Topic: Dansguardian Install help needed

[uniqsys]

Hi all,

Yesterday, I followed the instructions in the Dansguardian contrib How To and installed and configured it as instructed.  When I attempted to browse, I got the blocked site error.  I couldn't go anywhere.  I went over the instructions again to make sure I hadn't missed anything but I couldn't find anything different.  I then reversed the install instructions pertaining to squid and I was able to browse anywhere.  This sounds similar to another posting here but that issue was a

I can't ping any machines on the network

problem which sounds more of a hardware issue.  This I believe is a software configuration issue. 

Thanks in advance for any help you can give me.

[uniqsys]

Can anyone help me on this issue?  Someone with some dansgurdian experience to point me in the right direction maybe?  Please.

Thank you.

[janet]

uniqsys

It is not really clear from what you have said, as to what direction you need pointing in.

When I attempted to browse, I got the blocked site error.

Well that is what Dansguardian is supposed to do.
I guess it is behaving in accordance with how you configured it, so the problem is your configuration, not your install.

You should provide the exact error message.

I suggest you initially remove ALL custom configurations, and test that normal access (without any blocking by Dansguardian) can be achieved.
Then one by one, with testing in between each modification, add in your customised configuration. That way when it does not work as expected, you will be aware which change caused the problem.

[shawnbishop]

Was it set a a transparent proxy, auth etc..?

[uniqsys]

Was it set a a transparent proxy, auth etc..?

Mary, Shawnbishop,

My apologies for not expressing myself well enough in my original post.

The error message is not the problem, it is the warning you are supposed to get when Dansguardian is working.
My problem is that Dansguardian will not let me go anywhere to any website.
Shawnbishop, I set the settings as instructed in the HOW TO.  They called for auth (SME uses PAM so I used those commands) and transparent proxy was set to yes.

Under the section "Modifying Proxy and firewall" in the How To, I performed these commmands

Code: [Select]

config setprop squid TransparentPort 8080
config setprop squid Transparent yes
config setprop dansguardian portblocking yes
signal-event post-upgrade; signal-event rebootI then set the workstation browser Mozilla Firefox for Linux to Autodetect the proxy.
Then I performed this code

Code: [Select]

config setprop squid RequireAuth pam
expand-template /etc/squid/squid.conf
sv t /service/squid
to set the authorization as recommended.

Then I edited the dansguardian.conf file and changed the "accessdenied=" line to my domain which is "www.usioffice.net" as instructed.  I edited the other files as instructed in the HOW TO and no more.

Upon testing, I couldn't go to any web site.

BTW the other posting here regarding Dansguardian [http://forums.contribs.org/index.php/topic,44371.0.html]
saying the user was not able to ping any workstation on the network gave this as a solution:

Code: [Select]

If I run config setprop squid TransparentPort 3128
          config setprop squid Transparent no
          config delprop dansguardian portblocking
          signal-event post-upgrade; signal-event reboot
Then it works fine.

That sounds to me like he disabled Dansguardian, removed port 8080 and disabled Transparent Proxy so I am confused.  Why instruct the user to set portblocking to yes, convert to port 8080 and enable Transparent Proxy in the How TO if you have to eliminate them to make it work? The instructions specifically state to enable Transparent Proxy or Dansguardian will be bypassed:

If you disable the Transparent Proxy feature of SME Server, Dansguardian can be bypassed at will by your users. You should keep the Transparent Proxy enabled (configured as above) for filtering to work.

I am sure I have some setting wrong but I need help to point the way to the one that is not right.

Thanks for your help.

[janet]

uniqsys

Please reread my instructions as they tell you what to do

The exact error message/warning you get when Dansguardian does not let you go anywhere to any website is important in determining why you are being blocked. Please provide it as requested if you want us to help you.

What other configuration files did you modify and what changes did you make to them ?

[janet]

uniqsys

Please disable any type of auth as per Howto steps for disabling.
This will remove one issue while we are troubleshooting