| Autor |
Nachricht |
|
|
Titel: Setting up Dansguardian
 Verfasst am: 28.05.2006, 23:39 Uhr
|
|
Anmeldung: 21. Apr 2006
Beiträge: 152
Wohnort: Ice and Snow
|
|
I tried to follow the directions exactly as discribed in http://www.linux.com/article.pl?sid=04/07/01/1833212 There were a couple of spots that gave me trouble. 1) groupadd -r squid: the -r command was not accepted, so I used Kuser to add the group (Question, I just added squid, should I have modified it in any way). 2) The chkconfig and service commands were not accepted: These were supposed to place it in the boot sequence, and that didn't happen, I am missing something or because of my setup, there is something different I need to do. On a similar vein, how do I setup Firefox to run through Dansguardian. I have a box behind a router, I am using
kernel 2.6.17-rc4
KDE 3.5.2 |
|
|
| |
|
|
|
 |
|
|
|
Titel:
Verfasst am: 29.05.2006, 02:13 Uhr
|
|
Anmeldung: 16. Apr 2006
Beiträge: 207
Wohnort: England
|
|
| I imagine both dansguardian and squid will be automatically set up to run on boot after installation. If not you can do as root -
Code:
update-rc.d dansguardian defaults
update-rc.d squid defaults
If it doesn't work try running each in a terminal to see if they are working or if there are any errors -
Code:
/etc/init.d/squid start
/etc/init.d/dansguardian start
I think you have to make sure squid is running before dansguardian.
I imagine adding the group through kuser should work.
To set up firefox to use dansguardian go to Edit>Preferences>General>ConnectionSettings then select Manual proxy configuration.
Under http proxy: (I assume dansguardian won't work with the others but I maybe wrong) put 127.0.0.1 and in the port: box put whatever address dansguardian listens on (probably 8080).
Some other links that might help -
http://www.pilpi.net/journal/item-985.php
http://www.savs.hcc.edu.tw/~chuavv/arti ... an-en.html
http://www.nyetwork.org/wiki/DansGuardian |
_________________
sidux 32 & 64 | PCLinuxOS | PC-BSD
repository of shame - compiz fusion & beryl repo for debian Sid/Lenny/Etch | 32-bit | 64-bit
|
| |
|
|
|
|
|
|
|
Titel:
Verfasst am: 29.05.2006, 04:37 Uhr
|
|
Anmeldung: 21. Apr 2006
Beiträge: 152
Wohnort: Ice and Snow
|
|
Thanx for your help. After clearing up some errors, I still get 1: Starting DansGuardian: Error connecting to parent proxy.
In squid conf I added these lines:
http_port 127.0.0.1:3128
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
cache_effective_user squid
cache_effective_group squid
In dansguardian.conf I added these:
filterip = 127.0.0.1
# the port that DansGuardian listens to.
filterport = 8080
# the ip of the proxy (default is the loopback - i.e. this server)
proxyip = 127.0.0.1
# the port DansGuardian connects to proxy on
proxyport = 3128
I did a google search, and nothing usefull turned up. |
|
|
| |
|
|
|
|
|
|
|
Titel:
Verfasst am: 29.05.2006, 08:10 Uhr
|
|
Anmeldung: 16. Apr 2006
Beiträge: 207
Wohnort: England
|
|
Maybe have a look through /var/log for a squid log. I remember reading something about squid not working unless /etc/hosts is set up a certain way.
I'll try to find more info on that. |
_________________
sidux 32 & 64 | PCLinuxOS | PC-BSD
repository of shame - compiz fusion & beryl repo for debian Sid/Lenny/Etch | 32-bit | 64-bit
|
| |
|
|
|
|
|
|
|
Titel: Help am a total newbie
Verfasst am: 30.05.2006, 06:42 Uhr
|
|
Anmeldung: 21. Apr 2006
Beiträge: 152
Wohnort: Ice and Snow
|
|
It might help if I included all uncommented lines in squid and dansguardian. The frustrating thing I am having resolving this issue is as a total newbie to Linux, every site I have found dealing with this error, gives advice as though you have a fair amount of knowledge of configuring Linux. I know nothing.
squid.conf uncomented lines
acl all src 0.0.0.0/0.0.0.0
acl CONNECT method CONNECT
acl localhost src 127.0.0.1/255.255.255.255
acl manager proto cache_object
acl purge method PURGE
acl QUERY urlpath_regex cgi-bin \?
