HTTP Content Filter Not Working

[solarwindz]

Hello All,

I got another problem on Zentyal 2.2
I found out that my Zentyal is not able to filter contents using shalla blacklist. Is the blacklist not anymore supported?

Thanks!

[jsalamero]

I have HTTP shallalist working on 2.2, can you post reproducible steps for your issue?

[solarwindz]

HTTP Proxy > General:
Transparent proxy checked
Ad blocking checked
Port = 3128
Cache files size (MB) = 10000
Default Policy = Always Deny

HTTP Proxy > Object Policies:
(In order)
Object = Manager
Policy = Always Allow
Allowed time period = All time
Group Policy = (N/A)
Filter Profile = default

Object = Staff
Policy = Filter
Allowed time period = All time
Group Policy = (N/A)
Filter Profile = default

Network > Objects > Staff
(My IP is included here)

Network > Objects > Manager
(My IP is not here)


HTTP Proxy > Filter Profile > Default
use Antivirus = checked
content filter threshold = very strict

HTTP Proxy > Filter Profiles ▸ default ▸ Shalla Blacklist
adv    Always deny    
aggressive    Always deny    
alcohol    Ignore    
anonvpn    Always deny    
astronomy    Ignore    
banking    Ignore    
bikes    Ignore    
boats    Ignore    
cars    Ignore    
chat    Ignore    
chemistry    Ignore    
cooking    Ignore    
costtraps    Always deny    
dating    Always deny    
downloads    Ignore    
drugs    Ignore    
dynamic    Always deny    
education    Always deny    
fortunetelling    Always deny    
forum    Ignore    
gamble    Always deny    
games-misc    Always deny    
games-online    Always deny    
gardening    Ignore    
government    Ignore    
hacking    Always deny    
homestyle    Ignore    
hospitals    Ignore    
humor    Ignore    
imagehosting    Always deny    
insurance    Ignore    
isp    Ignore    
jobsearch    Ignore    
library    Ignore    
lingerie    Ignore    
martialarts    Ignore    
military    Ignore    
models    Always deny    
moneylending    Ignore    
movies    Always deny    
music    Always deny    
news    Ignore    
other    Ignore    
pets    Ignore    
planes    Ignore    
podcasts    Always deny    
politics    Ignore    
porn    Always deny    
radiotv    Always deny    
realestate    Ignore    
redirector    Always deny    
religion    Ignore    
remotecontrol    Always deny    
restaurants    Ignore    
ringtones    Always deny    
schools    Ignore    
searchengines    Ignore    
shopping    Ignore    
socialnet    Always deny    
sports    Ignore    
spyware    Always deny    
tracker    Always deny    
trading    Ignore    
travel    Ignore    
updatesites    Ignore    
urlshortener    Always deny    
violence    Always deny    
warez    Ignore    
weapons    Ignore    
webmail    Ignore    
webphone    Ignore    
webradio    Always deny    
webtv    Always deny    
wellness    Ignore    


But I can still access youtube, facebook, and everything.
Thanks!

[christian]

How does this works in transparent proxy mode?

Transparent mode means that request are sent to default gateway, intercepted by Zentyal that is redirecting to proxy. This means that from proxy standpoint's, request is sent from localhost isn't it? How would IP based filtering (based on Object) work in such a case 

[c4rdinal]

Hi Christian,

I suppose he is already using Transparent Proxy as shown above.

[christian]

I agree and this is why I'm wondering if this works or not because of transparent proxy mode.

[solarwindz]

I used the same blocklist on my old zentyal 2.0 which is now deployed on our network. Content filtering works perfectly well. The same tar.gz file that I upload to Zentyal 2.2. But this time on 2.2, the content filter doesnt work. also, i tried manually adding Domains and URL rules (youtube.com deny all) but it didnt work also. Hav I done something wrong in the filtering?

Also, I tried non transparent, contents still aren't filtered as configured.

[c4rdinal]

What object profile are you using? If you are using Manager - filter will not work as it is set as Always Allow.

[solarwindz]

I used my staff profile. >> filter >> default. I tried reloading the blacklist file and it still did not work.

[belkhaire]

I've the same problem with zentyal 2.2.2. I haven't a blacklist file, i introduced manually.

[solarwindz]

That's true. Whether you put any blacklist or not, it does not filter any content. my choice was to still use my old Zentyal 2.0.x and to wait for the solution for this problem

Thanks!

[Marcus]

Hello,

Your problem seems tricky.  Probably a simple misconfiguration at the firewall level.  Could you please give us a bit more info regarding your firewall configuration?

**Enabling logging on every connection/request would also help us finding the weak spot.

Best,

Marcus

[xcod]

Hello
I have the same problem.
What should I do?
Sorry for my English..

[c4rdinal]

HTTP Proxy > General:
Transparent proxy checked
Ad blocking checked
Port = 3128
Cache files size (MB) = 10000
Default Policy = Always Deny

Change the Default Policy = Filter and post the result here.

Thanks

[xcod]

thanks, works
I had put so did not work

Sorry for my English..