Netgate SG-1000 microFirewall

Author Topic: Unofficial E2guardian package for pfSense  (Read 35482 times)

0 Members and 1 Guest are viewing this topic.

Offline bedmakaveli

  • Newbie
  • *
  • Posts: 5
  • Karma: +0/-0
    • View Profile
Re: Unofficial E2guardian package for pfSense
« Reply #570 on: September 17, 2017, 12:05:39 pm »
Take a look on report options. You can redirect to a external url or chance current template.

Thanks marcelloc for the reply.
But how can I redirect to the report page when I try to access to an https site?
It seems to work only for http sites.

Intercepting SSL. You can setup it on group settings but you need to install certificate authority on clients.

Thanks Marcello, it works like a charm now. I've tried with a self signed CA.

Thanks again!

Offline pfsensation

  • Full Member
  • ***
  • Posts: 217
  • Karma: +3/-0
    • View Profile
Re: Unofficial E2guardian package for pfSense
« Reply #571 on: October 27, 2017, 03:14:22 pm »
Hi Marcello,

I'm still getting crashes, can you please investigate this as there's no where else that will provide support for this setup... I'm currently on pfsense 2.4 with the latest version of E2 Guardian.

Offline modinadar

  • Newbie
  • *
  • Posts: 2
  • Karma: +0/-0
    • View Profile
Re: Unofficial E2guardian package for pfSense
« Reply #572 on: November 16, 2017, 04:24:01 am »
Hello dear users of this forum. I have a question about this package. As much as I'm not trying to set up "Phrase Lists", it allways skips to sites with these words. Perhaps this is due to the fact that I use phrases from my language (Russian, I have not tried English words). I set up the mitm, it blocks everything well, "serach engines" works also only on English words, but it's not surprising. Simply Russian characters are encoded in some% as% dc% 5g ... and so on. The only way for me to block using "Phrase lists", as I read on a Russian-language forum that the predecessor of Dansguardian knew how to do it, but there were difficulties with encodings. In general, it may be necessary to include some parameter in the configuration about which I do not know.
Sorry for my english, I used an interpreter.

Offline pfsensation

  • Full Member
  • ***
  • Posts: 217
  • Karma: +3/-0
    • View Profile
Re: Unofficial E2guardian package for pfSense
« Reply #573 on: November 23, 2017, 05:31:16 pm »
Thanks to some brilliant help from the Pfsense community, I think my crashes are finally resolved with some bootloader.conf.local addons.

It'll be nice to see this package kept up to date, especially as V5 is coming out soon!

Offline pfsensation

  • Full Member
  • ***
  • Posts: 217
  • Karma: +3/-0
    • View Profile
Re: Unofficial E2guardian package for pfSense
« Reply #574 on: November 23, 2017, 05:35:07 pm »
Hello dear users of this forum. I have a question about this package. As much as I'm not trying to set up "Phrase Lists", it allways skips to sites with these words. Perhaps this is due to the fact that I use phrases from my language (Russian, I have not tried English words). I set up the mitm, it blocks everything well, "serach engines" works also only on English words, but it's not surprising. Simply Russian characters are encoded in some% as% dc% 5g ... and so on. The only way for me to block using "Phrase lists", as I read on a Russian-language forum that the predecessor of Dansguardian knew how to do it, but there were difficulties with encodings. In general, it may be necessary to include some parameter in the configuration about which I do not know.
Sorry for my english, I used an interpreter.

For this matter you may be better off bringing it up in the E2 Guardian GitHub page. I believe there was an issue raised for Russian character encoding.

Offline justroach

  • Newbie
  • *
  • Posts: 2
  • Karma: +0/-0
    • View Profile
Re: Unofficial E2guardian package for pfSense
« Reply #575 on: December 04, 2017, 11:00:15 pm »
Thanks to some brilliant help from the Pfsense community, I think my crashes are finally resolved with some bootloader.conf.local addons.

