proxy/content filter doesn't work

[Guest]

[X_Ch4n]

Hi all,
i'm trying to setup my first endian firewall/proxy.

The firewall works great, but i'm having some problems with proxy/content filter.

I would like to block some specific urls, so i modified content1 profile and added these urls into blacklist box. After that i created an access policy with this settings: source zone: green, dest: any, auth: disabled, access policy: allow, filter profile: content1, policy status: enable.

I tried from a client to reach a blacklisted url and it wasn't blocked as expected. What am i wronging?

I tried to change access policy to Deny access, but in this case i can't reach any url (blacklisted or not).

I'm sure there is something that i don't understand, but i'm not able to know what....

please help me...

[dda]

Do you have authentication set up?  The content filter will need it to work.

[X_Ch4n]

Hi, thanks for your answer.
I setted up NCSA Auth and added some users. I created 2 access policies using 2 different content filter rules (admin, users).
I can see content filter service is always off.

[X_Ch4n]

Hi, i looked at /var/log/boot.log and i found many lines "dansguardian: dansguardian startup failed".

I would like to understand why. Where can i find other infos (log files) about dansguardian startup?

Thanks a lot

[dda]

did you disable the ports 80,443, and 21 in the firewall outgoing rules?

[X_Ch4n]

no, do i have to disable them?

[dda]

Yes the traffic will go straight out otherwise.  If you want ti use the POP3 proxy (which I reccomend) disable that as well.