|
Title: proxy/content filter doesn't work Post by: X_Ch4n on Friday 30 August 2013, 10:42:52 pm Hi all,
i'm trying to setup my first endian firewall/proxy. The firewall works great, but i'm having some problems with proxy/content filter. I would like to block some specific urls, so i modified content1 profile and added these urls into blacklist box. After that i created an access policy with this settings: source zone: green, dest: any, auth: disabled, access policy: allow, filter profile: content1, policy status: enable. I tried from a client to reach a blacklisted url and it wasn't blocked as expected. What am i wronging? I tried to change access policy to Deny access, but in this case i can't reach any url (blacklisted or not). I'm sure there is something that i don't understand, but i'm not able to know what.... please help me... Title: Re: proxy/content filter doesn't work Post by: dda on Saturday 31 August 2013, 06:31:12 am Do you have authentication set up? The content filter will need it to work.
Title: Re: proxy/content filter doesn't work Post by: X_Ch4n on Monday 02 September 2013, 05:15:54 pm Hi, thanks for your answer.
I setted up NCSA Auth and added some users. I created 2 access policies using 2 different content filter rules (admin, users). I can see content filter service is always off. Title: Re: proxy/content filter doesn't work Post by: X_Ch4n on Monday 02 September 2013, 07:10:30 pm Hi, i looked at /var/log/boot.log and i found many lines "dansguardian: dansguardian startup failed".
I would like to understand why. Where can i find other infos (log files) about dansguardian startup? Thanks a lot Title: Re: proxy/content filter doesn't work Post by: dda on Tuesday 03 September 2013, 01:15:28 am did you disable the ports 80,443, and 21 in the firewall outgoing rules?
Title: Re: proxy/content filter doesn't work Post by: X_Ch4n on Tuesday 03 September 2013, 01:39:55 am no, do i have to disable them?
Title: Re: proxy/content filter doesn't work Post by: dda on Tuesday 03 September 2013, 04:17:28 am Yes the traffic will go straight out otherwise. If you want ti use the POP3 proxy (which I reccomend) disable that as well.
|