Recommended Posts

You would of had to have started it - just installing the package does not start it, and there are 2 versions of it - atleast on the 2.0 branch there is a

squid 2.7.9_4

squid3 3.1.9

I can fire up a 1.2.3 branch virtual to take a look what might be going on..

You would of had to have started it - just installing the package does not start it, and there are 2 versions of it - atleast on the 2.0 branch there is a

squid 2.7.9_4

squid3 3.1.9

I can fire up a 1.2.3 branch virtual to take a look what might be going on..

There was only one branch on mine, i am sure it was squid 2.7.9_4 but i would need to 10000% check.

I reckon i might need to start it up... :blush:

Also Neowin Search is not working for me today, keep getting DB errors, you don't know where that BBC.co.uk article is do you?

Here is the thread about blocking bbc.co.uk he was trying to do it with host files and dns, etc. Which you just can not do for what he wanted which was blocking /news not the entire domain

https://www.neowin.net/forum/topic/975926-cannot-banblock-bbc-news-site/

Its a bit long - but I followed up with how to do it with squid and squidguard and showed it blocking the /news -- read through it, we got on a side track of using a firefox addon to block specific urls, he was just looking to block himself from accessing sites ;) (no willpower)

The thread got on a few different tangents on what can and can not be blocked with dns, in the end what he wanted was specific URL blocking - which you need a proxy, etc.

Here is link to last post where I show it blocking exactly what he wanted and what I installed on pfsense and the rule I created to block /news and how you could still access main site but not /news

https://www.neowin.net/forum/topic/975926-cannot-banblock-bbc-news-site/page__view__findpost__p__593706004

Here is another thread where I show output of the lightsquid reporting showing traffic from my wifes machine, etc. When I had it running from the above thread - but have removed it since, when you update pfsense before the RC1 it was reinstalling all the packages took quite a bit of time to have the machine back up and working, etc. So I removed all the packages I really didn't need

https://www.neowin.net/forum/topic/978142-website-tracking/

You can block a specific IP from accessing any specific IP or protocols all together just in the firewall, ie you could say IP 192.168.1.120 can not go outbound on port 80, 443 (http, https) for example in the normal firewall.

You would use squidgard if you want to block on categories or specific urls, but if just want to block all access, or limit access to specific IPs on specific ports this can be done in the normal firewall, you don't need a proxy to do that sort of filtering.

Squid also provides for authing to allow access if you want - and can be setup in a transparent proxy mode where all traffic will flow through it, or have to point the machine to the proxy port on the pfsense box, etc.

What exactly do you want to block or allow? And we can work out the best/easiest way to do that. Be it with normal firewall rules or with proxy.

yeah if your looking to just block based upon domain name, which could be a whole netblock for those types of domains it best to use a url based filter via a proxy vs a firewall rule which would be based upon ip, iprange, protocol, ports, etc.

If you didn't want say 192.168.33.100 to have ANY internet access, then that would be simple firewall rule - deny source 192.168.33.100 dest ANY port http, https

edit: now you could create a alias for the url that should work

post-14624-0-97153100-1300211873.jpg

So if only a few domains you could get by with this I would think.

quick read of the error shows something about blacklist file not being there, did you tell it to use a blacklist without downloading them first?

Let me look at the error again.

When exactly do you get that error, check that enabled, then click apply, then click save.

When i first installed it it said there was no blacklist file available but after reading the wiki today it does say i should of downloaded one from the GUI.

I am downloading one now and will try again in a second to see if that has resolved the error.

:whistle:

EDIT: Error has gone however when i turn on SquidGuard EVERYTHING gets blocked.

I had the same issue with everything being blocked, just with squid installed - went into disk cache and saved, then access control then saved - and working.

before I did that everywhere just sent me to the pfsense page. Uninstall the squidguard until you have squid working.

Like I said im on 2.0 code, I can fire up a 1.2.3 box in virtual later tonight.

Other thing I noticed is Im pointing to my pfsense box as dns. In that alternate dns near the bottom of the page, I point to my pfsense IP for dns 192.168.1.253 in my case.

