_blacklists_agressif' not found
BLACKLIST 'blk_blacklists_drugs' error: file '/var/db/squidGuard/blk_blacklists_drugs' not found
BLACKLIST 'blk_blacklists_mail' error: file '/var/db/squidGuard/blk_blacklists_mail' not found
BLACKLIST 'blk_blacklists_porn' error: file '/var/db/squidGuard/blk_blacklists_porn' not found
BLACKLIST 'blk_blacklists_publicite' error: file '/var/db/squidGuard/blk_blacklists_publicite' not found
BLACKLIST 'blk_blacklists_redirector' error: file '/var/db/squidGuard/blk_blacklists_redirector' not found
BLACKLIST 'blk_blacklists_violence' error: file '/var/db/squidGuard/blk_blacklists_violence' not found
15.05.2008 16:44:52 : sg_create_config: Terminated.
15.05.2008 16:44:52 : sg_create_simple_config: Begin with dbhome='/var/db/squidGuard'.
15.05.2008 16:44:52 : sg_redirector_base_url: Select redirector base url (https://192.168.0.254/sgerror.php?url=Error%21%20Check%20squidGuard%20configuration%20data.%20%28sg_create_config%3A%20%5B2%5D%29.&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u)
15.05.2008 16:44:52 : sg_reconfigure: Generate squidGuard config and save to '/usr/local/etc/squidGuard/squidGuard.conf'.
15.05.2008 16:44:52 : squid_reconfigure: Begin.
15.05.2008 16:44:52 : squid_reconfigure: Remove old redirector options from Squid config.
15.05.2008 16:44:52 : squid_reconfigure: Add new redirector options to Squid config.
15.05.2008 16:44:52 : sg_init: Start.
15.05.2008 16:45:01 : sg_init: Start.
15.05.2008 16:45:02 : sg_init: Start.

dvserg · May 15, 2008, 5:23 PM

Upload blacklist previous version not make blacklist archive. And temporary set HTTP webGUI pfSense. In https can have troubles.

xhark · May 16, 2008, 6:18 AM

What can I do ? If I add small GZ blacklist it's OK, but with big blacklist it fails (ftp://ftp.univ-tlse1.fr/pub/reseau/cache/squidguard_contrib/blacklists.tar.gz)

dvserg · May 16, 2008, 6:25 AM

@xhark:

What can I do ? If I add small GZ blacklist it's OK, but with big blacklist it fails (ftp://ftp.univ-tlse1.fr/pub/reseau/cache/squidguard_contrib/blacklists.tar.gz)

Check you url manually - may be broken arhive?
Also looking this http://www.squidguard.org/blacklists.html,
i use http://www.shallalist.de/Downloads/shallalist.tar.gz

xhark · May 16, 2008, 6:57 AM

Yes I've open this with 7zip without any problem.

I've test to send this in /tmp/my_directory and precise local directory to SG config, but same problem. I'll test your list and go back here ;)