RE: [e-smith-devinfo] SquidGuard 2 Development
Thanks Charlie, That's right, imp and webmail is a good example. I will start work on using the alias directory. Trev. -Original Message- From: Charlie Brady [mailto:[EMAIL PROTECTED]] Sent: Thursday, August 23, 2001 3:21 PM To: Trevor Ouellette Cc: E-Smith Developers Info Mailing List Subject: RE: [e-smith-devinfo] SquidGuard 2 Development I'd suggest that you start by looking at the way that the e-smith-imp RPM integrates /webmail into the website without using an i-bay. You'll find detailed instructions on making and modifying e-smith RPMs on the e-smith.org web site. -- Charlie Brady [EMAIL PROTECTED] Lead Product Developer Network Server Solutions Grouphttp://www.e-smith.com/ Mitel Networks Corporationhttp://www.mitel.com/ Phone: +1 (613) 368 4376 or 564 8000 Fax: +1 (613) 564 7739 -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
RE: [e-smith-devinfo] SquidGuard 2 Development
On Thu, 23 Aug 2001, Trevor Ouellette wrote: > On Thu, 23 Aug 2001, Darrell May wrote: > > > I see you got the answer for this already, however, I would recommend you > > not use an ibay to host your application. I'd strongly second Darrell's recommendation. > Do you have any more information about using an alias directory instead of > an ibay. That sounds pretty good. That way, internal clients won't see the > /squidguard directory in Samba. I'd suggest that you start by looking at the way that the e-smith-imp RPM integrates /webmail into the website without using an i-bay. You'll find detailed instructions on making and modifying e-smith RPMs on the e-smith.org web site. -- Charlie Brady [EMAIL PROTECTED] Lead Product Developer Network Server Solutions Grouphttp://www.e-smith.com/ Mitel Networks Corporationhttp://www.mitel.com/ Phone: +1 (613) 368 4376 or 564 8000 Fax: +1 (613) 564 7739 -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
RE: [e-smith-devinfo] SquidGuard 2 Development
Darrell, have you used directory alias's yourself? Is it as simple at inserting a few templates into the httpd.conf directory (custom-templates of course)? Trev. -Original Message- From: Darrell May [mailto:[EMAIL PROTECTED]] Sent: Thursday, August 23, 2001 2:39 PM To: Trevor Ouellette; [EMAIL PROTECTED]; Allen Rapini; E-Smith Developers Info Mailing List Subject: RE: [e-smith-devinfo] SquidGuard 2 Development Trevor Ouellette <[EMAIL PROTECTED]> said: > But you can still reach it by doing a \\servername\ibay right? It just > becomes like the netlogon directory. Plus, netatalk is still running. Correct. Again, if these ibays in question are not used for file sharing, then again it is better not to use ibays. Use a directory alias in httpd.conf. -- Darrell May DMC NETSOURCED.COM http://netsourced.com -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
RE: [e-smith-devinfo] SquidGuard 2 Development
Trevor Ouellette <[EMAIL PROTECTED]> said: > But you can still reach it by doing a \\servername\ibay right? It just > becomes like the netlogon directory. Plus, netatalk is still running. Correct. Again, if these ibays in question are not used for file sharing, then again it is better not to use ibays. Use a directory alias in httpd.conf. -- Darrell May DMC NETSOURCED.COM http://netsourced.com -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
RE: [e-smith-devinfo] SquidGuard 2 Development
But you can still reach it by doing a \\servername\ibay right? It just becomes like the netlogon directory. Plus, netatalk is still running. Trev. -Original Message- From: Darrell May [mailto:[EMAIL PROTECTED]] Sent: Thursday, August 23, 2001 2:28 PM To: Allen Rapini; E-Smith Developers Info Mailing List Subject: RE: [e-smith-devinfo] SquidGuard 2 Development It is actually just a matter of editing /etc/samba.conf and setting 'browseable = no', via the e-smith way of course by diving into the templates and creating/editing a templates-custom fragment. -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
RE: [e-smith-devinfo] SquidGuard 2 Development
Allen Rapini <[EMAIL PROTECTED]> said: > I had posted a "wish list" entry about just that sort of thing. I would like > to see the number of announced browsable share reduced to the minimum via > SAMBA, and Appletalk. > > Allen It is actually just a matter of editing /etc/samba.conf and setting 'browseable = no', via the e-smith way of course by diving into the templates and creating/editing a templates-custom fragment. -- Darrell May DMC NETSOURCED.COM http://netsourced.com -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
RE: [e-smith-devinfo] SquidGuard 2 Development
I had posted a "wish list" entry about just that sort of thing. I would like to see the number of announced browsable share reduced to the minimum via SAMBA, and Appletalk. Allen -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
RE: [e-smith-devinfo] SquidGuard 2 Development