Squidguard has now been removed i have entered my pfsense ip into that alternate DNS box at the bottom of the page like you said, gone to cache mgmt and SAVED gone to access control and clicked SAVE and now i am here typing this so that appears to be working.

Is there a specific way i can check if Squid is working on it's own before i put squidguard back on?

Rich

Found the problem, when i turn squidguard on it puts this in the custom options on the squid page

If i remove this it works, but my question is what does it do?

redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf;redirector_bypass on;redirect_children 3

Edit: If you remove this from the custom options SquidGuard changes to STOPPED.

you need those for quidguard to work.. But sure you can block something just in squid to verify its working.

Ok now that you have squid up and running and internet access is working, let me install the squidgard and see whats up with it.

http://doc.pfsense.org/index.php/SquidGuard_package

edit: ok installed the package, went through the instructions for squidguard, not even using blacklists

Then

created custom list,

post-14624-0-17848000-1300224317.jpg

And put in facebook.com and looks what you get

post-14624-0-70146500-1300224307.jpg

  • Like 3

to get blacklist to work, once you have downloaded and picked what categories.. make sure on the bottom of general proxy filter page you put in the location LOCAL

note: bottom of page says

Enter FTP, HTTP or LOCAL (pfSense) URL blacklist archive, or leave blank.

Once you have a black listed loaded under targets you should see all the categories and you can set to block, allow, etc

post-14624-0-91327700-1300224593.jpg

also make sure once you make any changes to anything on the proxy filter to hit the apply button in the general proxy filter page and then save. Working smooth as silk here!

And then sure on the bottom of the proxy server page you should see the custom stuff

redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf;redirector_bypass on;redirect_children 3

  • Like 2

you need those for quidguard to work.. But sure you can block something just in squid to verify its working.

Ok now that you have squid up and running and internet access is working, let me install the squidgard and see whats up with it.

http://doc.pfsense.org/index.php/SquidGuard_package

edit: ok installed the package, went through the instructions for squidguard, not even using blacklists

Then

created custom list,

post-14624-0-17848000-1300224317.jpg

And put in facebook.com and looks what you get

post-14624-0-70146500-1300224307.jpg

It just isn't working, i disabled the blocklist tried a custom filter everything is blocked.

What is in your custom options?

you have to set default to ALLOW if using squidguard.

post-14624-0-68168700-1300224926.jpg

I posted options off squid page in the post above on an edit.

If you want open up pfsense gui to remote access and PM the details ip and username and pass and will take a look.

