{"id":523,"date":"2020-04-17T10:44:07","date_gmt":"2020-04-17T10:44:07","guid":{"rendered":"http:\/\/www.comden.co.za\/wp\/?p=523"},"modified":"2021-12-01T13:52:21","modified_gmt":"2021-12-01T13:52:21","slug":"how-to-setup-squid-as-a-transparent-ssl-proxy-with-site-filtering","status":"publish","type":"post","link":"https:\/\/www.comden.co.za\/wp\/how-to-setup-squid-as-a-transparent-ssl-proxy-with-site-filtering\/","title":{"rendered":"How to setup Squid as a Transparent SSL Proxy with Site Filtering"},"content":{"rendered":"\n<p><strong><img loading=\"lazy\" decoding=\"async\" width=\"750\" height=\"422\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid.jpg\" alt=\"\"><\/strong><\/p>\n\n\n\n<p>I\u2019ve been meaning to do this how-to since 2017 \u2013 but other things came up. I always seemed to have either the time or the motivation \u2013 but never both at the same time. With COVID-19 in full swing and me in lockdown (along with the rest of the country), I\u2019ve finally managed to find both! LOL<\/p>\n\n\n\n<p>The server will be running the following:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Ubuntu 18.04 Server running on Hyper-V (on Windows 10).<\/li><li>Squid 4.10 (Proxy Server) <\/li><li>Privoxy 3.0.26 (Provides Ad blocking &amp; tracker blocking \u2013 Privacy in other words)<\/li><li>CPU: 2 Cores of a Ryzen 5 3600<\/li><li>RAM: 1024 MB<\/li><li>HDD: 80 GB VHD<\/li><li>1 Gigabit NIC<\/li><\/ul>\n\n\n\n<p><\/p>\n\n\n\n<p>We will also have to patch a squid source file for Squid\u2019s SSL Splice mode to work correctly in transparent mode. (More on that later).<\/p>\n\n\n\n<p>Without further ado, let\u2019s get started.<\/p>\n\n\n\n<p>Next Up: Installing UBUNTU Operating System <\/p>\n\n\n\n<!--nextpage-->\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"540\" height=\"243\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Ubuntu\/ubuntu-logo.png\" alt=\"\" class=\"wp-image-547\" srcset=\"https:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Ubuntu\/ubuntu-logo.png 540w, https:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Ubuntu\/ubuntu-logo-300x135.png 300w\" sizes=\"auto, (max-width: 540px) 100vw, 540px\" \/><\/figure>\n\n\n\n<h1 class=\"wp-block-heading\">Installing the Ubuntu Operating System<\/h1>\n\n\n\n<p>Go to the UBUNTU <a href=\"https:\/\/ubuntu.com\/download\/server\">Downloads page<\/a>, and grab the iso for Ubuntu Server 18.04 LTS. Once downloaded, Burn the ISO to CD or to a USB Memory stick (Balena\u2019s <a href=\"https:\/\/www.balena.io\/etcher\/\">Etcher<\/a> is great for creating bootable flash drives from ISO\u2019s)<\/p>\n\n\n\n<p>Then pop the installation media into your target server &amp; boot off it.&nbsp; Ubuntu\u2019s install process is quite straightforward.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image001.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Select your preferred language.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image002.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Select \u201cInstall Ubuntu Server\u201d<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image003.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Once the installer is loaded, select the language \u2013 again.<br>This is for the installer.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image004.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Select your keyboard layout &amp; Language for your installation.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image005.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Time to configure our Server\u2019s IP. Select your network<br>interface, and press enter.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image006.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Select \u201cEdit IPv4\u201d and press Enter.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image007.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Select Manual, and Press Enter.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image008.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Fill in your network Detail \u2013 in the format displayed in the<br>screenshot above. Then press Enter on Save.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image009.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Then Press Enter on Done.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image010.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Done, again on next page (unless you need a proxy server for internet access, but since we are setting up a proxy server, I assume you don\u2019t :P).<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image011.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Select a mirror close to your location, and Press Enter on Done.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image012.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Select as above, and Press Enter on Done.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image013.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Press Enter On Done.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image014.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Press Enter on Continue. (This Will Destroy the data that was on the disk you are installing to, so make sure you\u2019ve grabbed whatever you want to keep off it first.)<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image015.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Fill in the details requested above, And then press Enter on Done.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image016.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Tick \u201cInstall OpenSSH Server\u201d and press Enter on Done.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image017.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Press Enter on Done.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image018.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>And your install is underway! Wait for it to complete.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image019.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>When the install is done, the installer will want to update<br>the software packages that\u2019s part of the installation to the latest versions<br>available online. You can either wait for it to complete this process, or<br>cancel and reboot immediately.&nbsp; Your choice, but I recommend you let it finish (unlike I did, because I am impatient lol).<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image020.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Remove your Installation media, and press Enter. The system will then complete the reboot and boot your installed Ubuntu Server OS.