pfSense Support Subscription

Author Topic: Dansguardian package for 2.0  (Read 199613 times)

0 Members and 1 Guest are viewing this topic.

Offline marcelloc

  • Hero Member
  • *****
  • Posts: 13408
  • Karma: +592/-7
    • View Profile
Dansguardian package for 2.0
« on: December 07, 2011, 08:30:50 pm »
start topic on documentation
http://forum.pfsense.org/index.php/topic,42664.msg220385.html#msg220385

Ok, So lets start.

Compiling in 8.1 with no args results on working instalation on pfsense.

I will try it on 64 bits
« Last Edit: December 07, 2011, 09:13:23 pm by marcelloc »

Offline marcelloc

  • Hero Member
  • *****
  • Posts: 13408
  • Karma: +592/-7
    • View Profile
Re: Dansguardian package for 2.0
« Reply #1 on: December 07, 2011, 09:53:12 pm »
amd64 package to dansguardian 2.10 stable version download link

Important note about dansguardian:
DansGuardian 2 is:

  • licensed under the GPL version 2 with permission to link to OpenSSL
  • Open Source
  • Free Software where 'Free' means Freedom
  • freely (no cost) downloadable from this site for non-commercial use
  • freely (no cost) downloadable from this site for general purpose unix distributions like FreeBSD, Debian, Fedora, Ubuntu, etc
  • not freely downloadable from this site for installation by 3rd parties charging for installation or support
  • not freely downloadable from this site for commercial use
  • a registered trade mark of Daniel Barron
  • copyright Daniel Barron

So, if you want dansguardian for comercial use, buy a licence since you start using it.

« Last Edit: December 07, 2011, 10:09:42 pm by marcelloc »

Offline JackL

  • Hero Member
  • *****
  • Posts: 1426
  • Karma: +25/-0
    • View Profile
    • ConexTI
Re: Dansguardian package for 2.0
« Reply #2 on: December 08, 2011, 04:36:06 am »
So, if you want dansguardian for comercial use, buy a licence since you start using it.

To better understand the license and distribution of access DansGuardian: http://dansguardian.org/?page=copyright2

[]'s
Jack
Treinamentos de Elite: http://sys-squad.com
Soluções: http://conexti.com

Offline ZGruk

  • Jr. Member
  • **
  • Posts: 36
  • Karma: +0/-0
    • View Profile
Re: Dansguardian package for 2.0
« Reply #3 on: December 08, 2011, 10:43:28 am »
Here are some notes about my freeBSD installation that I got dansguardian from:

I installed it in VirtualBox. Before I installed either squid or dansguardian, I installed the virtual box "helper" package that is optionally included in the freeBSD installation. (you choose to add a bunch of packages during the install process and then actually unpack the packages as needed later) During the install process for the helper package, it downloaded dozens of other dependency packages. Some of these may have been needed for the squid and dansguardian installations. Neither dansguardian or squid required that I install any other dependencies before they worked.

running
Code: [Select]
find / dansguardian will find all the dansguardian files you need (the ones I put in the tar file).

The dansguardian version I used was 2.12.0.0 alpha 32 bit. I think it's safe to assume that the stable 2.10 version would work the same. I don't think the 64 bit version should have any problems either.

Offline marcelloc

  • Hero Member
  • *****
  • Posts: 13408
  • Karma: +592/-7
    • View Profile
Re: Dansguardian package for 2.0
« Reply #4 on: December 08, 2011, 11:45:36 am »
If you use freebsd ports, after compiling dansguardian stable version, you can do a make package to build a package instalation file.

That's what i did in x64 version.

Just install squid package and then

pkg_add -r https://github.com/downloads/marcelloc/pfsense-packages/dansguardian-2.10.1.1_1.amd64.tbz


Offline marcelloc

  • Hero Member
  • *****
  • Posts: 13408
  • Karma: +592/-7
    • View Profile
Re: Dansguardian package for 2.0
« Reply #5 on: December 08, 2011, 09:42:01 pm »
64bits pfsense binary package to dansguardian 2.10 stable version download link

32bits pfsense binary package to dansguardian 2.10 stable version download link

Important note about dansguardian:
DansGuardian 2 is:

  • licensed under the GPL version 2 with permission to link to OpenSSL
  • Open Source
  • Free Software where 'Free' means Freedom
  • freely (no cost) downloadable from this site for non-commercial use
  • freely (no cost) downloadable from this site for general purpose unix distributions like FreeBSD, Debian, Fedora, Ubuntu, etc
  • not freely downloadable from this site for installation by 3rd parties charging for installation or support
  • not freely downloadable from this site for commercial use
  • a registered trade mark of Daniel Barron
  • copyright Daniel Barron

So, if you want dansguardian for comercial use, buy a licence since you start using it.

To understand DansGuardian license and distribution take a look on http://dansguardian.org/?page=copyright2

Offline JackL

  • Hero Member
  • *****
  • Posts: 1426
  • Karma: +25/-0
    • View Profile
    • ConexTI
Re: Dansguardian package for 2.0
« Reply #6 on: December 09, 2011, 07:17:56 am »
Show of ball marcello ... Congratulations again for the work!

