Topic: Disable blocking of some sites in squidguard?

[steve288]

There is one link we need to get to that is being blocked in squidguard.

First we tried allowing it in the user manager web face, but it is still blocked.

Then we have found the web site eg www.blocked.com in a domain file that lists blocked sites in /var/lib/warez/domain and commented it out eg #www.blocked.com then tried to restart squid.

eg /etc/init.d/squid restart

But still blocked.
Perhaps I need to rebuild the domains.db file . Im not quite sure how to do that or if that is what I need to do ? What do I need to do further to allow a blocked web site?
thanks.

[steve288]

Now we are for some reason  some amazon links, are being blocked. We can get to the main amazon site but when a user try to buy a book, one on teens its being blocked because of adult content. I'm happy with being more restrictive than less, but does anyone know how I can allow some sites that are being blocked. I have added amazon into the main allow interface from the user manager but it still seems to be blocking some amazon urls. Despite the fact that there could be offensive material on amazon, is there somewhere that I can put their domain so that it allows amazon no matter what but continues to block the other adult related sites.

Regards

[mrjhb3]

There is one link we need to get to that is being blocked in squidguard.

First we tried allowing it in the user manager web face, but it is still blocked.

Then we have found the web site eg www.blocked.com in a domain file that lists blocked sites in /var/lib/warez/domain and commented it out eg #www.blocked.com then tried to restart squid.

eg /etc/init.d/squid restart

But still blocked.
Perhaps I need to rebuild the domains.db file . Im not quite sure how to do that or if that is what I need to do ? What do I need to do further to allow a blocked web site?
thanks.

To rebuid the database do:

Code: [Select]

squidGuard -C all

You will need to do that after you make any changes.  Depending on your hardware, it could take a while to complete.  You can monitor this by looking at /var/log/squidguard/squidGuard.log

If you are using the shalla download lists, then that command will be run every night so you changes should be in effect the next morning.

John

[hasan]

Hey
Y dont u use dansgaurdian

[steve288]

mrjhb3,

thanks for your answer. The rebuild makes sense (from what little I know). Yes I am using the shalla list. However I'm a little unclear on the details of what you say.
A.
1. Should I put the allow web sites in the user-manager web list then run the rebuild of the database,

2.OR should I comment it out in the acutal file that I find the web site eg. in the /var/lib/warez/domain  eg #www.something.com

B. If the second  option is true above ( A.2 )then woun't the new download of the Shalla list over write the old that I have comment out and remove my #Comment line. Unless I'm confused at what the shalla list is, I thought it was a list of all these web sites and that its constantly changing.
 
I hope Im clear on what I mean

As far as the Dansguardian is concerned, I think I had some trouble installing the squidguard. I didnt want to mess with it any further. However if you could tell me how Dans would help resolve my problem it would be helpfull to me and perhaps others, as I might revisit this now that squid has been working for some time. (and where I can download the software) As I recall and IM now going from memory there was a free portion and a pay portion?

Thanks and regards.

[steve288]

Ok I have tried all the various options that I was confused regarding. I Hope this helps others.

How to disable some sites that are being blocked by squidGuard

 Add the web address to the content filter in the server-manager

You can wait until the db is updated which is each evening. But if you want to update it immediately, so that you can have access to the site now then open a shell window and do the following comands

 squidGuard -C all

 /etc/rc7.d/S90squid stop

 /etc/rc7.d/S90squid start

This appears to be basically the same commands run by /var/lib/squidguard/scripts/supdate  which is initiated by script  in /etc/cron.daily each day that updates the shalla list which is the list I use.

Regards

[mrjhb3]

That is correct!  If you are using the shalla list, you should also check to make sure that squidguard is actually running.  I found that mine hadn't been running for a while due to a change in how the blacklist db's were arranged.

Code: [Select]

tail -f /var/log/squidguard/squidguard.logIf you see it in emergency mode, then it's not running.  I've been working to get the rpm updated to reflect the db change.

I haven't tried dansguardian either, but it's probably worth a try.  There are free versions in the smecontribs repo that needs to be configured manually via the cli, and dungog offers a paid version that has a server-manager panel.

The advantage I see with dansguardian is that it's in the smecontrib repo and squidguard isn't.  I plan to put it there someday as soon as I get the panel updated.

John

[steve288]

Thanks all good advice.