  • Like 2
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • So size is the ONLY selling point????? People have been plugging in PC's to TV's in living rooms for 20+ years. I would take a bigger box for more peformance. Also lot and lots of SFF/Mini ITX build guides out there.
    • My point is, if you buying this instead of a console for TV purposes, that you need to understand that you will not be able to play the most popular MP games with Steam OS. Now if you are not into those games, and into some of the perputual alpha/beta games on Steam then this is an option. I would argue a gaming PC would be the better route, more expensive but take the 1k -1.4k you are about to spend on this thing and build a better one. Because it is running Linux you can overide its 1080p settings. However The Verge complained about its 1080p cap and how you would have to get around it at the CLI, so someone buying this instead of a PS5 or Xbox might have a challege on their hands.
    • A review of Synology's BeeCamera software for the BeeStation Plus by Christopher White Synology is leaning into the BeeStation and the BeeStation Plus, and it's easy to understand why. While power users will want something more customizable, the BeeStation and its more powerful sibling, the BeeStation Plus, are great for those who want a device they can simply plug in, click a few buttons, and have it work as their own personal cloud. Until recently, the device was mostly used for the storage of files, photos, and videos, and with the Plus model, you could install and stream media through Plex. Synology recently released a new free application for the BeeStation Plus called BeeCamera, which is basically a stripped-down version of Surveillance Station. First, let's get the confusing naming out of the way. While you might initially think that BeeCamera is a physical device, perhaps a camera that Synology created specifically for the BeeStation Plus, that would be incorrect. BeeCamera is simply the name for the application that runs on the NAS and on your mobile device. I think the marketing team missed the mark here, but it does fit the other naming on the device, like BeePhotos and BeeFiles, I guess. Camera Support As of right now, only Synology-branded cameras are supported, which many will see as a callback to the drive locking the company implemented and then backtracked on. That said, while I 100% disagree on drive locking, I agree that camera locking for a device made to simply plug and play is the right decision. The whole point of the BeeStation line is simplicity. There are currently three camera model lines available, a wireless device for indoor use, and two PoE models for external use. CC400W (Wi-Fi): Plug it into power using the included power adapter, and connect it to your wireless network. This camera is rated only for indoor use and is the one I was provided to review the BeeCamera. $198.36, in line with the Unifi G6 Compact. BC510 (PoE): A bullet-style camera. Connect it to an Ethernet cable that is providing Power over Ethernet (PoE). This camera is rated for both indoor and outdoor use. $240. TC510 (PoE): A dome-style camera. Connect it to an Ethernet cable that is providing Power over Ethernet (PoE). This camera is rated for both indoor and outdoor use. $240. Although this isn't a review of the actual Synology camera, I did want to note that a positive for the Synology CC400W is that it uses a magnetic base. This means you can mount it on any magnetic surface, which is pretty handy. However, a downside to the camera is that it's powered by a built-in USB cable that's about six and a half feet (two meters) long. This means that the cable will probably be either too long or too short, but more importantly, if the cable is damaged at all, you'll likely need to buy an entirely new camera because there doesn't appear to be a way to replace it, unlike many competitors, like the Unifi G6 Instant. Hopefully, this is something Synology addresses in a future revision of the hardware. The BeeStation Plus supports up to four cameras. Setup The setup of BeeCamera is, like everything in the BeeStation family, very straightforward. Simply make sure you're on at least version 1.5 of the BeeStation OS, and BeeCamera is automatically installed on the device. BeeCamera Setup Screenshots Setting up the CC400W was just as easy. Plug it in, open up the BeeCamera app, and follow the on-screen steps to add the camera. During this process, you'll configure the camera name and how many days of retention you want to keep. The system will also automatically update the firmware for you. The whole thing took only a couple of minutes, excluding the time it took for the camera to update the firmware. Once the camera is connected to the BeeStation Plus, you can manage the various camera settings within the app, although there aren't many to choose from. You're able to configure whether the microphone will record audio (some privacy laws may preclude you from recording it), select what codec to use (H.264 or H.265), configure the color and exposure of the camera, and determine what data you want to overlay onto the video. Finally, you can set up AI detections so that BeeCamera will alert you if it sees certain things. These are all of the common detections you would expect in a camera system, such as people, pets, and vehicles. Under people and vehicles, you can also add extra monitoring for lingering and congestion detection, although pets are currently in "Lab" and therefore have no extra features yet. Recording in 4K using H.265 for 30 days will take roughly 300 GB of storage, which is very reasonable for most regular households, as the BeeStation Plus has 8TB of native storage. If you want to set up detection zones, you can. These are areas that BeeCamera will look at for the various detections, and are helpful if, for example, there's a tree in your frame and you don't want to be notified each time the wind makes the branches move around in the frame. Finally, you can also schedule when the camera should and should not be recording, which is a very useful feature. For example, you may want to record only at night when you're sleeping, but not during the day when you're up and about