pfSense Support Subscription

Author Topic: Dansguardian package for 2.0  (Read 108955 times)

0 Members and 1 Guest are viewing this topic.

Offline Cino

  • Hero Member
  • *****
  • Posts: 1050
    • View Profile
Re: Dansguardian package for 2.0
« Reply #15 on: January 27, 2012, 11:35:07 am »
@marcelloc i see you published the package today. I haven't installed it yet since I have a question. I looked at the deps and I knew squid could be an issue. I'm running squid3 on my box for ipv6. Do you see an issue if I try to install the package? I have no problem manually fixing it on my box if needed... good example was when i install squid-guard, it uninstall squid3 in-place of squid2... so i manually uninstalled squid2 and put squid3 back in... after that, life was good.

Offline marcelloc

  • Hero Member
  • *****
  • Posts: 9954
    • View Profile
Re: Dansguardian package for 2.0
« Reply #16 on: January 27, 2012, 11:43:51 am »
I do not force squid install, so if you have version 3, it probably do not install version 2.x.

I'm also checking some first issues from my devel machine to a clean vm.

Offline iamzam

  • Jr. Member
  • **
  • Posts: 43
    • View Profile
Re: Dansguardian package for 2.0
« Reply #17 on: January 27, 2012, 11:50:54 am »
Hello marcelloc i installed dansguardian on my pfsense (IPv6) 2.1-DEVELOPMENT (amd64).  It seemed to install correctly, no errors in the installer that I noticed, but the service won't start.

In the system log (UI) i see this:

php: /pkg_edit.php: The command 'chown -R nobody:nobody /usr/loca/etc/dansguardian' returned exit code '1', the output was 'chown: /usr/loca/etc/dansguardian: No such file or directory'

note the path:  /usr/loca/etc/dansguardian

I checked /usr/local/etc/dansguardian and it does exist  and has lots of files so this may just be a typo somewhere?

I ran this command to look for "/usr/loca/":

grep -r "/usr/loca/" /usr/local/*
/usr/local/pkg/dansguardian.inc:   mwexec("chown -R $daemonuser:$daemongroup /usr/loca/etc/dansguardian");


I also see this error in the system log:
php: /pkg_edit.php: The command '/usr/local/etc/rc.d/dansguardian stop' returned exit code '127', the output was '/usr/local/etc/rc.d/dansguardian: not found'

I looked in the file system for /usr/local/etc/rc.d/dansguardian and it doesn't exist there.


Below is everything in /var/log/system.log relating to dansguardian:

Jan 27 12:22:04 pfs php: /pkg_mgr_install.php: Beginning package installation for Dansguardian .
Jan 27 12:22:04 pfs check_reload_status: Syncing firewall
Jan 27 12:22:09 pfs php: /pkg_mgr_install.php: The command 'chown -R nobody:nobody /usr/loca/etc/dansguardian' returned exit code '1', the output was 'chown: /usr/loca/etc/dansguardian: No such file or directory'
Jan 27 12:22:09 pfs php: /pkg_mgr_install.php: The command 'chown -R nobody:nobody /var/log/dansguardian' returned exit code '1', the output was 'chown: /var/log/dansguardian: No such file or directory'
Jan 27 12:22:09 pfs php: /pkg_mgr_install.php: The command '/usr/local/etc/rc.d/dansguardian stop' returned exit code '127', the output was '/usr/local/etc/rc.d/dansguardian: not found'
Jan 27 12:22:10 pfs php: /pkg_mgr_install.php: The command 'chown -R nobody:nobody /usr/loca/etc/dansguardian' returned exit code '1', the output was 'chown: /usr/loca/etc/dansguardian: No such file or directory'
Jan 27 12:22:10 pfs php: /pkg_mgr_install.php: The command '/usr/local/etc/rc.d/dansguardian stop' returned exit code '127', the output was '/usr/local/etc/rc.d/dansguardian: not found'
Jan 27 12:22:10 pfs check_reload_status: Reloading filter
Jan 27 12:24:09 pfs check_reload_status: Syncing firewall
Jan 27 12:24:09 pfs check_reload_status: Syncing firewall
Jan 27 12:24:09 pfs php: /pkg_edit.php: The command 'chown -R nobody:nobody /usr/loca/etc/dansguardian' returned exit code '1', the output was 'chown: /usr/loca/etc/dansguardian: No such file or directory'
Jan 27 12:24:09 pfs php: /pkg_edit.php: The command '/usr/local/etc/rc.d/dansguardian stop' returned exit code '127', the output was '/usr/local/etc/rc.d/dansguardian: not found'
Jan 27 12:27:40 pfs check_reload_status: Syncing firewall
Jan 27 12:27:40 pfs check_reload_status: Syncing firewall
Jan 27 12:27:40 pfs php: /pkg_edit.php: The command 'chown -R nobody:nobody /usr/loca/etc/dansguardian' returned exit code '1', the output was 'chown: /usr/loca/etc/dansguardian: No such file or directory'
Jan 27 12:27:40 pfs php: /pkg_edit.php: The command '/usr/local/etc/rc.d/dansguardian stop' returned exit code '127', the output was '/usr/local/etc/rc.d/dansguardian: not found'
Jan 27 12:28:50 pfs check_reload_status: Syncing firewall
Jan 27 12:28:50 pfs check_reload_status: Syncing firewall
Jan 27 12:28:50 pfs php: /pkg_edit.php: The command 'chown -R nobody:nobody /usr/loca/etc/dansguardian' returned exit code '1', the output was 'chown: /usr/loca/etc/dansguardian: No such file or directory'
Jan 27 12:28:50 pfs php: /pkg_edit.php: The command '/usr/local/etc/rc.d/dansguardian stop' returned exit code '127', the output was '/usr/local/etc/rc.d/dansguardian: not found'



