Line 1: |
Line 1: |
− | {{Languages}} | + | {{Languages|WebFiltering}} |
| | | |
| | | |
Line 6: |
Line 6: |
| [http://www.firewall-services.com Firewall Services]<br> | | [http://www.firewall-services.com Firewall Services]<br> |
| mailto:daniel@firewall-services.com | | mailto:daniel@firewall-services.com |
− | | + | === Version === |
| + | {{ #smeversion: smeserver-webfilter }} |
| + | [[Version::contrib9|fws]][[Has SME9::true| ]] |
| | | |
| === Description === | | === Description === |
Line 21: |
Line 23: |
| ===Requirements=== | | ===Requirements=== |
| | | |
− | *SME Server 8 (not tested and not supported on SME 7) | + | *SME Server 8 or 9 |
| *You need to configure both [[Epel]] and [[Fws]] repositories | | *You need to configure both [[Epel]] and [[Fws]] repositories |
| + | |
| === Screenshots === | | === Screenshots === |
| | | |
Line 28: |
Line 31: |
| [[File:Webfilter_2.png|webfilter panel]] | | [[File:Webfilter_2.png|webfilter panel]] |
| | | |
− | === Installation === | + | === Installation 8.x and 9.x=== |
| To install the contrib, simply run the following command: | | To install the contrib, simply run the following command: |
| | | |
Line 45: |
Line 48: |
| *.phobos.apple.com | | *.phobos.apple.com |
| | | |
− | With this, those appstoire won't be scanned by the AV engine, and they will work just as before. | + | With this, those appstores won't be scanned by the AV engine, and they will work just as before. |
| | | |
| ===Customize category lists=== | | ===Customize category lists=== |
− | Category lists are simple text files in /var/lib/squidGuard/blacklists. Each category is a directory, and each directory may have a file named '''domains''' and another named '''urls'''. Each directory in /var/lib/squidGuard/blacklists will be displayed in the panel of the server-manager, except if it's listed in the DisabledCategories prop. You can see which categories are disabled with: | + | Category lists are simple text files in /var/squidGuard/blacklists. Each category is a directory, and each directory may have a file named '''domains''' and another named '''urls'''. Each directory in /var/lib/squidGuard/blacklists will be displayed in the panel of the server-manager, except if it's listed in the DisabledCategories prop. You can see which categories are disabled with: |
| db configuration getprop squidguard DisabledCategories | | db configuration getprop squidguard DisabledCategories |
| This lets you ignore some useless categories, and hide them from the panel. | | This lets you ignore some useless categories, and hide them from the panel. |
Line 64: |
Line 67: |
| Now, you can edit this new file to your need. Then, just select it as the default blocked page: | | Now, you can edit this new file to your need. Then, just select it as the default blocked page: |
| | | |
− | db configuration setprop squidguard RedirectURL \ | + | db configuration setprop squidguard RedirectUrl \ |
| http://hostname.systemname.com/squidGuard/cgi-bin/custom.cgi?clientaddr=%a&clientname=%n&clientuser=%i&clientgroup=%s&targetgroup=%t&url=%u | | http://hostname.systemname.com/squidGuard/cgi-bin/custom.cgi?clientaddr=%a&clientname=%n&clientuser=%i&clientgroup=%s&targetgroup=%t&url=%u |
| signal-event http-proxy-update | | signal-event http-proxy-update |
| | | |
| ===MySQL logs=== | | ===MySQL logs=== |
− | MySQL loging of clients requests is handled by a independent daemon called squid-db-logd. It monitors squid access log and squidGuard deny log in real time, parse it and put everything in the database called squid_log. In this database, the table access_log list all the access while the deny_log only list denied pages. This feature may need a lot of disk space. On a busy server, you can easily reach 3GB / month only for the database (and more for the dump when you backup your server). To limit the needed space, a cron job rotate and compress the access_log and deny_log tables each month. Old tables are also removed. The default config keeps one year of log. You can change this setting with (value is in day and default is 365) | + | MySQL loging of clients requests is handled by a independent daemon called squid-db-logd. It monitors squid access log and squidGuard deny log in real time, parse it and put everything in the database called squid_log. In this database, the table access_log list all the access while the deny_log only list denied pages. This feature may need a lot of disk space. On a busy server, you can easily reach 3GB / month only for the database (and more for the dump when you backup your server). To limit the needed space, a cron job remove the oldest entries. The default config keeps one year of log. You can change this setting with (value is in day and default is 365) |
| db configuration setprop squid-db-logd Retention 180 | | db configuration setprop squid-db-logd Retention 180 |
| | | |
Line 92: |
Line 95: |
| ===Uninstall=== | | ===Uninstall=== |
| If you want to uninstall this contrib, just run: | | If you want to uninstall this contrib, just run: |
− | yum remove squidguard squidclamav | + | yum remove squidGuard squidclamav |
| expand-template /etc/squid/squid.conf | | expand-template /etc/squid/squid.conf |
| squid -k reconfigure | | squid -k reconfigure |
Line 115: |
Line 118: |
| | | |
| For now, this contrib is not available for translation in pootle (because it's in our own GIT repo). If you want to help with translation, you can get the file /etc/e-smith/locale/en-us/etc/e-smith/web/functions/webfilter (or directly from [https://gitweb.firewall-services.com/?p=smeserver-webfilter;a=blob_plain;f=root/etc/e-smith/locale/en-us/etc/e-smith/web/functions/webfilter here]) translate it, and send it back to us by mail at tech @ firewall-services . com | | For now, this contrib is not available for translation in pootle (because it's in our own GIT repo). If you want to help with translation, you can get the file /etc/e-smith/locale/en-us/etc/e-smith/web/functions/webfilter (or directly from [https://gitweb.firewall-services.com/?p=smeserver-webfilter;a=blob_plain;f=root/etc/e-smith/locale/en-us/etc/e-smith/web/functions/webfilter here]) translate it, and send it back to us by mail at tech @ firewall-services . com |
− | | + | {{#bugzilla:columns=id,product,version,status,summary |sort=id|order=desc |component=smeserver-webfilter|noresultsmessage="No open bugs found."}} |
| [[Category:Contrib]] | | [[Category:Contrib]] |
| + | [[Category:Contrib:webfiltering]] |