Think you could share please?

Offline pfsensation

  • Full Member
  • ***
  • Posts: 217
  • Karma: +3/-0
    • View Profile
Re: Unofficial E2guardian package for pfSense
« Reply #576 on: December 06, 2017, 05:18:26 am »
Thanks to some brilliant help from the Pfsense community, I think my crashes are finally resolved with some bootloader.conf.local addons.

Think you could share please?

Are you having crashes too? If so do let us know more in terms of your specs.

Here's the lines I'm using currently.

kern.cam.boot_delay=10000
kern.ipc.nmbclusters=1000000
legal.intel_ipw.license_ack=1
legal.intel_iwi.license_ack=1
hw.re.enable_msix=0
hw.em.enable_msix=0
hw.pci.enable_msix=0
net.inet.tcp.tso=0
hw.em.fc_setting=0
hw.re.fc_setting=0

Do keep us informed so we can get these issues ironed out!

Offline pfsensation

  • Full Member
  • ***
  • Posts: 217
  • Karma: +3/-0
    • View Profile
Re: Unofficial E2guardian package for pfSense
« Reply #577 on: December 09, 2017, 10:18:13 am »
Those lines made the system more stable, but the system still seems to crash after about 7 days or so. I have fully confirmed that it's related to E2Guardian. As without E2 Guardian on a system with the same setup with all my other plugins, it's all good. The crash dump also shows E2 Guardian threads going a bit haywire. @Marcelloc please have a look into this, especially as new updates have been released by the E2 Guardian team.

Offline Presbuteros

  • Jr. Member
  • **
  • Posts: 65
  • Karma: +4/-0
    • View Profile
Re: Unofficial E2guardian package for pfSense
« Reply #578 on: December 10, 2017, 03:29:27 am »
On a fresh install:
When I navigate to ACLs>Site Lists and click edit on the default list the Save button is partially blocked by the lower banner.
Thank you for your work on this package.

Offline slim2016

  • Jr. Member
  • **
  • Posts: 36
  • Karma: +1/-0
    • View Profile
Re: Unofficial E2guardian package for pfSense
« Reply #579 on: December 24, 2017, 05:42:03 am »
My E2guardian won't start after a reboot, and the only way to get it working again is to reinstall the package. Anyone else getting the same problem?

Offline pfsensation

  • Full Member
  • ***
  • Posts: 217
  • Karma: +3/-0
    • View Profile
Re: Unofficial E2guardian package for pfSense
« Reply #580 on: December 28, 2017, 01:03:01 pm »
My E2guardian won't start after a reboot, and the only way to get it working again is to reinstall the package. Anyone else getting the same problem?

I have the same issue from time to time, after pfsense upgrades a reinstall is pretty much a must. I still seem to get crashes... I wish this would get updated.

Offline slim2016

  • Jr. Member
  • **
  • Posts: 36
  • Karma: +1/-0
    • View Profile
Re: Unofficial E2guardian package for pfSense
« Reply #581 on: December 28, 2017, 03:23:19 pm »
Hi guys!

Version 0.4.2 is ready for download.

whats new:
  • Included sample logic rotine to html report page, so you can back to original file at any time if you want
  • Improved e2gerror logic and added a denied only log feature to the package
  • Added e2guradian real time tab, processing e2guardian default logs, e2g squid format logs and logs form e2gerror.php page



My real time logs don't show up like this. All the ip's are the same '127.0.0.1' on mine and it doesn't show me the 'detailed denied logs'

Offline slim2016

  • Jr. Member
  • **
  • Posts: 36
  • Karma: +1/-0
    • View Profile
Re: Unofficial E2guardian package for pfSense
« Reply #582 on: December 30, 2017, 10:13:39 am »
I've managed get the ip's showing by using these settings :

Code: [Select]
forwardedfor = on
usexforwardedfor = on

But how how get it to show the 'Default Denied Log' ?