Recommended Posts

You would of had to have started it - just installing the package does not start it, and there are 2 versions of it - atleast on the 2.0 branch there is a

squid 2.7.9_4

squid3 3.1.9

I can fire up a 1.2.3 branch virtual to take a look what might be going on..

You would of had to have started it - just installing the package does not start it, and there are 2 versions of it - atleast on the 2.0 branch there is a

squid 2.7.9_4

squid3 3.1.9

I can fire up a 1.2.3 branch virtual to take a look what might be going on..

There was only one branch on mine, i am sure it was squid 2.7.9_4 but i would need to 10000% check.

I reckon i might need to start it up... :blush:

Also Neowin Search is not working for me today, keep getting DB errors, you don't know where that BBC.co.uk article is do you?

Here is the thread about blocking bbc.co.uk he was trying to do it with host files and dns, etc. Which you just can not do for what he wanted which was blocking /news not the entire domain

https://www.neowin.net/forum/topic/975926-cannot-banblock-bbc-news-site/

Its a bit long - but I followed up with how to do it with squid and squidguard and showed it blocking the /news -- read through it, we got on a side track of using a firefox addon to block specific urls, he was just looking to block himself from accessing sites ;) (no willpower)

The thread got on a few different tangents on what can and can not be blocked with dns, in the end what he wanted was specific URL blocking - which you need a proxy, etc.

Here is link to last post where I show it blocking exactly what he wanted and what I installed on pfsense and the rule I created to block /news and how you could still access main site but not /news

https://www.neowin.net/forum/topic/975926-cannot-banblock-bbc-news-site/page__view__findpost__p__593706004

Here is another thread where I show output of the lightsquid reporting showing traffic from my wifes machine, etc. When I had it running from the above thread - but have removed it since, when you update pfsense before the RC1 it was reinstalling all the packages took quite a bit of time to have the machine back up and working, etc. So I removed all the packages I really didn't need

https://www.neowin.net/forum/topic/978142-website-tracking/

You can block a specific IP from accessing any specific IP or protocols all together just in the firewall, ie you could say IP 192.168.1.120 can not go outbound on port 80, 443 (http, https) for example in the normal firewall.

You would use squidgard if you want to block on categories or specific urls, but if just want to block all access, or limit access to specific IPs on specific ports this can be done in the normal firewall, you don't need a proxy to do that sort of filtering.

Squid also provides for authing to allow access if you want - and can be setup in a transparent proxy mode where all traffic will flow through it, or have to point the machine to the proxy port on the pfsense box, etc.

What exactly do you want to block or allow? And we can work out the best/easiest way to do that. Be it with normal firewall rules or with proxy.

yeah if your looking to just block based upon domain name, which could be a whole netblock for those types of domains it best to use a url based filter via a proxy vs a firewall rule which would be based upon ip, iprange, protocol, ports, etc.

If you didn't want say 192.168.33.100 to have ANY internet access, then that would be simple firewall rule - deny source 192.168.33.100 dest ANY port http, https

edit: now you could create a alias for the url that should work

post-14624-0-97153100-1300211873.jpg

So if only a few domains you could get by with this I would think.

quick read of the error shows something about blacklist file not being there, did you tell it to use a blacklist without downloading them first?

Let me look at the error again.

When exactly do you get that error, check that enabled, then click apply, then click save.

When i first installed it it said there was no blacklist file available but after reading the wiki today it does say i should of downloaded one from the GUI.

I am downloading one now and will try again in a second to see if that has resolved the error.

:whistle:

EDIT: Error has gone however when i turn on SquidGuard EVERYTHING gets blocked.

I had the same issue with everything being blocked, just with squid installed - went into disk cache and saved, then access control then saved - and working.

before I did that everywhere just sent me to the pfsense page. Uninstall the squidguard until you have squid working.

Like I said im on 2.0 code, I can fire up a 1.2.3 box in virtual later tonight.

Other thing I noticed is Im pointing to my pfsense box as dns. In that alternate dns near the bottom of the page, I point to my pfsense IP for dns 192.168.1.253 in my case.

