From owner-freebsd-ports@FreeBSD.ORG Mon Jul 9 21:02:57 2007 Return-Path: X-Original-To: ports@freebsd.org Delivered-To: freebsd-ports@FreeBSD.ORG Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 86E1916A400 for ; Mon, 9 Jul 2007 21:02:57 +0000 (UTC) (envelope-from fjwcash+freebsd@gmail.com) Received: from smtp.sd73.bc.ca (smtp.sd73.bc.ca [142.24.13.140]) by mx1.freebsd.org (Postfix) with ESMTP id 69F4513C45A for ; Mon, 9 Jul 2007 21:02:57 +0000 (UTC) (envelope-from fjwcash+freebsd@gmail.com) Received: from localhost (localhost [127.0.0.1]) by localhost.sd73.bc.ca (Postfix) with ESMTP id 7EB921A000B16 for ; Mon, 9 Jul 2007 13:32:14 -0700 (PDT) X-Virus-Scanned: Debian amavisd-new at smtp.sd73.bc.ca Received: from smtp.sd73.bc.ca ([127.0.0.1]) by localhost (smtp.sd73.bc.ca [127.0.0.1]) (amavisd-new, port 10024) with LMTP id qWmcU3j7N4fg for ; Mon, 9 Jul 2007 13:32:12 -0700 (PDT) Received: from coal (s10.sbo [192.168.0.10]) by smtp.sd73.bc.ca (Postfix) with ESMTP id 8ECFC1A000B18 for ; Mon, 9 Jul 2007 13:32:12 -0700 (PDT) From: Freddie Cash Organization: School District 73 To: ports@freebsd.org Date: Mon, 9 Jul 2007 13:32:11 -0700 User-Agent: KMail/1.9.7 References: <4692862C.4030008@foster.cc> In-Reply-To: <4692862C.4030008@foster.cc> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200707091332.11554.fjwcash+freebsd@gmail.com> Cc: Subject: Re: field notes - dansguardian and tinyproxy X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Jul 2007 21:02:57 -0000 On July 9, 2007 12:02 pm Mark Foster wrote: > Just completed a setup of dansguardian w/ tinyproxy on 5.5-RELEASE-p11 > and it works pretty well. Performance is a bit lackluster, but > acceptable. > > I noticed that dansguardian requires squid via RUN_DEPENDS but that is > a bit inflexible isn't it. I just commented out that line in the > Makefile before make install. > Dunno if that's the "right way" but it would be nice to have the option > of toggling in tinyproxy (or whatever) instead of squid. > > Also, tinyproxy wasn't working for me on sparc64, it built/installed > fine but using a mostly default config seemed to munge the IP address > of the client, making the Allow ACLs in tinyproxy.conf useless. Is than > an big vs. little-endian issue? > e.g. 192.168.1.9 was being seen as 48.55.32.49 I've tried getting DansGuardian to work with the latest versions of Tinyproxy, and have never succeeded. Keep getting "malformed request" responses from Tinyproxy. As such, I haven't changed the DG port to use anything other than Squid. I guess I could add an OPTIONS knob for Squid it, defaulting to on. Those that don't want Squid could disable it. -- Freddie Cash, LPIC-2 CCNT CCLP Network Support Technician School District 73 (250) 377-HELP [377-4357] fjwcash+freebsd@gmail.com