Hi Darrell, All programs APPEAR to operate properly (checking the logs). In fact, squid's transproxy and squidguard both continue to load and work properly. It's something in the setacls file in /usr/local/squidGuard. Maybe permissions... that sounds right. Do you have any more information about using an alias directory instead of an ibay. That sounds pretty good. That way, internal clients won't see the /squidguard directory in Samba. In fact, I don't even want anyone to see the ibay in Samba. Good thinking... I'll keep looking around! Trev. -Original Message- From: Darrell May [mailto:[EMAIL PROTECTED]] Sent: Thursday, August 23, 2001 1:57 PM To: Trevor Ouellette; E-Smith Developers Info Mailing List Subject: Re: [e-smith-devinfo] SquidGuard 2 Development What part stops working? Anyhow, probably due to the fact the admin console runs as user admin and your PHP page would be set www. > 2. I need to know how to set a password on an ibay from the > commandline. I see you got the answer for this already, however, I would recommend you not use an ibay to host your application. I agree e-smith makes it easier for websites to be run from ibays but it has been posted before that ibays really are intended for file sharing and simple web sites only. Not for hosting applications where advanced httpd.conf configuration is needed. (Just to counterdict myself, Dan Brown has a HowTo for adding some advanced ibay properties but limited to one line entry I believe) But in any event, to really have the freedom to go beyond the current ibay or advanced ibay settings, it may be better to host your squidguard implementation from an alias directory. This would also make it simpler to build the final product into an rpm. Just my thoughts, -- Darrell May DMC NETSOURCED.COM http://netsourced.com -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
Re: [e-smith-devinfo] SquidGuard 2 Development
Trevor Ouellette <[EMAIL PROTECTED]> said: > If there is any security issues, please bring them to my attention. > > 1. When you go through the admin console squidguard stops working. > What part stops working? Anyhow, probably due to the fact the admin console runs as user admin and your PHP page would be set www. > 2. I need to know how to set a password on an ibay from the > commandline. I see you got the answer for this already, however, I would recommend you not use an ibay to host your application. I agree e-smith makes it easier for websites to be run from ibays but it has been posted before that ibays really are intended for file sharing and simple web sites only. Not for hosting applications where advanced httpd.conf configuration is needed. (Just to counterdict myself, Dan Brown has a HowTo for adding some advanced ibay properties but limited to one line entry I believe) But in any event, to really have the freedom to go beyond the current ibay or advanced ibay settings, it may be better to host your squidguard implementation from an alias directory. This would also make it simpler to build the final product into an rpm. Just my thoughts, -- Darrell May DMC NETSOURCED.COM http://netsourced.com -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
Re: [e-smith-devinfo] SquidGuard 2 Development
- Original Message - From: "Trevor Ouellette" <[EMAIL PROTECTED]> To: "Keith Woody" <[EMAIL PROTECTED]> Cc: "E-Smith Developers Info Mailing List" <[EMAIL PROTECTED]> Sent: Thursday, August 23, 2001 12:32 PM Subject: RE: [e-smith-devinfo] SquidGuard 2 Development > Here is my script so far. Currently the ibay doesn't prompt the user for a > password when accessed directly at http://192.168.1.1/squidguard ::ahem:: 192.168.1.1 is local oui? ::wink wink:: ::nudge nudge:: =] -Keith -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
RE: [e-smith-devinfo] SquidGuard 2 Development
Hi Keith! I haven't heard from you in a while. I appreciate the code... :-) In fact, the code below is what you sent me last time. Here is my script so far. Currently the ibay doesn't prompt the user for a password when accessed directly at http://192.168.1.1/squidguard /sbin/e-smith/db accounts set squidguard ibay Group admin UserAccess wr-admin-rd-group PublicAccess local CgiBin enabled PasswordSet no Name squidguard Gid 5101 Uid 5101 # create the account on the system /sbin/e-smith/signal-event ibay-create squidguard # hack to use the setibay function from command line perl -e 'use esmith::util;' -e 'esmith::util::setIbayPassword("squidguard","pass");' # Notify manager that password is set /sbin/e-smith/db accounts setprop squidguard PasswordSet yes -Original Message- From: Keith Woody [mailto:[EMAIL PROTECTED]] Sent: Thursday, August 23, 2001 1:35 PM To: Trevor Ouellette Cc: [EMAIL PROTECTED] Subject: Re: [e-smith-devinfo] SquidGuard 2 Development Trev, i dunno about the first one, but... - Original Message - From: "Trevor Ouellette" <[EMAIL PROTECTED]> To: "E-Smith Developers Info Mailing List" <[EMAIL PROTECTED]> Sent: Thursday, August 23, 2001 12:01 PM Subject: [e-smith-devinfo] SquidGuard 2 Development > 2. I need to know how to set a password on an ibay from the commandline. I > am going to put it in my shell script --> you will have to log in with an > account and password for additional security. ## to set the password # perl -e 'use esmith::util;' -e 'esmith::util::setIbayPassword ('', '');' ##to show that its been set # /sbin/e-smith/db accounts setprop PasswordSet yes Regards, -Keith -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