Squidguard has now been removed i have entered my pfsense ip into that alternate DNS box at the bottom of the page like you said, gone to cache mgmt and SAVED gone to access control and clicked SAVE and now i am here typing this so that appears to be working.

Is there a specific way i can check if Squid is working on it's own before i put squidguard back on?

Rich

Found the problem, when i turn squidguard on it puts this in the custom options on the squid page

If i remove this it works, but my question is what does it do?

redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf;redirector_bypass on;redirect_children 3

Edit: If you remove this from the custom options SquidGuard changes to STOPPED.

you need those for quidguard to work.. But sure you can block something just in squid to verify its working.

Ok now that you have squid up and running and internet access is working, let me install the squidgard and see whats up with it.

http://doc.pfsense.org/index.php/SquidGuard_package

edit: ok installed the package, went through the instructions for squidguard, not even using blacklists

Then

created custom list,

post-14624-0-17848000-1300224317.jpg

And put in facebook.com and looks what you get

post-14624-0-70146500-1300224307.jpg

  • Like 3

to get blacklist to work, once you have downloaded and picked what categories.. make sure on the bottom of general proxy filter page you put in the location LOCAL

note: bottom of page says

Enter FTP, HTTP or LOCAL (pfSense) URL blacklist archive, or leave blank.

Once you have a black listed loaded under targets you should see all the categories and you can set to block, allow, etc

post-14624-0-91327700-1300224593.jpg

also make sure once you make any changes to anything on the proxy filter to hit the apply button in the general proxy filter page and then save. Working smooth as silk here!

And then sure on the bottom of the proxy server page you should see the custom stuff

redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf;redirector_bypass on;redirect_children 3

  • Like 2

you need those for quidguard to work.. But sure you can block something just in squid to verify its working.

Ok now that you have squid up and running and internet access is working, let me install the squidgard and see whats up with it.

http://doc.pfsense.org/index.php/SquidGuard_package

edit: ok installed the package, went through the instructions for squidguard, not even using blacklists

Then

created custom list,

post-14624-0-17848000-1300224317.jpg

And put in facebook.com and looks what you get

post-14624-0-70146500-1300224307.jpg

It just isn't working, i disabled the blocklist tried a custom filter everything is blocked.

What is in your custom options?

you have to set default to ALLOW if using squidguard.

post-14624-0-68168700-1300224926.jpg

I posted options off squid page in the post above on an edit.

If you want open up pfsense gui to remote access and PM the details ip and username and pass and will take a look.