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image021.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>And congratulations, you\u2019ve just installed Ubuntu Server.<br>Next up, Getting Squid up and running.<\/p>\n\n\n\n<p>Next Up: Installing Squid 4.10 from Source.<\/p>\n\n\n\n<!--nextpage-->\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"750\" height=\"422\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid.jpg\" alt=\"\" class=\"wp-image-530\" srcset=\"https:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid.jpg 750w, https:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid-300x169.jpg 300w\" sizes=\"auto, (max-width: 750px) 100vw, 750px\" \/><\/figure>\n\n\n\n<h1 class=\"wp-block-heading\">Installing Squid 4.10 from Source.<\/h1>\n\n\n\n<hr>\n\n\n\n<h3 class=\"wp-block-heading\">Getting Our System Ready For Compiling From Source.<\/h3>\n\n\n\n<hr>\n\n\n\n<p>Firstly login to your linux system with the user you created (sysadmin in my Example screenshots), then elevate your privileges to root by typing <b><i>sudo -s<\/i><\/b> , type your password and press Enter.<\/p>\n\n\n\n<p>Now we need to enable access to Ubuntu\u2019s Source repositories.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image022.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Type <b><i>nano \/etc\/apt\/sources.list<\/i><\/b> and press Enter<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image023.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Uncomment (remove the #) in front of all the lines that start with <b>deb<\/b> &amp; <b>deb-src<\/b>, press CTRL + O then Enter to save, and CTRL + X to exit.<\/p>\n\n\n\n<p>We also need to update our server\u2019s repository cache, so it is aware of the new repositories contents that we just enabled.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image024.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Type <b><i>apt update<\/i><\/b> and press Enter.<\/p>\n\n\n\n<p>Next, we need to instal some packages necessary to build Squid from source. We can\u2019t use the packages in Ubuntu\u2019s repository because the do not include support for running Squid as an SSL Proxy.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image025.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Type <b><i>apt install build-essential fakeroot devscripts<br>gawk gcc-multilib dpatch openssl libssl-dev pkg-config<\/i><\/b>, and press<br>Enter.<\/p>\n\n\n\n<hr>\n\n\n\n<h3 class=\"wp-block-heading\">Compiling Squid from Source<\/h3>\n\n\n\n<hr>\n\n\n\n<p>Next up, we need to download the squid source code we are going to use. I\u2019ve done this in a script for ease of execution. Let\u2019s create the script then execute it.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image026.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Type <b><i>&nbsp;nano buildsquid.bash<\/i><\/b> and press Enter<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image027.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Type out the script in the screenshot exactly as is, and save &amp; exit.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image028.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Next, run the script by typing<b><i> bash buildsquid.bash <\/i><\/b>and<br>press Enter.<\/p>\n\n\n\n<p>Next, we need to enable SSL Support, so that when we start compiling squid is built with SSL support enabled.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image029.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Type <b><i>cd ~\/build\/squid\/squid-4.10\/ &amp;&amp; nano debian\/rules<\/i><\/b> and press Enter.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image030.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Modify the line that reads <b>\u2013enable-icap-client \/<\/b> to look as in the screenshot above. Save the file &amp; exit.<\/p>\n\n\n\n<p>Next up, we need to modify one of the source files before compiling squid.&nbsp; Due to some sites using Round-Robin DNS, squid incorrectly picks up these sites as forgeries when running as an SSL proxy in transparent mode (not an issue if running in explicit mode (Put proxy settings in browser or deploying via WPAD)).<\/p>\n\n\n\n<p>The file we need to modify is in the src directory under ~\/build\/squid\/squid-4.10\/ and is called client_side_request.cc. open it with nano and look for the lines below (if you are using squid 4.10 from the DL source in this howto \u2013 the lines we are looking for will be on line 540 of the file):<\/p>\n\n\n\n<figure class=\"wp-block-table MsoTableGrid\"><table><tbody><tr><td>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">debugs(85, 3, HERE &lt;&lt; &#8220;validate IP &#8221; &lt;&lt;<br>clientConn-&gt;local &lt;&lt; &#8221; non-match from Host: IP &#8221; &lt;&lt;<br>ia-&gt;in_addrs[i]);<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }<\/p>\n<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p>After the curly-bracket, on a new line type the following:<\/p>\n\n\n\n<figure class=\"wp-block-table MsoTableGrid\"><table><tbody><tr><td>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; http-&gt;request-&gt;flags.hostVerified = true;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; http-&gt;doCallouts();<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; return;<\/p>\n<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p>The applicable section of the file should then look like the<br>image below:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image031.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Now we can compile \/ build or .deb packages we will use to<br>install Squid.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image032.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Type<b><i> dpkg-buildpackage -rfakeroot -b -us -uc <\/i><\/b>and<br>press Enter.<\/p>\n\n\n\n<p>Let this run through, it will take some time \u2013 how much is<br>dependent on your hardware.<\/p>\n\n\n\n<p>Once it is done, you can cd one directory up,&nbsp; as that is<br>where our installation files were created.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image033.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Type <b><i>&nbsp;cd.. <\/i><\/b>and Enter then<i> <b>ls -lh<\/b><\/i><br>and Enter to list the content of the directory. The .deb files you see, are the<br>ones our previous command created.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image034.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>We also need to install just squid\u2019s language pack from<br>Ubuntu\u2019s repository, as well as apache. To do this type <b><i>apt install<br>squid-langpack apache2 <\/i><\/b>and press Enter. Then, once that is done \u2013 type <b><i>dpkg \u2013i squid*.deb<\/i> <\/b>to install squid.