Thanks for your help!

Offline marcelloc

  • Hero Member
  • *****
  • Posts: 9954
    • View Profile
Re: Dansguardian package for 2.0
« Reply #18 on: January 27, 2012, 11:58:47 am »
Thanks for the feedback, there is a missing "l" on path.

I'm sitll looking for other issues, until commit the patches.


Offline marcelloc

  • Hero Member
  • *****
  • Posts: 9954
    • View Profile
Re: Dansguardian package for 2.0
« Reply #19 on: January 27, 2012, 01:42:15 pm »
Just published some fixes and changed version to 0.1.1

features not finished yet:

  • blacklist update frequency
  • ssl man in the middle feature
« Last Edit: January 27, 2012, 03:00:29 pm by marcelloc »

Offline Cino

  • Hero Member
  • *****
  • Posts: 1050
    • View Profile
Re: Dansguardian package for 2.0
« Reply #20 on: January 28, 2012, 10:48:45 am »
figured I would give this a try this morning. first thing i noticed, there is no menu option and I dont see it under status:services. But i'm able to access it by typing https://...../pkg_edit.php?xml=dansguardian.xml. and able to see it running via cmdline

allowed 127.0.0.1 access in the squid3 config and was able to use it... enabled the porn filter for testing and worked as designed! Great job man!!!  I haven't used dansguardian in years and forgot how complicate the config can be...

how does clamav update its virus def file?
« Last Edit: January 28, 2012, 11:06:16 am by Cino »

Offline marcelloc

  • Hero Member
  • *****
  • Posts: 9954
    • View Profile
Re: Dansguardian package for 2.0
« Reply #21 on: January 28, 2012, 11:09:57 am »
figured I would give this a try this morning. first thing i noticed, there is no menu option and I dont see it under status:services. But i'm able to access it by typing https://...../pkg_edit.php?xml=dansguardian.xml. and able to see it running via cmdline

Isn't there on second menu option?  ???

If tested on both amd64 and i386 but only on 2.0.1

I haven't used dansguardian in years and forgot how complicate the config can be...

I know that. Almost 40 config files  :P
I've created almost 80% of default config files during first apply/install process.

Offline Cino

  • Hero Member
  • *****
  • Posts: 1050
    • View Profile
Re: Dansguardian package for 2.0
« Reply #22 on: January 28, 2012, 11:20:49 am »
i am using 2.1-dev so it could because of that.. i did reboot the box and it took 2-3 minutes for it to get past the starting package... it started tho.

i'll mess with it some more but if other users arn't having the same issue... then its my setup.


Offline marcelloc

  • Hero Member
  • *****
  • Posts: 9954
    • View Profile
Re: Dansguardian package for 2.0
« Reply #23 on: January 28, 2012, 11:28:10 am »
i am using 2.1-dev so it could because of that.. i did reboot the box and it took 2-3 minutes for it to get past the starting package... it started tho.


I think It's calling sync process for every XML file during boot.

I'm trying to workaround it.

Offline Cino

  • Hero Member
  • *****
  • Posts: 1050
    • View Profile
Re: Dansguardian package for 2.0
« Reply #24 on: January 28, 2012, 01:29:48 pm »
i was able to get it to display in the services menu... i ended up re-installing just the gui items. cosmetic, but i would add it to the status: services menu down the road to know its running or not.

should i run a cron job to update the virus db for clamav (freshclam)? or is it built-in somehow?
« Last Edit: January 28, 2012, 01:52:37 pm by Cino »

Offline marcelloc

  • Hero Member
  • *****
  • Posts: 9954
    • View Profile
Re: Dansguardian package for 2.0
« Reply #25 on: January 28, 2012, 02:39:35 pm »
The first update from clamav is automatic when package detects that there is no database.

