Copfilter 2.0.91beta3 for IPCop 2.0.3 / 2.0.4

This forum is for all copfilter version 2 support related questions in English. (IPCop version 2)
karesmakro
Site Admin
Posts: 1280
Joined: 09 Dec 2009 21:17

Copfilter 2.0.91beta3 for IPCop 2.0.3 / 2.0.4

Post by karesmakro » 19 Feb 2012 12:57

Released Copfilter 2.0.91beta3

Copfilter 2.0.91beta3 comes with small fixes.

Main reason to upload this new release was, to fix the failed squid binary backup on replacing with icap's one.
There was also added a short first step instruction at the end of the Copfilter installation (Thanks to FischerM)
  • - fixed the timing for loading the firewall rules after boot process (fixes ioctl errors on bootup) (thanks to Falconcrest for reporting)
    - fixed Squid binary backup problem in setup_util (thanks to Falconcrest for reporting)
    - fixed monit and proxsmtpd problem and remove existing pidfile on startup
    - added a first step instruction after copfilter installation (thanks to FischerM)
Download: http://www.copfilter.org/pg64

If you have already installed Copfilter 2.0.91beta2, download this fix and install
http://www.copfilter.org/v2-downloads/f ... 1beta2.tgz
md5sum: 450b69cc14b50dedba5fea7b22dc0e3d

Thank you for using Copfilter

lionelmnr
Posts: 6
Joined: 07 Mar 2012 18:26

Re: Copfilter 2.0.91beta3 for IPCop 2.0.3 / 2.0.4

Post by lionelmnr » 07 Mar 2012 19:00

Hi there

I cant seem to get this working on ipcop 2.04 its not blocking the categories I've selected when accessing them from my browser. I am not a genius with this but this is what I have done.

I've installed Copfilter 2.0.91beta3 and got the following services running Monit,Havp,Privoxy,ClamAv,Imspector,C-Icap. I have blocked social media using the Shallas blacklist and used custom blocked domains to block http://www.facebook.com but still I am able to access facebook. So its not blocking the url. Sorry if I have the whole thing wrong??

Please help not sure what else to post about my system either?

Thanks

Severus
Site Admin
Posts: 457
Joined: 10 Dec 2009 07:01
Location: Nürnberg - Germany

Re: Copfilter 2.0.91beta3 for IPCop 2.0.3 / 2.0.4

Post by Severus » 07 Mar 2012 19:07

Hi lionelmnr and welcome to the forum.

First to say it's not a good idea to run havp and C-ICAP at the same time.
You have to decide yourself upon one of them: havp with privoxy or C-ICAP.
If done so, we'll take it from there.

Severus

lionelmnr
Posts: 6
Joined: 07 Mar 2012 18:26

Re: Copfilter 2.0.91beta3 for IPCop 2.0.3 / 2.0.4

Post by lionelmnr » 07 Mar 2012 19:21

Hi Severus

Thank You

I have decided to go with C-ICAP and have disabled havp and privoxy. Tested it again still the same

karesmakro
Site Admin
Posts: 1280
Joined: 09 Dec 2009 21:17

Re: Copfilter 2.0.91beta3 for IPCop 2.0.3 / 2.0.4

Post by karesmakro » 07 Mar 2012 20:05

Hi lionelmnr

after the Copfilter installation did you made a restart of IPCop? If not, the databases converter can not be performed!
Can you check the Shalla's categorie folder,whether the domains.db and url.db were created
You need to check one of a selected categorie! The categorie folders you can find in

Code: Select all

/var/log/copfilter/default/opt/c_icap/etc/blacklists/
Blacklist is active?