<\/p>\n\n\n\n<p>And that\u2019s it, squid is installed!<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image035.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Next up: Installing SARG (Squid Reporting Tool)<\/p>\n\n\n\n<!--nextpage-->\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1021\" height=\"404\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Sarg.jpg\" alt=\"\" class=\"wp-image-553\" srcset=\"https:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Sarg.jpg 1021w, https:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Sarg-300x119.jpg 300w, https:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Sarg-768x304.jpg 768w\" sizes=\"auto, (max-width: 1021px) 100vw, 1021px\" \/><\/figure>\n\n\n\n<h1 class=\"wp-block-heading\">Installing SARG (Squid Reporting Tool)<\/h1>\n\n\n\n<p>SARG (Squid Aggregate Report Generator) is a reporting tool<br>that generates access reports.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image036.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Type <b><i>apt install sarg<\/i><\/b><i> <\/i>and press Enter.<\/p>\n\n\n\n<p>All Done!<\/p>\n\n\n\n<p>Next Up: Configuring the Firewall<\/p>\n\n\n\n<!--nextpage-->\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"640\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Firewall-1024x640.jpg\" alt=\"\" class=\"wp-image-548\" srcset=\"https:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Firewall-1024x640.jpg 1024w, https:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Firewall-300x188.jpg 300w, https:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Firewall-768x480.jpg 768w, https:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Firewall.jpg 1080w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h1 class=\"wp-block-heading\">Configuring the Firewall<\/h1>\n\n\n\n<p>Next up we need to configure the firewall to do NAT &amp;<br>port redirection for our transparent proxy. We also need to open certain ports on the firewall for our clients to connect. Specifically we need to allow TCP ports 22, 1080, 10443, 3129 and 3130.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image037.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Type the following commands in order, pressing Enter after<br>each:<br><span style=\"font-family: Symbol;\">\u00b7&nbsp;<\/span>ufw allow OpenSSH<br><span style=\"font-family: Symbol;\">\u00b7&nbsp;<\/span>ufw allow 1080\/tcp<br><span style=\"font-family: Symbol;\">\u00b7&nbsp;<\/span>ufw allow 10443\/tcp<br><span style=\"font-family: Symbol;\">\u00b7&nbsp;<\/span>ufw allow 3129\/tcp<br><span style=\"font-family: Symbol;\">\u00b7&nbsp;<\/span>ufw allow 3130\/tcp<br><span style=\"font-family: Symbol;\">\u00b7&nbsp;<\/span>ufw enable and Enter, Y to confirm.<\/p>\n\n\n\n<p>Next, we need to set up the NAT and redirection rules.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image038.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Type <b><i>nano \/etc\/ufw\/before.rules<\/i><\/b> and press<br>Enter.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image039.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Type out the contents of the screenshot as is (from # START<br>SQUID RULES to # END SQUID RULES \u2013 remember to substitute IP addresses with<br>your server values), right at the top of the file (below the first couple of<br>comment lines), then save and exit.<\/p>\n\n\n\n<p>We also need to make a change to the firewall\u2019s default<br>forwarding policy.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image040.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Type <b><i>nano \/etc\/default\/ufw <\/i><\/b>and press Enter.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image041.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Look for the line in the screenshot above, and change it<br>from DROP to ACCEPT. Save and Exit, then Reboot.<\/p>\n\n\n\n<p>And finally we need to manke a few changes to the<br>\/etc\/sysctl.conf file.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image042.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Type <b><i>nano \/etc\/sysctl.conf<\/i><\/b> and press Enter.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image043.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Find the underlined lines, and set the values as above.<br>Uncomment the lines where necessary.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image044.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Also add the above lines to the bottom of the file, Save and<br>Exit. Then type <b><i>sysctl -p -w<\/i><\/b> and press Enter to apply the<br>changes.&nbsp;&nbsp;<\/p>\n\n\n\n<p>And the firewall is configured!<\/p>\n\n\n\n<p>Next Up: Configuring Squid, Apache and SARG<\/p>\n\n\n\n<!--nextpage-->\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"750\" height=\"422\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid.jpg\" alt=\"\" class=\"wp-image-530\" srcset=\"https:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid.jpg 750w, https:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid-300x169.jpg 300w\" sizes=\"auto, (max-width: 750px) 100vw, 750px\" \/><\/figure>\n\n\n\n<h1 class=\"wp-block-heading\">Configuring Squid, Apache and SARG<\/h1>\n\n\n\n<p>Now we need to configure everything. &nbsp;<\/p>\n\n\n\n<p><b>Well start off with Apache.<\/b><\/p>\n\n\n\n<p>Because we\u2019re intercepting port 80 &amp; 443, we\u2019ll be<br>changing Apache\u2019s default ports. Apache will be used to access SARG\u2019s reports.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image045.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Type <b><i>nano \/etc\/apache2\/ports.conf <\/i><\/b>&nbsp;and press<br>Enter.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image046.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Change the values in the file so yours reflects the changes<br>above. Save and Exit.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image047.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>We also need to enable a few apache modules &amp; the<br>default SSL site.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image048.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Next we need to create a directory for cgi scripts.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image049.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Now we need to configure the default sites to allow CGI<br>scripts.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image050.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Delete or comment out the contents &amp; replace with above.