Solved: pfsense + squidguard blocks an url from a deleted commoan acl rule

Create Account

Linux

Questions

Followers

Top Experts

decioracy🇧🇷

pfsense + squidguard blocks an url from a deleted commoan acl rule

Hi,

I am using pfense 2.03 with squid+squidguard.

I removed a common acl rule using GUI, but it still blocking the url:

Request denied by pfSense proxy: 403 Forbidden

Reason:
Client address: 192.168.1.1
Client group: default
Target group: blk_blacklists_news
URL: http://www.terra.com.br/

targert group:blk_blacklists_news doesn´t exist anymore
Default access [all] has allow

What file do I have to change to get it work again ?

Thank you

Racy

Zero AI Policy

We believe in human intelligence. Our moderation policy strictly prohibits the use of LLM content in our Q&A threads.

Vijay Pratap Singh🇮🇳

have u restarted the squid service???

decioracy🇧🇷

ASKER

Yes, I also did a reboot ;)

skullnobrains

please show us the squidguard config file on disk

also please, this is not linux networking. pfsense is freeBSD based and you can be sure that building such a firewall on top of linux would be MUCH more work if at all feasible

EARN REWARDS FOR ASKING, ANSWERING, AND MORE.

Earn free swag for participating on the platform.

decioracy🇧🇷

ASKER

Hi,

It is here:

# ============================================================
# SquidGuard configuration file
# This file generated automaticly with SquidGuard configurator
# (C)2006 Serg Dvoriancev
# email: dv_serg@mail.ru
# ============================================================

logdir /var/squidGuard/log
dbhome /var/db/squidGuard

# 
dest ads {
   domainlist ads/domains
   urllist ads/urls
}

# 
dest aggressive {
   domainlist aggressive/domains
   urllist aggressive/urls
}

# 
dest audio-video {
   domainlist audio-video/domains
   urllist audio-video/urls
}

# 
dest drugs {
   domainlist drugs/domains
   urllist drugs/urls
}

# 
dest gambling {
   domainlist gambling/domains
   urllist gambling/urls
}

# 
dest hacking {
   domainlist hacking/domains
   urllist hacking/urls
}

# 
dest mail {
   domainlist mail/domains
}

# 
dest porn {
   domainlist porn/domains
   expressionlist porn/expressions
   urllist porn/urls
}

# 
dest proxy {
   domainlist proxy/domains
   urllist proxy/urls
}

# 
dest violence {
   domainlist violence/domains
   expressionlist violence/expressions
   urllist violence/urls
}

# 
dest warez {
   domainlist warez/domains
   urllist warez/urls
}

# 
rew safesearch {
   s@(google..*/search?.*q=.*)@&safe=active@i
   s@(google..*/images.*q=.*)@&safe=active@i
   s@(google..*/groups.*q=.*)@&safe=active@i
   s@(google..*/news.*q=.*)@&safe=active@i
   s@(yandex..*/yandsearch?.*text=.*)@&fyandex=1@i
   s@(search.yahoo..*/search.*p=.*)@&vm=r&v=1@i
   s@(search.live..*/.*q=.*)@&adlt=strict@i
   s@(search.msn..*/.*q=.*)@&adlt=strict@i
   s@(.bing..*/.*q=.*)@&adlt=strict@i
}

# 
acl  {
   # 
   default  {
      pass all
      redirect http://192.168.1.253:80/sgerror.php?url=403%20&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u
   }
}

Open in new window

ASKER CERTIFIED SOLUTION

skullnobrains

membership

Signing up is free and takes 30 seconds. No credit card required.

Create Account

decioracy🇧🇷

ASKER

Hi,

After disabling squind and squidquard, the error continued ... so I had to reinstall the pfsense.

Linux

Questions

Followers

Top Experts

Linux is a UNIX-like open source operating system with hundreds of distinct distributions, including: Fedora, openSUSE, Ubuntu, Debian, Slackware, Gentoo, CentOS, and Arch Linux. Linux is generally associated with web and database servers, but has become popular in many niche industries and applications.