I will be an option on gui until I finish schedulle updates( blacklist and clamav)

Offline Cino

  • Hero Member
  • *****
  • Posts: 1050
    • View Profile
Re: Dansguardian package for 2.0
« Reply #26 on: January 28, 2012, 02:49:01 pm »
thanks again and great work!! You have added some nice add-ons to pfsense over the last couple of months

no issue, but here are the processes on my box.. this is how i know its running:

Code: [Select]
: ps -aux | grep dan
clamav 13281  0.0  0.4 18036 14028  ??  INs   3:00PM   0:00.08 /usr/local/sbin/dansguardian
clamav 13525  0.0  0.2  7796  4692  ??  IN    3:00PM   0:00.03 /usr/local/sbin/dansguardian
clamav 13655  0.0  0.1  7796  4672  ??  IN    3:00PM   0:00.02 /usr/local/sbin/dansguardian
clamav 13759  0.0  0.5 19060 14840  ??  IN    3:00PM   0:00.43 /usr/local/sbin/dansguardian
clamav 14008  0.0  0.5 18036 14172  ??  IN    3:00PM   0:00.35 /usr/local/sbin/dansguardian
clamav 14105  0.0  0.5 18036 14120  ??  IN    3:00PM   0:00.02 /usr/local/sbin/dansguardian
clamav 14199  0.0  0.5 18036 14120  ??  IN    3:00PM   0:00.02 /usr/local/sbin/dansguardian
clamav 14385  0.0  0.5 18036 14264  ??  IN    3:00PM   0:00.87 /usr/local/sbin/dansguardian
clamav 14451  0.0  0.4 18036 13988  ??  IN    3:00PM   0:00.01 /usr/local/sbin/dansguardian
clamav 14466  0.0  0.4 18036 13988  ??  IN    3:00PM   0:00.01 /usr/local/sbin/dansguardian
clamav 14472  0.0  0.4 18036 13988  ??  IN    3:00PM   0:00.01 /usr/local/sbin/dansguardian
clamav 16150  0.0  0.4 18036 14052  ??  IN    3:40PM   0:00.00 /usr/local/sbin/dansguardian
clamav 16221  0.0  0.4 18036 14052  ??  IN    3:40PM   0:00.00 /usr/local/sbin/dansguardian
clamav 16515  0.0  0.4 18036 14052  ??  IN    3:40PM   0:00.00 /usr/local/sbin/dansguardian
clamav 16582  0.0  0.4 18036 14052  ??  IN    3:40PM   0:00.00 /usr/local/sbin/dansguardian
clamav 16676  0.0  0.4 18036 14052  ??  IN    3:40PM   0:00.00 /usr/local/sbin/dansguardian
clamav 16741  0.0  0.4 18036 14052  ??  IN    3:40PM   0:00.00 /usr/local/sbin/dansguardian
clamav 16763  0.0  0.4 18036 14052  ??  IN    3:40PM   0:00.01 /usr/local/sbin/dansguardian
clamav 16828  0.0  0.4 18036 14052  ??  IN    3:40PM   0:00.01 /usr/local/sbin/dansguardian
clamav 16843  0.0  0.4 18036 14052  ??  IN    3:40PM   0:00.01 /usr/local/sbin/dansguardian
clamav 17095  0.0  0.4 18036 14052  ??  IN    3:40PM   0:00.00 /usr/local/sbin/dansguardian
root   13272  0.0  0.0  3524  1252   0  S+    3:47PM   0:00.00 grep dan


Offline marcelloc

  • Hero Member
  • *****
  • Posts: 9954
    • View Profile
Re: Dansguardian package for 2.0
« Reply #27 on: January 28, 2012, 07:42:45 pm »
It's running very well.

I'll include service option too. Maybe tomorrow.

Offline marcelloc

  • Hero Member
  • *****
  • Posts: 9954
    • View Profile
Re: Dansguardian package for 2.0
« Reply #28 on: January 29, 2012, 08:45:37 pm »
version 0.1.2 is out with some fixes and improvements

  • improve blacklist import and category assign
  • include dansguardian on service
  • include log, daemon and config default xml options
  • fix some typos
  • Maybe a faster boot process (01:00 on virtualbox)

still working on...
  • SSL men in the middle feature
  • Blacklist and clamav update frequency

To avoid double dansguardian link on service menu(dansguardian and Dansguardian), remove 0.1.1 package before install 0.1.2
« Last Edit: January 29, 2012, 09:11:05 pm by marcelloc »

Offline Cino

  • Hero Member
  • *****
  • Posts: 1050
    • View Profile
Re: Dansguardian package for 2.0
« Reply #29 on: January 30, 2012, 09:21:33 am »
thanks for the update.. I've give it a try in a bit