<br>Save &amp; Exit.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image051.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Next, the SSL site.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image052.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Delete or comment out the contents &amp; replace with above.<br>Save &amp; Exit.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image053.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Next we need to create a directory to hold our SSL<br>Certificates for Apache\u2019s SSL site.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image054.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Then we need to generate the certificate. Fill out the<br>details requested. Days control how long the certificate is valid for, you\u2019ll<br>have renew it when it expires.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image055.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Now restart Apache.<\/p>\n\n\n\n<p><b>Now we\u2019ll configure SARG.<\/b><\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image056.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Type <b><i>nano \/etc\/sarg\/sarg.conf <\/i><\/b>and press Enter.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image057.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Find the line above and change the path to<br>\/var\/log\/squid\/access.log. Save and Exit.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image058.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Find the line above, and change the path to<br>\/var\/www\/html\/sarg. Save &amp; Exit.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image059.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Next, create the report output_dir by typing mkdir<br>\/var\/www\/html\/sarg.<\/p>\n\n\n\n<p><b>And finally, we need to configure Squid.<\/b><\/p>\n\n\n\n<p>We first need to create our CA certiface for Squid and<br>export it to a format that can be imported on our users machines.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image060.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Change to the squid config directory with <b><i>cd<br>\/etc\/squid\/<\/i><\/b><\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image061.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Execute the commands in the screenshot above.<\/p>\n\n\n\n<p>Next to generate the CA Certificate.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image062.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Execute the command in the screenshot above, keep in mind<br>that you will need to renew this certificate as often as the days specified in<br>the \u2013days value. Fill in the info as requested.<\/p>\n\n\n\n<p>Now we need to export the Certificate, so we can import in<br>on our User\u2019s Pcs \/ Browsers.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image063.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Type out &amp; execute as per the screenshot above. Then<br>transfer the .der file to somewhere easily accessible. You will need to import<br>this into Trusted Root Certification Authorities in Windows \/ Firefox\u2019s Trusted<br>Certificates Store etc\u2026 on each PC that uses the proxy.<\/p>\n\n\n\n<p>Now we need to initialize Squids Certificate database, for<br>the dynamic certificate generation feature.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image064.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Type out the command above and Execute.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image065.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Type out and execute the commands in the screenshot above.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image066.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Type out the config above. &nbsp;Save &amp; Exit.<\/p>\n\n\n\n<p>Finally, we need to create the text file that will be used to store addresses of problematic sites (Some sites do not work correctly when their SSL connection is intercepted \u2013 for these we\u2019ll use splice instead of bump. <b>You also want to add internet banking sites to this list.<\/b>)<\/p>\n\n\n\n<p>Type <b><i>touch \/etc\/squid\/nobumpsites<\/i><\/b> and press Enter.<\/p>\n\n\n\n<p>Edit this file and add any urls you want to allow directly without intercepting their SSL connections to it.<\/p>\n\n\n\n<p>The format should be (the . at the start is important):<br><br>.domain.com<\/p>\n\n\n\n<p>Next Up: Installing &amp; Configuring UFDBGuard<\/p>\n\n\n\n<!--nextpage-->\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"676\" height=\"150\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/URLfilterDB.png\" alt=\"\" class=\"wp-image-549\" srcset=\"https:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/URLfilterDB.png 676w, https:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/URLfilterDB-300x67.png 300w\" sizes=\"auto, (max-width: 676px) 100vw, 676px\" \/><\/figure>\n\n\n\n<h1 class=\"wp-block-heading\">Installing &amp; Configuring UFDBGuard<\/h1>\n\n\n\n<p>And finally we need to install &amp; Configure UFDBGuard.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image067.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>First, we need to get the source for UFDBGuard (There is a .deb package if you prefer, but I prefer compiling it myself). CD to your home directory cd ~ where the build folder from our squid installation is located.<br>And then cd into Build. The run wget as in the picture above.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image068.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Extract the package after it\u2019s been downloaded.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image069.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>We also need to install some dependencies.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image070.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Then cd into the extracted source directory.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image071.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Run .\/configure<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image072.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Once that is done, run make &amp;&amp; make install<\/p>\n\n\n\n<p>And that\u2019s the installation done. Now for configuration.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image073.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Firstly, let\u2019s rename the default config file, and open a<br>new file as the config file &#8211; since we\u2019ll be using the one I\u2019ll be providing.