the house, so you can easily shut the camera off between 8 am and 10 pm. Each hour of each day can be configured to record continuously, only upon a detection event, or disabled completely. You can't fine-tune to record at a specific time, though, only hourly blocks on the hour. Daily Use The best part of BeeCamera is that it's easy and just works. If you only care about being notified when things happen, the mobile app sends those notifications and lets you click the button to bring up the video and see what's going on. For example, when I went out of town and had the camera pointed at the cat tower in our hallway, it was nice to be able to drop in and check that my furry friends were doing okay without me. Initiating the remote connection to the BeeStation Plus through the app is very responsive, but this will heavily depend on your ISP. In my case, using Xfinity, I'm able to go from starting the app to seeing live video in roughly three seconds, which is about the same amount of time it takes to connect to my Unifi UNVR system that costs much more. If you want to see footage from a specific day and time, you can do so using the calendar icon. You can also scroll through the timeline, looking for detections that are labeled in blue (vs. the normal gray when there's nothing of interest). There are buttons that let you go to the last/next detection on the timeline, which is helpful if you missed the notification on your mobile device. That's where the ease of use stops, though. While you can download clips that are flagged by detection, there's apparently no way to select generic time frames you're interested in, and the only place to download is to your phone. In addition, sharing a video shares the actual video, not just a link back to your BeeStation Plus. While that's good from a security and privacy perspective, it's a little awkward for sharing large videos. Limitations While the ease of implementation is great, there are some things that are lacking from BeeCamera. The most obvious is that there is no way to view the footage on the desktop. You can log in to the BeeStation Plus to see how much storage BeeCamera is using, but unlike BeePhotos and BeeFiles, there is no BeeCamera on the web console to manage or view footage. This means you'll be viewing all of your security footage on your mobile device, which is pretty limiting. In addition, there's no way to download the video to your PC without first using your phone as the intermediary. The one exception to this is that you can use BeeFiles to see the raw MP4 files. They're saved in 5-minute increments, and it's just raw data with no detection information or any other way to identify what any of them are. The lack of a way to interact with BeeCamera on the desktop also makes configuration of the cameras more difficult. For example, trying to set up detection zones using a tiny screen and your finger to draw boxes is more cumbersome than it needs to be. This reinforces the idea that BeeCamera is not made for power users. It's also missing some of the more advanced functionality of Surveillance Station. For example, I couldn't find a way to say, "Alert me if the thing in this zone is no longer there." Another major deficiency with BeeCamera, and a feature I suspect may come out in the future, is that while it can detect generic people, there is no specific facial recognition yet. This is an interesting omission, given the fact that other Synology tools can detect specific individuals, and competitors such as Unifi Protect also do it. This is probably a software limitation, so we will have to wait and see if this feature is added in the future. Conclusion If you need a security guard to monitor surveillance cameras to make sure your property is secure, then BeeCamera is not the solution for you. That said, you probably wouldn't be using a BeeStation Plus as the brains behind the system either. BeeCamera (and BeeStation in general) is clearly aimed at households that want to avoid sending personal data to Google and Amazon, and now want to add some cameras to keep an eye on their home and their pets while they're away. BeeCamera excels at doing this. The target market isn't interested in creating cases, tying multiple views together in a single pane of glass, or the like, and for the intended use case, the system works great. Where it starts to fall apart a bit is with more advanced features. Not being able to use a desktop app is a major compromise in my opinion, and having to do all of the configuration on a mobile device is annoying, but not impossible. If you don't want to have a full-fledged NAS device in your home, but still want control over your data (or maybe want an easy way to backup your data for World Backup Day), and want to add a couple of cameras to keep an eye on your house and your pets, this is a great, cheap, and easy way to go, and I suspect more functionality will come over time. If Synology releases a desktop app or at least a way to configure cameras and view footage on a desktop browser, this would be a near-perfect solution for a general home user. As an Amazon Associate, we earn from qualifying purchases.
    • I forgot to add on my comment that when robots will take physical jobs, it's when they become more cheaper to manufacture and sell. That will be the starting point of the end to lanscaping, trash pickup, factory jobs, etc.
    • How many people can actually use a 2.5gig ethernet port? Most people do not have more than a 1gig internet connection, heck most have less than that. Most people at home do not have a switch that has multiple 2.5gig ports either.
  • Recent Achievements

    • One Month Later
      timbobit earned a badge
      One Month Later
    • One Month Later
      nates earned a badge
      One Month Later
    • Week One Done
      Almohandis earned a badge
      Week One Done
    • Rookie
      dorf went up a rank
      Rookie
    • First Post
      mike_rumble earned a badge
      First Post
  • Popular Contributors

    1. 1
      +primortal
      477
    2. 2
      +Edouard
      172
    3. 3
      PsYcHoKiLLa
      104
    4. 4
      Michael Scrip
      88
    5. 5
      neufuse
      70
  • Tell a friend

    Love Neowin? Tell a friend!