@Severus, since Copfilter 2.0.91beta2/3 it is possible, to use C-ICAP as URL-Filter and HAVP as a virus scanner and if desired, with privoxy as well.

regards

lionelmnr
Posts: 6
Joined: 07 Mar 2012 18:26

Re: Copfilter 2.0.91beta3 for IPCop 2.0.3 / 2.0.4

Post by lionelmnr » 07 Mar 2012 20:12

Hi Severus

Yes I did do a restart after installation. I checked for those two files and they are in the folders of categories I've selected and activate blacklist is on.

karesmakro
Site Admin
Posts: 1280
Joined: 09 Dec 2009 21:17

Re: Copfilter 2.0.91beta3 for IPCop 2.0.3 / 2.0.4

Post by karesmakro » 07 Mar 2012 20:28

I'm karesmakro, but no problem ;)

Please check, if your squid proxy is running and post the output of

Code: Select all

cat /var/ipcop/proxy/squid.conf
start a manual test, by typing

Code: Select all

/etc/rc.d/init.d/copfilter_c-icap --icapcheck

Severus
Site Admin
Posts: 457
Joined: 10 Dec 2009 07:01
Location: Nürnberg - Germany

Re: Copfilter 2.0.91beta3 for IPCop 2.0.3 / 2.0.4

Post by Severus » 07 Mar 2012 21:03

@karesmakro
:D
karesmakro wrote:@Severus, since Copfilter 2.0.91beta2/3 it is possible, to use C-ICAP as URL-Filter and HAVP as a virus scanner and if desired, with privoxy as well.
Glad to hear ;) but of course I knew that. It's the problem with my english knowledge. I tried to suggest to only use one of them for better discovering the culprit. Sorry. :cry:

Severus

lionelmnr
Posts: 6
Joined: 07 Mar 2012 18:26

Re: Copfilter 2.0.91beta3 for IPCop 2.0.3 / 2.0.4

Post by lionelmnr » 08 Mar 2012 09:13

Sorry karesmakro

Here is the result for cat /var/ipcop/proxy/squid.conf

# COPFILTER START - c-icap - do not modify
icap_enable on
icap_preview_enable on
icap_preview_size 512
icap_send_client_ip on
icap_service_failure_limit -1
icap_send_client_username on
icap_client_username_encode on
icap_client_username_header X-Authenticated-User

icap_service service_req reqmod_precache bypass=1 icap://127.0.0.1:1344/srv_clamav
icap_service service_resp respmod_precache bypass=1 icap://127.0.0.1:1344/srv_clamav
icap_service urlcheck_req reqmod_precache 0 bypass=1 icap://127.0.0.1:1344/url_check_module

acl MULTIMEDIA rep_mime_type -i ^(audio\/x-mpegurl|audio\/mpeg|video\/flv|video\/x-flv|application\/x-shockwave-flash|audio\/ogg|video\/ogg|application\/ogg\/cvd\/cld)$

adaptation_service_chain URL_RESP urlcheck_req
adaptation_access URL_RESP allow all

adaptation_service_chain AV_scan service_resp
adaptation_access AV_scan deny MULTIMEDIA
adaptation_access AV_scan allow all
# COPFILTER END - c-icap - do not modify

And the test for this /etc/rc.d/init.d/copfilter_c-icap --icapcheck said "not running squid". So i checked the proxy tab and it said stopped how do I start it? I enabled it on green restarted the box still nothing?

I also now have no internet through the ipcop box...

Thanks

karesmakro
Site Admin
Posts: 1280
Joined: 09 Dec 2009 21:17

Re: Copfilter 2.0.91beta3 for IPCop 2.0.3 / 2.0.4

Post by karesmakro » 08 Mar 2012 09:40

No problem :)

It seems, that the same happened to you, like eku in Copfilter forum. Was your Copfilter installation an upgrade installation?

Please download the makesquidconf.pl from http://www.it-connect-unix.de/copfilter ... onf.tar.gz
and extract it

Code: Select all

tar xzvf ./makesquidconf.tar.gz -C /
after that, you can start your proxy from gui again and if it is running, restart C-ICAP

regards

Post Reply