<\/p>\n\n\n\n<p>Paste the contents below &#8211; changing details to match your<br>environment, into that file and save &amp; exit.<\/p>\n\n\n\n<figure class=\"wp-block-table MsoTableGrid\"><table><tbody><tr><td>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\"># Email for handling unblock requests<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">administrator &#8220;&lt;a href=%22 mailto:admin@domain.com %22&gt; Log<br>an Unblock Request &lt;\/a&gt;&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">dbhome &#8220;\/usr\/local\/ufdbguard\/blacklists&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">logdir &#8220;\/usr\/local\/ufdbguard\/logs&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">logblock on<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">logpass off<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">logall off<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">squid-version &#8220;4.0&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">squid-uses-active-bumping on<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">url-lookup-result-during-database-reload allow<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">url-lookup-result-when-fatal-error allow<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">analyse-uncategorised-urls off<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">ufdb-log-url-details off<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">ufdb-show-url-details off<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">check-proxy-tunnels off<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">safe-search off<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">youtube-edufilter off<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">youtube-edufilter-id &#8220;ABCD1234567890abcdef&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">max-logfile-size&nbsp; 200000000<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">redirect-https &#8220;https:\/\/192.168.8.2:10443\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">#http-server { port = 8081, interface = all, images =<br>\/usr\/local\/ufdbguard\/images }<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">external-status-command &#8220;\/usr\/local\/bin\/mailx&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">mail-server &#8220;mailserver.mydomain.com&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">admin-email &#8220;admin@mydomain.com&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\"># Define the network that contain computer systems that need URL<br>filtering<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">source AllSystems {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">ip&nbsp; 192.168.8.0\/24<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\"># define the security category<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category security {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">#&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;security\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">#&nbsp;&nbsp; expressionlist&nbsp; &#8220;security\/expressions&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">#&nbsp;&nbsp; cacerts&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;security\/cacerts&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp; option&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; enforce-https-with-hostname off<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp; option&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; enforce-https-official-certificate off<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp; option&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; https-prohibit-insecure-sslv2 on<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp; option&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; allow-aim-over-https on<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp; option&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; allow-gtalk-over-https on<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp; option&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; allow-skype-over-https on<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp; option&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; allow-yahoomsg-over-https on<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp; option&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; allow-fb-chat-over-https on<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp; option&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; allow-citrixonline-over-https on<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp; option&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; allow-unknown-protocol-over-https on<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;302:https:\/\/192.168.8.2:10443\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category safesearch-on {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; option safe-search on<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category safesearch-off {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; option safe-search off<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category alwaysallow {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; domainlist alwaysallow\/domains<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; redirect<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category alwaysblock {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; domainlist alwaysblock\/domains<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; redirect &#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category ads {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;ads\/domains&#8221; # Email for handling<br>unblock requests<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category porn {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;adult\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category arjel {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;arjel\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category astrology {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;astrology\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category audiovideo {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;audio-video\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category bank {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;bank\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category blog {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;blog\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category celebrity {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;celebrity\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category chat {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;chat\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category child {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;child\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category cleaning {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;cleaning\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category cooking {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;cooking\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category dangermat {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;dangermat\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category dating {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&#8220;dating\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category drugs {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;drugs\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp; &nbsp;redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category filehosting {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;filehosting\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category financial {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;financial\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category forums {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;forums\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category gambling {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;gambling\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category games {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;games\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category hacking {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;hacking\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category jobsearch {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;jobsearch\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category lingerie {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;lingerie\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category liste_bu {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;liste_bu\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category malware {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;malware\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category manga {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;manga\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category marketingware {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;marketingware\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category mixed_adult {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;mixed_adult\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category mobile-phone {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;mobile-phone\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category phishing {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;phishing\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category press {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;press\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category proxy {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;proxy\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category radio {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&#8220;radio\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category reaffected {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;reaffected\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category remote-control {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;remote-control\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category sect {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;sect\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category sex_ed {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;sex_ed\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category shopping {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;shopping\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category social_networks {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;social_networks\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category sports {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;sports\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category strict_redir {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;strict_redir\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category strong_redir {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;strong_redir\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category tricheur {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;tricheur\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category warez {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;warez\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">category webmail {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; domainlist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;webmail\/domains&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br>&#8220;http:\/\/192.168.8.2:1080\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\"># define web content access rights, Put a questionmark in front of<br>catagories you want blocked<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">acl {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; AllSystems {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; pass safesearch-on alwaysallow !alwaysblock<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; !ads !porn !arjel !astrology !celebrity !child<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; !cooking !dangermat !dating !drugs !gambling games<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; !hacking !jobsearch !lingerie !malware !manga !marketingware<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; !mixed_adult !mobile-phone !phishing proxy !reaffected !social_networks<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; !remote-control !sex_ed !sports !strict_redir !strong_redir<br>!tricheur !warez<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; audiovideo bank blog chat cleaning filehosting financial<br>forums press sect shopping webmail radio liste_bu security any<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">### the next acl is a mandatory fallback for all other cases.<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp; ### do NOT remove this ACL.