EFW Support

Support => EFW SMTP, HTTP, SIP, FTP Proxy Support => Topic started by: whoiam55 on Monday 29 March 2010, 05:28:35 am



Title: fault in content filter module
Post by: whoiam55 on Monday 29 March 2010, 05:28:35 am
It looks like that content filter module is not handling the domains part of blacklist. If you select a category to block in proxy > content filter > profile > block these ulrs. Changing here only reflect to /etc/dansguardian/profiles/number/bannedurllist. Doesn't it also suppose to insert some code also to /etc/dansguardian/profiles/number/bannedsitelist?


Title: Re: fault in content filter module
Post by: gyp_the_cat on Tuesday 30 March 2010, 08:52:22 pm
Hi Whoami,

I'm a bit confused to be honest  ???

We don't have a great deal of banned sites in our Squid/Dansguardian configuration, and my file looks like:

Quote from: bannedsitelist
.Include</etc/dansguardian/blacklists/antispyware/domains>
.Include</etc/dansguardian/blacklists/<our companies own little list>/domains>
.Include</var/efw/dansguardian/bannedsitelist>

I do know that changing the proxy options can take a good while sometimes to happen, especially if you have lots of lists for it to deal with.

Gyp


Title: Re: fault in content filter module
Post by: whoiam55 on Wednesday 31 March 2010, 02:25:42 am
hi gyp, what is the location of file you quoted?


Title: Re: fault in content filter module
Post by: gyp_the_cat on Wednesday 31 March 2010, 02:43:40 am
Hi there,

It's at:

Quote from: '/etc/dansguardian/profiles/1/bannedurllist'
.Include</etc/dansguardian/blacklists/ACMA/urls>
.Include</etc/dansguardian/blacklists/antispyware/urls>

and:

Quote from: '/etc/dansguardian/profiles/1/bannedsitelist'
.Include</etc/dansguardian/blacklists/antispyware/domains>
.Include</etc/dansguardian/blacklists/<our companies own little list>/domains>
.Include</var/efw/dansguardian/bannedsitelist>

and:

Quote from: '/etc/dansguardian/profiles/1/bannedregexpurllist'
.Include</etc/dansguardian/blacklists/antispyware/expressions>

Which kind of makes sense with the blacklists we've got, and the rest of the files in /etc/dansguardian/profiles/1/ are virtually empty.

Quote from: '/etc/dansguardian/blacklists/antispyware'
-rw-r--r--  1 root root 534 Apr 22  2008 domains
-rw-r--r--  1 root root   0 Apr 22  2008 expressions
-rw-r--r--  1 root root 154 Apr 22  2008 urls

Does the blacklist you have only domains as opposed to URLs?

Gyp





Title: Re: fault in content filter module
Post by: whoiam55 on Wednesday 31 March 2010, 09:02:13 pm
@Gyp

I only have URLs only but no linking to the domains files.

Here are my list of file as you can see other files are 0 in size :(


Title: Re: fault in content filter module
Post by: gyp_the_cat on Thursday 01 April 2010, 01:21:08 am
Quote
root@proxy-3:/etc/dansguardian/profiles/1 # ls -l
total 20
-rw-r--r--  1 root root    0 Mar 29 09:36 anonregexplist
-rw-r--r--  1 root root    0 Mar 29 09:36 bannedextensionlist
-rw-r--r--  1 root root    0 Mar 29 09:36 bannedmimetypelist
-rw-r--r--  1 root root    0 Mar 29 09:36 bannedphraselist
-rw-r--r--  1 root root    0 Mar 29 09:36 bannedregexpheaderlist
-rw-r--r--  1 root root   63 Mar 29 09:36 bannedregexpurllist
-rw-r--r--  1 root root  164 Mar 29 09:36 bannedsitelist
-rw-r--r--  1 root root  105 Mar 29 09:36 bannedurllist
-rw-r--r--  1 root root    0 Mar 29 09:36 contentregexplist
-rw-r--r--  1 root root    0 Mar 29 09:36 exceptionextensionlist
-rw-r--r--  1 root root    0 Mar 29 09:36 exceptionfilesitelist
-rw-r--r--  1 root root    0 Mar 29 09:36 exceptionfileurllist
-rw-r--r--  1 root root    0 Mar 29 09:36 exceptionmimetypelist
-rw-r--r--  1 root root    0 Mar 29 09:36 exceptionphraselist
-rw-r--r--  1 root root    0 Mar 29 09:36 exceptionregexpurllist
-rw-r--r--  1 root root   50 Mar 29 09:36 exceptionsitelist
-rw-r--r--  1 root root    0 Mar 29 09:36 exceptionurllist
-rw-r--r--  1 root root    0 Mar 29 09:36 greyregexpurllist
-rw-r--r--  1 root root    0 Mar 29 09:36 greysitelist
-rw-r--r--  1 root root    0 Mar 29 09:36 greyurllist
-rw-r--r--  1 root root    0 Mar 29 09:36 headerregexplist
-rw-r--r--  1 root root    0 Mar 29 09:36 logregexpurllist
-rw-r--r--  1 root root    0 Mar 29 09:36 logsitelist
-rw-r--r--  1 root root    0 Mar 29 09:36 logurllist
-rw-r--r--  1 root root 2500 Mar 29 09:36 picsfile
-rw-r--r--  1 root root    0 Mar 29 09:36 urlregexplist
-rw-r--r--  1 root root    0 Mar 29 09:36 weightedphraselist
root@proxy-3:/etc/dansguardian/profiles/1 #

Ours look virtually the same I think.

What do the contents of your blacklists look like?  Ie /etc/dansguardian/blacklists/antispyware?


Title: Re: fault in content filter module
Post by: whoiam55 on Thursday 01 April 2010, 02:46:07 am
sorry my mistake, by saying other files, I was referring to /etc/dansguardian/profiles/number/bannedsitelist. As for the other files, they will only have data when you select an option from content filter module for example bannedextensionlist file will be clocked when you create a rule to block a particular file extension.

One thing I was wondering is how endian react to these customizations? suppose I edit /etc/dansguardian/dansguardian.conf by logging to endian shell prompt. I restar dansguardian form console and test my settings working right. Now log on to endian web interface, select some settings (I selected gambling site to deny in the default profile), save changes and voila your modification no longer there ??? ???