Re: [e-smith-devinfo] SquidGuard 2 Development
Trev, i dunno about the first one, but... - Original Message - From: "Trevor Ouellette" <[EMAIL PROTECTED]> To: "E-Smith Developers Info Mailing List" <[EMAIL PROTECTED]> Sent: Thursday, August 23, 2001 12:01 PM Subject: [e-smith-devinfo] SquidGuard 2 Development > 2. I need to know how to set a password on an ibay from the commandline. I > am going to put it in my shell script --> you will have to log in with an > account and password for additional security. ## to set the password # perl -e 'use esmith::util;' -e 'esmith::util::setIbayPassword ('', '');' ##to show that its been set # /sbin/e-smith/db accounts setprop PasswordSet yes Regards, -Keith -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
RE: [e-smith-devinfo] SquidGuard 2
Hi Brandon, You do not have to uninstall the 1st version. 1. Simple follow the instructions for installing version 2. 2. You can now delete the /squidguard and /squidguard2 installation directories. That's it! If you have any other questions or concerns, please let me know and I will do my best to help you through it. Trev. -Original Message- From: Brandon Friedman [mailto:[EMAIL PROTECTED]] Sent: Thursday, August 23, 2001 5:39 AM To: Trevor Ouellette Subject: Re: [e-smith-devinfo] SquidGuard 2 Hi Trevor I have the first release installed. Must I uninstall first?? if so how? Trevor Ouellette <[EMAIL PROTECTED]> said: > I'm trying to fix all the problems that were plauging the squidguard > interface. If anyone cares, here's how to download/install it. I've had a > lot of inexperienced people asking about content filtering, so I want to > make this easy for them. I know it's unconventional (PHP & scripts), please > bear with me. > > - Log in as ROOT/PASSWORD > > - mkdir /squidguard2 > > - cd /squidguard2 > > - wget -nv http://www.greencomputer.com/squidguard-2.tar > > - tar -xf squidguard-2.tar > > - ./create-squidguard > > Rebooting is optional > > > FIXES: > > Downloads the latest blacklist (Pal from squidguard removed all the bogus > entries like Netscape and AOL from the blacklist). The blacklist is now > called blacklist.tar.gz~ > > There is a workaround for when you go through the admin console and > squidguard stops updating --> log in as root and enter > "/usr/local/squidGuard/setacls". > > Remember to password protect your ibay. This protects your internal > network. If anyone knows how to do this from the commandline (shell > please), let me know and I can implement it. Or do it yourself and send me > a copy. (it's in the create-squidguard script). > > > -- > Please report bugs to [EMAIL PROTECTED] > Please mail [EMAIL PROTECTED] (only) to discuss security issues > Support for registered customers and partners to [EMAIL PROTECTED] > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org > > -- Regards Brandon Friedman Product Manager Tech-Knowledgy Advantage Ph: +27 (011) 486-0626 Fax: +27 (011) 486-0629 Cell: +27 (083) 408-7840 E: [EMAIL PROTECTED] www.techknowledgy.co.za PO Box 1909, Houghton, 2041 South Africa No. 1 Mowbray Road, Greenside, Johannesburg, South Africa e-smith Authorised Partners -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
RE: [e-smith-devinfo] SquidGuard 2
Hi Jeff, To be honest with you, if you just want to uninstall squidguard 1 so that you can use squidguard 2, you don't have to... just run the script and it will update the system to ver 2. If you want to get rid of it perm... that's on my agenda... but simply removing the ibay, uninstalling the transproxy rpm SHOULD do it. Don't worry, I'm working on an uninstall proggy this week. Trev. -Original Message- From: Jeff [mailto:[EMAIL PROTECTED]] Sent: Wednesday, August 22, 2001 2:19 PM To: Trevor Ouellette Subject: RE: [e-smith-devinfo] SquidGuard 2 How does one remove squidgard 1 (from your earlier example) -Original Message- From: Trevor Ouellette [mailto:[EMAIL PROTECTED]] Sent: Wednesday, August 22, 2001 2:05 PM To: e-smith-devinfo Subject: [e-smith-devinfo] SquidGuard 2 I'm trying to fix all the problems that were plauging the squidguard interface. If anyone cares, here's how to download/install it. I've had a lot of inexperienced people asking about content filtering, so I want to make this easy for them. I know it's unconventional (PHP & scripts), please bear with me. - Log in as ROOT/PASSWORD - mkdir /squidguard2 - cd /squidguard2 - wget -nv http://www.greencomputer.com/squidguard-2.tar - tar -xf squidguard-2.tar - ./create-squidguard Rebooting is optional FIXES: Downloads the latest blacklist (Pal from squidguard removed all the bogus entries like Netscape and AOL from the blacklist). The blacklist is now called blacklist.tar.gz~ There is a workaround for when you go through the admin console and squidguard stops updating --> log in as root and enter "/usr/local/squidGuard/setacls". Remember to password protect your ibay. This protects your internal network. If anyone knows how to do this from the commandline (shell please), let me know and I can implement it. Or do it yourself and send me a copy. (it's in the create-squidguard script). -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org