<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;default {<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; pass !ads !porn !arjel !astrology !celebrity !child<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; !cooking !dangermat !dating !drugs !gambling !games<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; !hacking !jobsearch !lingerie !malware !manga<br>!marketingware<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; !mixed_adult !mobile-phone !phishing !proxy !reaffected<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; !remote-control !sex_ed !sports !strict_redir<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; !strong_redir !tricheur !warez<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; audiovideo bank blog chat cleaning filehosting financial<br>forums press sect shopping webmail radio liste_bu social_networks any<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; redirect<br>&#8220;http:\/\/cgibin.urlfilterdb.com\/cgi-bin\/URLblocked.cgi?admin=%A&amp;color=orange&amp;size=normal&amp;clientaddr=%a&amp;clientname=%n&amp;clientuser=%i&amp;clientgroup=%s&amp;category=%t&amp;url=%u&#8221;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">&nbsp;<\/p>\n<p style=\"margin-bottom: .0001pt; line-height: normal;\">}<\/p>\n<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image074.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Next up, we need to create our Exceptions directories and<br>files. First change directory \u2013 <b><i>cd \/usr\/local\/ufdbguard<\/i><\/b>.These are<br>for any exceptions to the blacklists we\u2019ll be using. So for example, facebook<br>is part of the social networks category, and we want to block that, but only<br>allow facebook, we\u2019d put <b>facebook.com<\/b> (as typed there), in the<br>alwaysallow\/domains file.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image075.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Next, create a new directory for 2 scripts we need to<br>create, you can create it anywhere.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image076.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>The first script converts &amp; imports our exception<br>blacklists to ufdbguard\u2019s blacklist format, then restarts ufdbguard to apply<br>the changes.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image077.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Type out the above &amp; save &amp; exit<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image078.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Then make the script executable.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image079.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>The second script downloads our squidguard blacklists &amp;<br>does the same for them.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image080.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Type out the above &amp; save and exit.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image081.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Then make the script executable.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image082.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>Then execute the script.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image083.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Next we need to enable ufdbguard during system startup.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image084.jpg\" alt=\"\"\/><\/figure>\n\n\n\n<p>And finally, we need to copy our block page CGI script to<br>the \/var\/www\/cgi-bin directory. This is the page that is displayed when a<br>website is blocked.<\/p>\n\n\n\n<p>Now reboot. At this point you can change your DHCP server<br>settings to dish out the Proxy server as your Default Gateway \u2013 instead of your<br>Firewall \/ Router.<\/p>\n\n\n\n<p>And we\u2019re done! <br>Now for some testing.<\/p>\n\n\n\n<!--nextpage-->\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"750\" height=\"422\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid.jpg\" alt=\"\" class=\"wp-image-530\" srcset=\"https:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid.jpg 750w, https:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid-300x169.jpg 300w\" sizes=\"auto, (max-width: 750px) 100vw, 750px\" \/><\/figure>\n\n\n\n<h1 class=\"wp-block-heading\">Testing Squid<\/h1>\n\n\n\n<p>At this point, test that it is working. Try and visit a site that would be on one of the blacklists we downloaded, for example hustler.com would be in the Porn blacklist. If you try to visit the site \u2013 you should get a page like the one below.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image084.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>If you get through to the site, verify that your squid.conf looks like the example in this post, that the site category is set to be blocked (the category name must have a ! in front of it eg. !porn), and that ufdbguard is actually running.<br><br>To check the service \u2013 type systemctl status ufdbguard, output should look like screenshot below \u2013 Should also say active (running) next to Active:.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.comden.co.za\/wp\/wp-content\/uploads\/Blog\/Squid\/image085.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>And that\u2019s it! All done<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I\u2019ve been meaning to do this how-to since 2017 \u2013 but other things came up. I always seemed to have either the time or the motivation \u2013 but never both at the same time. With COVID-19 in full swing and&hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[11],"tags":[],"class_list":["post-523","post","type-post","status-publish","format-standard","hentry","category-how-to"],"_links":{"self":[{"href":"https:\/\/www.comden.co.za\/wp\/wp-json\/wp\/v2\/posts\/523","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.comden.co.za\/wp\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.comden.co.za\/wp\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.comden.co.za\/wp\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.comden.co.za\/wp\/wp-json\/wp\/v2\/comments?post=523"}],"version-history":[{"count":30,"href":"https:\/\/www.comden.co.za\/wp\/wp-json\/wp\/v2\/posts\/523\/revisions"}],"predecessor-version":[{"id":565,"href":"https:\/\/www.comden.co.za\/wp\/wp-json\/wp\/v2\/posts\/523\/revisions\/565"}],"wp:attachment":[{"href":"https:\/\/www.comden.co.za\/wp\/wp-json\/wp\/v2\/media?parent=523"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.comden.co.za\/wp\/wp-json\/wp\/v2\/categories?post=523"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.comden.co.za\/wp\/wp-json\/wp\/v2\/tags?post=523"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}