Regards

[janet]

steve288

However if you could tell me how Dans would help resolve my problem it would be helpfull to me and perhaps others, as I might revisit this now that squid has been working for some time. (and where I can download the software) As I recall and IM now going from memory there was a free portion and a pay portion?

You have been around long enough to know where to look, so please do so.
For the free command line version see
http://wiki.contribs.org/Category:Howto

For the paid version which provides a server manager GUI panel, see the dungog website
http://www.dungog.net/wiki/Main_Page
which a quick search would have found

Do not use squidguard and dansguardian together, only use one or the other.
Dansguardian does more than squidguard as I understand it, so remove squidguard and install dansguardian as per howto, or instructions from dungog.

[steve288]

Well since you asked,

Thanks Mary.

In a previous version I think we used Dungog, but things I think changed and I think we upgraded to 7 (I actually think at your advice) and it took forever to get things installed to where we had them. Some of the instructions or processes where not completely accurate as I recall and it took forever to get it right. I thought at the time we used squid and dungog together in 6 but based on what you are saying perhaps not.  For some reason we had trouble with dungog, but that was last year and I have forgotten it all.

Mary,
We do try to follow the instructions. But over various versions they change so what was true for one version in how to allow sites (or many many other issues ) it is now old info. I had written out a perfect how to for myself in how to allow sites. This alas did not work since now this db thing seems to be the new methodology. I followed the how to that you mentioned but it didn't work. Perhaps and I'm not sure but I think it is because I had to rebuild the db. (??) The instructions to add the addresses and then stop and start squidguard didn't work, (as far as I can tell anyway).  It needed to be rebuild. The only instruction regarding rebuilding the db, if you spend some time squirling down into the code, I think is about using the supdate, which will rebuild the db. However by its self its a bit of a sentence thrown in that some may not understand. (I didn't). Nor would I have understood it until it was explained and then when I looked at the code I realized I was doing by hand what was being done by the cron job.

I'm sure some will find holes in what I have said, it would be easy enough.  But the reason I tried to recount my little success in the Newsgroup is really so others who are struggling with the same issue can hopefully search on it and find the answer. I'm trying to be helpful for others to find solutions, that well I cant find or have missed.  As I think I have mentioned before I should join up the wiki docs and make the changes so that others will understand a little more clearly on the way to do things. I'm always a little frightened that I will be chided for my stupidity, or lack of knowledge. Thus I am not criticizing those volunteers who write them or spend time working on docs.  Sometimes however for me I either don't find them complete or descriptive enough, or have the answers that I'm looking for. Yes sometimes I miss the very sentence that has the info I need. Perhaps its just my learning disability that does not allow me to easily find the right data.  However I'm not sure in this case that the info I needed was clearly there.  The only reason I take pains to say this I suppose is A. My hope that I don't offend. B. My hope that I will not be seen as a lazy son of a gun who wants everything fed to them on a silver platter. I really do try Mary.

Thank you again for your help.

Regards

[mrjhb3]

Steve,

I think you did fine in asking your question and it wasn't a burden at least for me to answer.  I tried using dansguardian from the wiki instructions on one of my test servers, but decided that squidguard was easier for me to work with.  I didn't take a deep dive into it, but decided I didn't want to try to manually configure dansguardian at this time.  I have found that I can do almost anything that I need with squidguard and a little google searching.  If you really want to change to use dansguardian, then paying for the dungog server-manager panel would be well worth it, IMHO.

I use squidguard to block sites from my kids and then sarg to look at where they have been.  I used it on 6.x and no one updated it to work for 7, so I attempted to do it to suit my needs and correct/update things based on some previous feedback.  I'll probably do it for 8 when it's released and I feel like upgrading my home server.  Others asked about it, so I put it on my contribs site for others to download and use.

If you have more questions, feel free.

John

[janet]

steve288

Well since you asked...

I did not ask anything, you were the one asking about Dansguardian.

The instructions in the howto are straightforward, but you will need to learn what the various dansguardian configuration files are for and which ones are appropriate to use in your situation.
You should read the beginning of each configuration file as they contain useful tips about usage.
 
You should only configure blocking at a basic level the first time you setup Dansguardian, so you get a feel for how Dansguardian works etc, and that only requires about 4 files to be modified. Not all that difficult using the command line.

Dansguardian has config files where you add sites to block or sites to allow and so on, so it's easy to tailor to your specific needs.

As far as any learning difficulty you have, if you do not tell us, then how are we supposed to know, and I assume allow accordingly if required ?

[steve288]

Thank you once again for your updated help.

Regards