OPNsense Forum

English Forums => General Discussion => Topic started by: ovcrash on June 23, 2017, 02:52:04 am

Title: Log blacklisted site in web proxy
Post by: ovcrash on June 23, 2017, 02:52:04 am

Hi,

I know that OpenSense uses squid as the web proxy. I just don't know if they use squidguard for the blacklist part of the web proxy.

In squidguard you can do this:

Quote

Logging blocked access tries

It may be of interest who is accessing blocked sites. To track that down you can add a log directive to your src or dest definitions in your squidGuard.conf. If only a file name is given, the file is search in the directory specified in the logdir directive.

Logging blocked access tries
dest porn {
        domainlist porn/domains
        urllist porn/urls
        log pornaccesses
}

ref: http://www.squidguard.org/Doc/extended.html (http://www.squidguard.org/Doc/extended.html)

So what this does, it that it loads a blacklist list category and just logs who access a site listed in the blacklist. It doesn't block the person from access to that site, just logs it.

Is it possible to do this in OpenSense? If so, how?

Thanks

Title: Re: Log blacklisted site in web proxy
Post by: fabian on June 23, 2017, 10:28:41 am

Squid has an access log - you can do that by extracting the hostname and the IP/username from the log file and look up for a hostname in a blacklist file.

Title: Re: Log blacklisted site in web proxy
Post by: ovcrash on June 23, 2017, 02:22:58 pm

Hi,

Yes, that is the long way of doing it and it would work. I wanted more of a user friendly way of doing it, like squidguard does it.

So the quick answer is that opesense doesn't do this. I can't configure the blacklist part of opensense like that.

Maybe in the future this will be an added feature.

Thanks