Page 1 of 3

Copfilter 2.0.91beta3 for IPCop 2.0.3 / 2.0.4

Posted: 19 Feb 2012 12:57
by karesmakro
Released Copfilter 2.0.91beta3

Copfilter 2.0.91beta3 comes with small fixes.

Main reason to upload this new release was, to fix the failed squid binary backup on replacing with icap's one.
There was also added a short first step instruction at the end of the Copfilter installation (Thanks to FischerM)
  • - fixed the timing for loading the firewall rules after boot process (fixes ioctl errors on bootup) (thanks to Falconcrest for reporting)
    - fixed Squid binary backup problem in setup_util (thanks to Falconcrest for reporting)
    - fixed monit and proxsmtpd problem and remove existing pidfile on startup
    - added a first step instruction after copfilter installation (thanks to FischerM)
Download: http://www.copfilter.org/pg64

If you have already installed Copfilter 2.0.91beta2, download this fix and install
http://www.copfilter.org/v2-downloads/f ... 1beta2.tgz
md5sum: 450b69cc14b50dedba5fea7b22dc0e3d

Thank you for using Copfilter

Re: Copfilter 2.0.91beta3 for IPCop 2.0.3 / 2.0.4

Posted: 07 Mar 2012 19:00
by lionelmnr
Hi there

I cant seem to get this working on ipcop 2.04 its not blocking the categories I've selected when accessing them from my browser. I am not a genius with this but this is what I have done.

I've installed Copfilter 2.0.91beta3 and got the following services running Monit,Havp,Privoxy,ClamAv,Imspector,C-Icap. I have blocked social media using the Shallas blacklist and used custom blocked domains to block http://www.facebook.com but still I am able to access facebook. So its not blocking the url. Sorry if I have the whole thing wrong??

Please help not sure what else to post about my system either?

Thanks

Re: Copfilter 2.0.91beta3 for IPCop 2.0.3 / 2.0.4

Posted: 07 Mar 2012 19:07
by Severus
Hi lionelmnr and welcome to the forum.

First to say it's not a good idea to run havp and C-ICAP at the same time.
You have to decide yourself upon one of them: havp with privoxy or C-ICAP.
If done so, we'll take it from there.

Severus

Re: Copfilter 2.0.91beta3 for IPCop 2.0.3 / 2.0.4

Posted: 07 Mar 2012 19:21
by lionelmnr
Hi Severus

Thank You

I have decided to go with C-ICAP and have disabled havp and privoxy. Tested it again still the same

Re: Copfilter 2.0.91beta3 for IPCop 2.0.3 / 2.0.4

Posted: 07 Mar 2012 20:05
by karesmakro
Hi lionelmnr

after the Copfilter installation did you made a restart of IPCop? If not, the databases converter can not be performed!
Can you check the Shalla's categorie folder,whether the domains.db and url.db were created
You need to check one of a selected categorie! The categorie folders you can find in

Code: Select all

/var/log/copfilter/default/opt/c_icap/etc/blacklists/
Blacklist is active?

@Severus, since Copfilter 2.0.91beta2/3 it is possible, to use C-ICAP as URL-Filter and HAVP as a virus scanner and if desired, with privoxy as well.

regards

Re: Copfilter 2.0.91beta3 for IPCop 2.0.3 / 2.0.4

Posted: 07 Mar 2012 20:12
by lionelmnr
Hi Severus

Yes I did do a restart after installation. I checked for those two files and they are in the folders of categories I've selected and activate blacklist is on.

Re: Copfilter 2.0.91beta3 for IPCop 2.0.3 / 2.0.4

Posted: 07 Mar 2012 20:28
by karesmakro
I'm karesmakro, but no problem ;)

Please check, if your squid proxy is running and post the output of

Code: Select all

cat /var/ipcop/proxy/squid.conf
start a manual test, by typing

Code: Select all

/etc/rc.d/init.d/copfilter_c-icap --icapcheck

Re: Copfilter 2.0.91beta3 for IPCop 2.0.3 / 2.0.4

Posted: 07 Mar 2012 21:03
by Severus
@karesmakro
:D
karesmakro wrote:@Severus, since Copfilter 2.0.91beta2/3 it is possible, to use C-ICAP as URL-Filter and HAVP as a virus scanner and if desired, with privoxy as well.
Glad to hear ;) but of course I knew that. It's the problem with my english knowledge. I tried to suggest to only use one of them for better discovering the culprit. Sorry. :cry:

Severus

Re: Copfilter 2.0.91beta3 for IPCop 2.0.3 / 2.0.4

Posted: 08 Mar 2012 09:13
by lionelmnr
Sorry karesmakro

Here is the result for cat /var/ipcop/proxy/squid.conf

# COPFILTER START - c-icap - do not modify
icap_enable on
icap_preview_enable on
icap_preview_size 512
icap_send_client_ip on
icap_service_failure_limit -1
icap_send_client_username on
icap_client_username_encode on
icap_client_username_header X-Authenticated-User

icap_service service_req reqmod_precache bypass=1 icap://127.0.0.1:1344/srv_clamav
icap_service service_resp respmod_precache bypass=1 icap://127.0.0.1:1344/srv_clamav
icap_service urlcheck_req reqmod_precache 0 bypass=1 icap://127.0.0.1:1344/url_check_module

acl MULTIMEDIA rep_mime_type -i ^(audio\/x-mpegurl|audio\/mpeg|video\/flv|video\/x-flv|application\/x-shockwave-flash|audio\/ogg|video\/ogg|application\/ogg\/cvd\/cld)$

adaptation_service_chain URL_RESP urlcheck_req
adaptation_access URL_RESP allow all

adaptation_service_chain AV_scan service_resp
adaptation_access AV_scan deny MULTIMEDIA
adaptation_access AV_scan allow all
# COPFILTER END - c-icap - do not modify

And the test for this /etc/rc.d/init.d/copfilter_c-icap --icapcheck said "not running squid". So i checked the proxy tab and it said stopped how do I start it? I enabled it on green restarted the box still nothing?

I also now have no internet through the ipcop box...

Thanks

Re: Copfilter 2.0.91beta3 for IPCop 2.0.3 / 2.0.4

Posted: 08 Mar 2012 09:40
by karesmakro
No problem :)

It seems, that the same happened to you, like eku in Copfilter forum. Was your Copfilter installation an upgrade installation?

Please download the makesquidconf.pl from http://www.it-connect-unix.de/copfilter ... onf.tar.gz
and extract it

Code: Select all

tar xzvf ./makesquidconf.tar.gz -C /
after that, you can start your proxy from gui again and if it is running, restart C-ICAP

regards