  • Like 2
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • AI is the beginning, wait until real robots replace more jobs, specifically jobs that require physical work.
    • AI is indeed eliminating jobs, and Oracle just proved it by Hamid Ganji There’s no question that AI has become the hottest trend in workplaces, and every company is trying to adopt AI-driven solutions across its operations. While some industry leaders repeatedly say AI won’t lead to massive layoffs, recent data suggest that AI is actually one of the main reasons some companies are reducing their workforce. According to Oracle’s annual regulatory filing, the company has laid off about 21,000 employees, or 13% of its workforce, amid increasing AI adoption. “The adoption and deployment of AI technologies across our operations have resulted, and may continue to result, in reductions to our workforce,” Oracle said in the filing. The software giant now has approximately 141,000 full-time employees, a notable decrease from 162,000 during the same period last year. Restructuring expenses, including severance payments, cost Oracle $1.84 billion in fiscal 2026. Additionally, around 49,000 Oracle employees were based in the U.S., while approximately 92,000 were employed internationally. Like many other companies, Oracle has fully embraced AI and concentrated much of its efforts on the technology. The company is also a key participant in the United States’ $500 billion Stargate Project, which aims to build multiple AI data centers across the country. When it comes to AI adoption and its impact on the workforce, opinions remain divided. NVIDIA CEO Jensen Huang, whose company has been one of the biggest beneficiaries of the AI boom, recently said in an interview that attributing job cuts to AI is a “lazy” narrative. “The narrative that connects AI to job loss, for many of the CEOs that are doing it – it is just too lazy. AI has just arrived, how is it possible they're already losing jobs?” Huang said. However, statistics and recent reports tell a different story. According to Layoffs.fyi, 196 tech companies have laid off about 119,800 employees so far this year. Reducing staff and replacing roles with AI agents could become one of the most significant trends in the job market in the years ahead.
    • Zoom Workplace 7.1.0.41345 by Razvan Serea Zoom Workplace for Windows is a reliable video conferencing tool that makes it easy to connect and collaborate. With features like messaging, file sharing, and app integrations, it’s designed to streamline teamwork. You’ll get high-quality audio and video, strong security with end-to-end encryption, and an intuitive interface—all of which help remote teams and businesses stay productive and connected. Zoom Workplace key features: High-Definition Video & Audio: Provides clear, reliable communication for virtual meetings. End-to-End Encryption: Ensures secure communication with strong data protection. Multi-Factor Authentication: Adds an extra layer of security for user accounts. Integration with Productivity Apps: Supports seamless integration with Microsoft Office, Google Workspace, and more. File Sharing: Easily share files during meetings for efficient collaboration. Real-Time Messaging: Enables team chat for ongoing communication. Collaborative Whiteboarding: Allows teams to brainstorm and collaborate visually. Webinar Support: Host large webinars with interactive features. Administrative Controls: Manage user permissions, meeting settings, and security features. Cloud Storage: Automatically stores meetings and files in the cloud for easy access. Cross-Platform Support: Available on Windows, macOS, and mobile devices. Meeting features: Virtual Backgrounds: Customize your background for meetings to maintain privacy or enhance professionalism. Touch Up My Appearance: Automatically smoothens skin tone for a more polished video appearance. Breakout Rooms: Divide meetings into smaller sessions for group discussions or workshops. Live Transcription: Automatically generate real-time captions during meetings for accessibility. Zoom Apps: Integrate third-party applications directly into Zoom for enhanced functionality. Meeting Reactions: Participants can use emojis for quick, non-verbal feedback during meetings. Polling: Conduct live polls during meetings to gather instant feedback from participants. Attention Tracking: Monitors participant attention during meetings to ensure engagement. Closed Captioning: Enable manual or automatic captions for a more inclusive experience. Webinar Replay: Record and share webinars with analytics for audience engagement. Download: Zoom 64-bit | 145.0 MB (Free, paid upgrade available) Links: Zoom Website | Zoom ARM64 | Zoom Installers | Release Notes Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • UK funds £60M AI labs to challenge US tech dominance with open-source models by Paul Hill The UK government has awarded £60 million to Oxford University and University College London to help keep the country in the AI race by focusing on open-source, low-hardware alternatives. This is in stark contrast to the expensive, closed-source, and high-hardware-requirement models being created in the United States and elsewhere. The money will be shared among two new academic research labs over six years to help them redesign the fundamental mathematics and architectures of AI to help the UK reduce its reliance on a handful of US tech firms. Commenting on the development, AI Minister Kanishka Narayan said: Initially, the government planned to fund just one lab with a £40 million investment, but with this update, two labs will now get access to a larger pool of funds. The labs are expected to invest in the top AI researchers at every career stage, with £2 million per lab being set aside for hiring at least ten doctoral students. The government hopes that this will grow the UK’s talent in the field of AI. The labs are also expected to work closely with the leaders in British AI research, such as the Alan Turing Institute and UKRI’s AI research hubs. This will allow the various teams to collaborate and create new solutions faster than they could alone. This development is pretty interesting for a number of reasons, chiefly that it could create a long-term challenge for US tech firms if these labs successfully scale these open-source architectures that bypass the proprietary ecosystems. It could also give British businesses and public sector organizations access to AI features without paying high licensing fees to foreign providers or needing to invest in specialized server infrastructure.
  • Recent Achievements

    • One Month Later
      nates earned a badge
      One Month Later
    • Week One Done
      Almohandis earned a badge
      Week One Done
    • Rookie
      dorf went up a rank
      Rookie
    • First Post
      mike_rumble earned a badge
      First Post
    • Dedicated
      tuben earned a badge
      Dedicated
  • Popular Contributors

    1. 1
      +primortal
      464
    2. 2
      +Edouard
      182
    3. 3
      PsYcHoKiLLa
      97
    4. 4
      Michael Scrip
      89
    5. 5
      neufuse
      70
  • Tell a friend

    Love Neowin? Tell a friend!