Re: [pfSense Support] blacklist exceptions?

2009-11-16 Thread Luke Jaeger
Thanks - I did this but it didn't work. (I restarted squidguard as  
well). Anything else I need to look at?


Luke Jaeger | Technology Coordinator
Pioneer Valley Performing Arts Charter Public School
www.pvpa.org

On Nov 14, 2009, at 3:19 AM, Serg Dvoriancev wrote:


You must use Wiki Howto http://doc.pfsense.org/index.php/SquidGuard_package

- Original Message - From: Luke Jaeger ad...@pvpa.org
To: support@pfsense.com
Sent: Friday, November 13, 2009 6:53 PM
Subject: [pfSense Support] blacklist exceptions?


We are using pfSense 1.2.2 with squidguard as firewall/content  
filter  for a school.
Squidguard is configured to use the shallalist.de blacklists and  
it  works quite well. But there are times when I want to whitelist  
a site  (ie sexuality info sites that Shalla has mistakenly  
categorized as  porn) - if I add it to Proxy server:Access  
control it's still  blocked. Anything I can do other than putting  
in a request to Shalla  to re-categorize?

Luke Jaeger | Technology Coordinator
Pioneer Valley Performing Arts Charter Public School
www.pvpa.org
-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com
Commercial support available - https://portal.pfsense.org



-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org




-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] blacklist exceptions?

2009-11-16 Thread Gary Buckmaster

Luke,

You may want to post about this on the packages section of the forum.  
The author of the squidguard package is very active there and he may be 
able to help you out.  As far as I know, he is not active on the 
support@ mailing list.


-Gary

Luke Jaeger wrote:
Thanks - I did this but it didn't work. (I restarted squidguard as 
well). Anything else I need to look at?


Luke Jaeger | Technology Coordinator
Pioneer Valley Performing Arts Charter Public School
www.pvpa.org

On Nov 14, 2009, at 3:19 AM, Serg Dvoriancev wrote:

You must use Wiki Howto 
http://doc.pfsense.org/index.php/SquidGuard_package


- Original Message - From: Luke Jaeger ad...@pvpa.org
To: support@pfsense.com
Sent: Friday, November 13, 2009 6:53 PM
Subject: [pfSense Support] blacklist exceptions?


We are using pfSense 1.2.2 with squidguard as firewall/content 
filter  for a school.
Squidguard is configured to use the shallalist.de blacklists and it  
works quite well. But there are times when I want to whitelist a 
site  (ie sexuality info sites that Shalla has mistakenly 
categorized as  porn) - if I add it to Proxy server:Access control 
it's still  blocked. Anything I can do other than putting in a 
request to Shalla  to re-categorize?

Luke Jaeger | Technology Coordinator
Pioneer Valley Performing Arts Charter Public School
www.pvpa.org
-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com
Commercial support available - https://portal.pfsense.org



-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org




-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org




-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] blacklist exceptions?

2009-11-16 Thread Luke Jaeger

thanks, will do

Luke Jaeger | Technology Coordinator
Pioneer Valley Performing Arts Charter Public School
www.pvpa.org

On Nov 16, 2009, at 10:31 AM, Gary Buckmaster wrote:


Luke,

You may want to post about this on the packages section of the  
forum.  The author of the squidguard package is very active there  
and he may be able to help you out.  As far as I know, he is not  
active on the support@ mailing list.


-Gary

Luke Jaeger wrote:
Thanks - I did this but it didn't work. (I restarted squidguard as  
well). Anything else I need to look at?


Luke Jaeger | Technology Coordinator
Pioneer Valley Performing Arts Charter Public School
www.pvpa.org

On Nov 14, 2009, at 3:19 AM, Serg Dvoriancev wrote:


You must use Wiki Howto http://doc.pfsense.org/index.php/SquidGuard_package

- Original Message - From: Luke Jaeger ad...@pvpa.org
To: support@pfsense.com
Sent: Friday, November 13, 2009 6:53 PM
Subject: [pfSense Support] blacklist exceptions?


We are using pfSense 1.2.2 with squidguard as firewall/content  
filter  for a school.
Squidguard is configured to use the shallalist.de blacklists and  
it  works quite well. But there are times when I want to  
whitelist a site  (ie sexuality info sites that Shalla has  
mistakenly categorized as  porn) - if I add it to Proxy  
server:Access control it's still  blocked. Anything I can do  
other than putting in a request to Shalla  to re-categorize?

Luke Jaeger | Technology Coordinator
Pioneer Valley Performing Arts Charter Public School
www.pvpa.org
-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com
Commercial support available - https://portal.pfsense.org



-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org




-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org




-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org




-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] CARP and BGP

2009-11-16 Thread Evgeny Yurchenko

Aarno Aukia wrote:

Hello,

On Sat, Nov 14, 2009 at 03:36, Chris Buechler cbuech...@gmail.com wrote:
  

On Fri, Nov 13, 2009 at 9:13 PM, Glenn Kelley gl...@typo3usa.com wrote:


Am I correct in assuming that CARP and BGP cannot work together - as CARP
pushes private ip addresses ?

  

CARP doesn't push private IPs, not sure what you mean by that, but it
can work just the same as anything with public IPs. Though there are
likely complications related to the BGP package in combination with
CARP. Haven't tried it personally, not sure.



It works fine, you have to configure openbgpd to use the carp-address
using local-address.
You will still have a short interruption of service until the backup
bgpd resyncs the session, but it is a lot faster than to manually
reconfigure the routers...
We have this running in prodution, feel free to contact me off-list for details.

Regards,
Aarno
  
Could you explain how it works please? I have no questions about 
active(CARP) one but what about passive? bgpd on passive one will be 
continuously trying to connect to peer... using what source IP?

Thanks,
Evgeny.

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] blacklist exceptions?

2009-11-16 Thread Serg Dvoriancev

Confirm this - forum convenient for me.

- Original Message - 
From: Gary Buckmaster g...@s4f.com

To: support@pfsense.com
Sent: Monday, November 16, 2009 6:31 PM
Subject: Re: [pfSense Support] blacklist exceptions?



Luke,

You may want to post about this on the packages section of the forum.  
The author of the squidguard package is very active there and he may be 
able to help you out.  As far as I know, he is not active on the 
support@ mailing list.


-Gary



-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] CARP and BGP

2009-11-16 Thread Aarno Aukia
Hello Evgeny,

On Mon, Nov 16, 2009 at 17:31, Evgeny Yurchenko evg.yu...@rogers.com wrote:
 Could you explain how it works please? I have no questions about
 active(CARP) one but what about passive? bgpd on passive one will be
 continuously trying to connect to peer... using what source IP?

The key is to use local-address carp address and depend-on
carpX. This way the backup bgpd only starts connecting when carp has
fail-overed (when the carp interface becomes active) using the carp
address.
Beware of asymmetric routing though if not using pfsync...

-Aarno
-- 
Aarno Aukia
Atrila GmbH
Switzerland

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org