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 21 # ftp
acl Safe_ports port 210 # wais
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 631 # cups
acl Safe_ports port 70 # gopher
acl Safe_ports port 777 # multiling http
acl Safe_ports port 80 # http
acl Safe_ports port 873 # rsync
acl Safe_ports port 901 # SWAT
acl SSL_ports port 443 563 # https, snews
acl SSL_ports port 873 # rsync
acl to_localhost dst 127.0.0.0/8
cache_dir ufs /var/spool/squid 100 16 256
cache_effective_group squid
cache_effective_user squid
coredump_dir /var/spool/squid
hierarchy_stoplist cgi-bin ?
hosts_file /etc/hosts
http_access allow localhost
http_access allow manager localhost
http_access allow purge localhost
http_access deny !Safe_ports
http_access deny all
http_access deny CONNECT !SSL_ports
http_access deny manager
http_access deny purge
http_port 127.0.0.1:3128
http_reply_access allow all
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_uses_host_header on
httpd_accel_with_proxy on
icp_access allow all
no_cache deny QUERY
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
udp_incoming_address 192.168.7.151
udp_outgoing_address 255.255.255.255
unique_hostname **(same name as in hosts)
visible_hostname **(same name as in hosts)
dancguardian.conf uncomented lines
reportinglevel = 3
languagedir = '/etc/dansguardian/languages'
language = 'ukenglish'
loglevel = 2
logexceptionhits = on
logfileformat = 1
loglocation = '/var/log/dansguardian/access.log'
filterip = 127.0.0.1
filterport = 8080
proxyip = 127.0.0.1
proxyport = 3128
accessdeniedaddress = 'http://www.cbc.ca'
nonstandarddelimiter = on
usecustombannedimage = 1
custombannedimagefile = '/etc/dansguardian/transparent1x1.gif'
filtergroups = 1
filtergroupslist = '/etc/dansguardian/filtergroupslist'
bannediplist = '/etc/dansguardian/bannediplist'
exceptioniplist = '/etc/dansguardian/exceptioniplist'
banneduserlist = '/etc/dansguardian/banneduserlist'
exceptionuserlist = '/etc/dansguardian/exceptionuserlist'
showweightedfound = on
weightedphrasemode = 2
urlcachenumber = 2000
urlcacheage = 900
phrasefiltermode = 2
preservecase = 0
hexdecodecontent = 0
forcequicksearch = 0
reverseaddresslookups = off
reverseclientiplookups = off
createlistcachefiles = on
maxuploadsize = -1
maxcontentfiltersize = 256
usernameidmethodproxyauth = on
usernameidmethodntlm = off # **NOT IMPLEMENTED**
usernameidmethodident = off
preemptivebanning = on
forwardedfor = off
usexforwardedfor = off
logconnectionhandlingerrors = on
maxchildren = 120
minchildren = 8
minsparechildren = 4
preforkchildren = 6
maxsparechildren = 32
maxagechildren = 500
ipcfilename = '/tmp/.dguardianipc'
urlipcfilename = '/tmp/.dguardianurlipc'
nodaemon = off
nologger = off
daemonuser = squid
daemongroup = squid
softrestart = off
virusscan = on
virusengine = 'clamav'
tricklelength = 32768
firsttrickledelay = 30
followingtrickledelay = 60
exceptionvirusmimetypelist = '/etc/dansguardian/exceptionvirusmimetypelist'
maxcontentscansize = 262144
exceptionvirusextensionlist = '/etc/dansguardian/exceptionvirusextensionlist'
downloaddir = '/tmp/dgvirus'
virusscanexceptions = on
urlcachecleanonly = on
virusscannertimeout = 60
notify = 0
localsocket = '/tmp/clamd'
clmaxfiles = 1500
clmaxreclevel = 3
clmaxfilesize = 10485760
clmaxratio = 250 |
|
|
| |
|
|
|
|
|
|
|
Titel:
Verfasst am: 30.05.2006, 23:04 Uhr
|
|
Anmeldung: 16. Apr 2006
Beiträge: 207
Wohnort: England
|
|
the "error connecting to parent proxy" error would suggest to me that the problem is with squid rather than dansguardian.
Maybe have a look in the runlevels to see if squid is set to start first.
Have you tried
Code:
/etc/init.d/squid restart
/etc/init.d/dansguardian restart
in that order?
And also did you check that the line "unconfigured" in dansguardian.conf is commented out?
Only other thing I can think of is to check the permissions on the dansguardian log files. It should be squid:squid I believe. |
_________________
sidux 32 & 64 | PCLinuxOS | PC-BSD
repository of shame - compiz fusion & beryl repo for debian Sid/Lenny/Etch | 32-bit | 64-bit
|
| |
|
|
|
|
|
|
|
Titel:
Verfasst am: 31.05.2006, 00:36 Uhr
|
|
Anmeldung: 21. Apr 2006
Beiträge: 152
Wohnort: Ice and Snow
|
|
Retested still failed, unconfigured commented out, have two lines that say this:
daemonuser = squid
daemongroup = squid |
|
|
| |
|
|
|
|
|
|
|
Titel:
Verfasst am: 01.06.2006, 05:06 Uhr
|
|
Anmeldung: 21. Apr 2006
Beiträge: 152
Wohnort: Ice and Snow
|
|
| I am using the dansguardian yahoo forum, and as far as they can see everything was done right. It really would be nice to find what I am doing wrong. |
|
|
| |
|
|
|
|
|
|
