fifthsegment / gatesentry Goto Github PK

Hi,

Is it possible to use GateSentry for blocking youtube (app) trafic to IOS and android devices?

Bart

I wanted to modify the squid.conf file (to add tmpfs cache). This did not work out too well, everything being blocked thereafter. Then I reverted to the previous configuration file and restarted but GateSentry keeps blocking all traffic. (I've put the original config file https://gist.github.com/fifthsegment/79fb356bf4cbf90253104388d504ee43 )

/var/log/squid3/access.log gives me little information on what is happening :

1464957874.619    407 127.0.0.1 TCP_MISS/500 133277 GET https://www.google.fr/ - PINNED/2a00:1450:4007:80d::2003 text/html
1464957884.167   5768 127.0.0.1 TCP_MISS/500 133282 GET http://google.com/ - HIER_DIRECT/2a00:1450:4007:807::200e text/html

If I set all of my firewall rules correctly, is it possible to use Gate Sentry as a transparent proxy?

I was reading in the documentation about Squid and I found the following:

"This section is outdated. The below limitations were resolved in Squid-3.5 by peek-n-splice"

• Squid Documentation

Why doesn't GateSentry use peek-n-splice?

Hi,

I would like to use GatSentry to filter my daughters youtube movies.

Problem is that if I download the certificate an error is thrown. (This file cann't be used for securty certificate).

Can you pleas explain to me how to implement youtube filtering?

Bart

I can't seem to load the images / css from some https sites, seemly due to the fact that they detect that I'm basically doing a MiM attack with GateSentry. If my certificate was certified by a CA, would I be able to make this work?

My question is posted in more detail here

If i'm going to use this as my proxy, then why aren't there any instructions for how to self-sign a certificate / become your own certificate authority for using GateSentry? That seems like a security hole in the software.

Anyway here is how to do that:

• http://unix.stackexchange.com/questions/289706/images-and-stylesheets-not-loading-from-squid-due-to-a-bad-certificate - My Question on the topic
• http://wiki.squid-cache.org/Features/DynamicSslCert - DynamicSslCert How to for Squid
• https://jamielinux.com/docs/openssl-certificate-authority/create-the-root-pair.html#prepare-the-configuration-file - How to Become a Certificate Authority for yourself.

Hi Abdullah,

I'm using backupSmall.img RPi2 with wifi dongle plugged. It's working well for Hotspot and blocking site or phrase without internet. But when I will try to share the internet over LAN cabel plugged in RPi2, the internet not shared over wifi.

Also I try to install the certificate. But it doesn't work.

Please help,
Thank You
Ketut

Hi,

Can the webpage which is shown when a page is blocked be customized?

Bart

When opening the page www.sueddeutsche.de, always comes the error:

ICAP protocol error.

The system answered: [No Error]
This means that something is wrong with ICAP communication.

Possible problems are:

• The ICAP server is not available.
• The ICAP server response was invalid.

Please check it & give me Feedback.
Thanks Alex

Is it possible to tie this system in with different restrictions for MIT Keberos?

Hi,

In the current version is possible to customize the webpage which is shown when a page is blocked ?

Thank you for sharing this software i think is very good

Sincerely Sergio

Greetings From Colombia