Forums

smizzio
smizzio
Offline
Resolved
0 votes
I want to test clearos at work.
We have 10 pc and we want to use clearos as firewall and we want to implement content filter.
In my situation it's necessary to buy services to implement and update content filter?

Thanks to all!!
Wednesday, September 28 2011, 01:45 PM
Share this post:
Responses (8)
  • Accepted Answer

    Saturday, December 26 2015, 11:41 AM - #Permalink
    Resolved
    0 votes
    I know this thread is extremely old (over two years) but I would like to add regarding this for others who may have the same sort of issue while either using the CLI (Command line Interface) or attempting to update via the use of a Cron job.

    cd /etc/dansguardian-av/lists
    wget http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist
    tar -zxvf bigblacklist.tar.gz
    /etc/init.d/dansguardian-av restart

    The above code actually will not work as there is a content length issue. I've been trying for the past half hour to hour to try to figure this issue out. Upon reading other descriptions of the "wget" command, I have found a way that works.

    cd /etc/dansguardian-av/lists
    wget -S -c -O bigblacklist.tar.gz "http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist"
    tar -zxvf bigblacklist.tar.gz
    /etc/init.d/dansguardian-av restart

    The above code will work fine, but bare in mind, that the urlblacklist is no longer free (if it was to begin with - unsure as never used it nor have I used ClearOS prior to about three weeks ago), you get ONE freebee for trial, if you have a Dynamic IP from your ISP, your more than likely set ;) - I don't accept this idea, but have done it once or twice to 'fool' the system to let me get it more than once for testing purposes - but if you have a Static IP from your ISP like I have (I have two internet connections via Copper - ADSL2+), you are "required" to pay the fees associated, and more than likely will need to advise the operator of the site that you use more than one IP for obvious reasons ;).

    Anyway, thought I'd add my two cents worth, and to also help others who may have issues sooner or later with this exact problem. Yes I have tested the second script, and works fine - though haven't tested completely ;) - only the wget -....... part to try to force the actual proper download which it does, but just be careful as while I was testing, it 'failed' and did a retry, again failed as well. So keep this in mind as well. The BL is a 22+MB *.tar.gz file, if your tar.gz file is NOT around this size and is considerably smaller, there has been a problem with the download.

    Please Note: I am using ClearOS 7 64bit, but I don't see why this shouldn't work for other versions of ClearOS.

    Cheers and hope this helps others that have this issue.
    The reply is currently minimized Show
  • Accepted Answer

    cleber
    cleber
    Offline
    Wednesday, September 28 2011, 05:12 PM - #Permalink
    Resolved
    0 votes
    I've never tested this list, do not know if it is compatible with the "ClearOS", then I can not confirm. It's good to have because the alternative lists wget fails to download the bigblacklist, because I do not know.

    If you create the script and put in crontab it will work. To run weekly is easier to create the script in /etc/cron.weekly and mark as executable (chmod + x update.sh). Restart your crontab and ready.
    The reply is currently minimized Show
  • Accepted Answer

    smizzio
    smizzio
    Offline
    Wednesday, September 28 2011, 04:04 PM - #Permalink
    Resolved
    0 votes
    for Tim Burgess : thanks to your information. Actually i want to test that solution before to buy the service.

    for cleber : thanks to your help!! I want to test thix linux-box for 1month and i want to update the blacklist every 2 week.
    If i create a script (update.sh) and i make executable i must to run it with cron it's right?
    How can i do it?

    Now i create the script with the update of Shalla Secure and the script works!
    This blacklist are good like urlblacklist.com?
    The reply is currently minimized Show
  • Accepted Answer

    cleber
    cleber
    Offline
    Wednesday, September 28 2011, 03:54 PM - #Permalink
    Resolved
    0 votes
    I agree, and said he'd rather pay: D
    The reply is currently minimized Show
  • Accepted Answer

    Wednesday, September 28 2011, 03:34 PM - #Permalink
    Resolved
    0 votes
    Just to be clear...the content filter is free to use, and provided with ClearOS Enterprise. so it works straight out of the box.

    If you want to, you can buy additional more regular updates direct from ClearCenter.
    http://www.clearcenter.com/Services/services.html

    This also applies to the Intrusion Detection Service

    If you don't mind doing the legwork yourself you can apply your own updates as suggested by Cleber. Obviously these don't come with the same level of QA that the 'official' rule sets provide

    For example the Snort rulesets do not necessarily come with the "auto block" functionality required for the Intrusion Prevention System to work. There is a thread on incorporating the Emerging Threats snort rules on the forum if your interested.
    The reply is currently minimized Show
  • Accepted Answer

    cleber
    cleber
    Offline
    Wednesday, September 28 2011, 02:56 PM - #Permalink
    Resolved
    0 votes
    The content filter blacklist is free to download :D

    http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist

    download this for your server:



    cd /etc/dansguardian-av/lists
    wget http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist
    tar -zxvf bigblacklist.tar.gz
    /etc/init.d/dansguardian-av restart


    and Good Luck :D
    The reply is currently minimized Show
  • Accepted Answer

    smizzio
    smizzio
    Offline
    Wednesday, September 28 2011, 02:50 PM - #Permalink
    Resolved
    0 votes
    Thanks to your help!

    For the content filter is mandatory to by the service from Url Blacklist or the update can be made from other free service?
    The reply is currently minimized Show
  • Accepted Answer

    cleber
    cleber
    Offline
    Wednesday, September 28 2011, 02:25 PM - #Permalink
    Resolved
    0 votes
    Yes!

    It is the easiest way is to update the integrated system. There are ways to update the list manuals snort and content filtering.

    Snort cost $29.99 on http://www.snort.org/snort-rules/ rules

    The Content Filter is based on the URL Blacklist, download at: http://urlblacklist.com/?sec=download

    The procedure is on the site, but I'd rather pay $60.00 a year I save all this work for only $5 per month.
    The reply is currently minimized Show
Your Reply