I made sure to add a blog post in our reporting "good news": http://www.pfsense-br.org/blog/2011/12/dansguardian-2-10-1-1-no-pfsense-2-0/

Do you have plans to develop a management interface for the GUI?

[]'s
Jack
Treinamentos de Elite: http://sys-squad.com
Soluções: http://conexti.com

Offline marcelloc

  • Hero Member
  • *****
  • Posts: 13408
  • Karma: +592/-7
    • View Profile
Re: Dansguardian package for 2.0
« Reply #7 on: December 11, 2011, 04:38:52 pm »
Do you have plans to develop a management interface for the GUI?

Yes, but just after finishing mailscanner package gui.

Offline JackL

  • Hero Member
  • *****
  • Posts: 1426
  • Karma: +25/-0
    • View Profile
    • ConexTI
Re: Dansguardian package for 2.0
« Reply #8 on: December 12, 2011, 05:48:05 am »
Yes, but just after finishing mailscanner package gui.

All right marcelloc!

one thing at a time! ;-)

[]'s
Jack
Treinamentos de Elite: http://sys-squad.com
Soluções: http://conexti.com

Offline marcelloc

  • Hero Member
  • *****
  • Posts: 13408
  • Karma: +592/-7
    • View Profile
Re: Dansguardian package for 2.0
« Reply #9 on: December 27, 2011, 06:50:51 am »
I've started dansguardian gui for pfsense.

I'll base gui on dansguardian 2.12 version.

Here are links to 2.12 packages

i386


x64

Offline Cino

  • Hero Member
  • *****
  • Posts: 1516
  • Karma: +61/-2
    • View Profile
Re: Dansguardian package for 2.0
« Reply #10 on: January 04, 2012, 08:54:40 pm »
marcelloc, as always nice work! I see you're already adding files to the github... Can't wait to test the package out when its ready for beta testing. Question, since squid is a requirement; will the package state that squid needs to be installed first? I ask because I've been using squid3 and when I added squidguard it removed the binaries for squid3 and replaced them with squid2.. No biggy since I was able to rectify from the cmdline. But other users may not be so lucky.

something to think of

Offline marcelloc

  • Hero Member
  • *****
  • Posts: 13408
  • Karma: +592/-7
    • View Profile
Re: Dansguardian package for 2.0
« Reply #11 on: January 04, 2012, 10:46:42 pm »
Hi cino, good to see that this package will be usefull for pfsense.

I can publish this package without forcing a specific version of squid.

If dansguardian do not find it's dependencies, then pkg_add will look for 2.x squid version.

One think that I observed is that all good stuff from squid is in squidguard so I think that this first version will be able to replace havp portion of proxy solution as many people use time and group acls.

The result will be something like

dansguardian -> squid -> squidguard

or

squid -> squidguard -> dansguardian


I was planning to finish dansguardian.inc this week but mailscanner initialization was buggy and starting endless processes and killing machine resources. It's fixed now but I need to monitor it to be 100% sure it's fixed.

Offline rnsc

  • Jr. Member
  • **
  • Posts: 58
  • Karma: +0/-0
    • View Profile
Re: Dansguardian package for 2.0
« Reply #12 on: January 19, 2012, 07:28:46 pm »
It makes sense to me that dansguardian would be closest to the WAN so that it filters things once, then they are cached by squid.  Later requests would be serviced by squid without having to be filtered by dansguardian again.  This will be faster.

If squid is closest to the WAN and a browser request goes to dansguardian first, then dans will re-filter every request for the same page, even though it is simply coming from the local squid cache.  This will be slower.

About squidguard, why do we need squidguard?  Doesn't dansguardian support blacklists also?  Or does squidguard provide functionality that dansguardian does not?

Finally, thank you VERY VERY much for doing this.

--Ray

Offline marcelloc

  • Hero Member
  • *****
  • Posts: 13408
  • Karma: +592/-7
    • View Profile
Re: Dansguardian package for 2.0
« Reply #13 on: January 19, 2012, 08:11:45 pm »
About squidguard, why do we need squidguard?  Doesn't dansguardian support blacklists also?  Or does squidguard provide functionality that dansguardian does not?

Squidguard is very well implemented in pfsense and also has timegroup lists.

Blacklists are implemented to dansguardian as well content filtering.

If I do not find a way to do time groups in dansguardian(or in squid) as squidguard does we will still need it.

Current status is still under devel(80% done).
This is the most complex packages I ever every worked on, I hope it get usefull for everybody.

Donations are always welcome  ;D


Offline marcelloc

  • Hero Member
  • *****
  • Posts: 13408
  • Karma: +592/-7
    • View Profile
Re: Dansguardian package for 2.0
« Reply #14 on: January 25, 2012, 09:59:22 pm »
Current status

What is already done:

  • Package gui can start and stop dansguardian 2.12 daemon
  • dansguardian.conf 100% build via gui
  • filtergroupsfiles (since version 2.8 dansguardian accepts up to 99 groups)
  • userlist and group association tab
  • clamav integration
  • Blacklists categories association in groups

What is under devel:

  • Blacklist downloads
  • test ssl filtering support available on 2.12
  • Integration with squid/squidguard

Dansguardian has almost 40 config files. I had no idea of that when I started writing this package  :P