Menu

ufdbGuard - URL filter for Squid / News: Recent posts

ufdbGuard for Squid 1.35.5 has been released

From the Changelog:

  • Fix: fix compilation error on Solaris 10 and 11
  • Fix: any network with IP/CIDR in a file referred by ipv4list caused a crash
Posted by ufdbGuard project admin 2023-02-07 Labels: release 1.35.5

ufdbGuard for Squid 1.35.4 has been released

From the CHANGELOG:

  • Fix: sometimes ufdbguardd crashes if num-worker-threads is very high and a configuration reload starts
  • Fix: fix more compiler warnings for recent compilers on FreeBSD and OpenBSD
  • Fix: init.d script on Debian systems now accepts all options as RHEL script accepts.
  • Fix: Debian packages did not install ufdbsignal with setuid-root
  • Fix: the install script checks for resolvability of updates.urlfilterdb.com which did not work with a CNAME record
  • Fix: configure script searches for ar command in the PATH and uses AR variable in Makefile
  • Fix: support OpenSSL 3.0
  • Change: maximum log file size increased from 2 GB to 200 GB
  • Change: new altdns category included in configuration file
  • Change: URLs with a simple hostname (no FQDN) are no longer administered as an uncategorised URL.
  • Change: README.PACKAGES file added for package maintainers
Posted by ufdbGuard project admin 2022-12-28

ufdbGuard 1.34.5 has been released

One of the memory leak fixes in ufdbGuard 1.34.4 was incorrect and caused core dumps of ufdbguardd. ufdbGuard 1.34.5 fixes this.

Posted by ufdbGuard project admin 2020-04-02 Labels: 1.34.4 1.34.5

ufdbGuard 1.34.4 has been released

Version 1.34.4 of ufdbGuard for Squid is a bugfix release and has 3 fixes:

  • various potential buffer overruns are fixed,
  • various memory leaks are fixed,
  • wording of French messages is improved.
Posted by ufdbGuard project admin 2020-03-27

ufdbGuard 1.34.2 has been released

ufdbGuard for Squid 1.34.2 has been released on March 1, 2019 which contains 2 enhancements and 2 fixes:

  • Enhancement: support LibreSSL
  • Enhancement: improve error messages in ufdbUpdate when URL database download fails
  • Fix: timing issue trying to get a lock for the database refresh is resolved
  • Fix: the pid file could not always be created

The Support team of https://www.urlfilterdb.com... read more

Posted by ufdbGuard project admin 2019-03-01 Labels: release 1.34.2 ufdbGuard

ufdbGuard version 1.33.7 has been released

Version 1.33.7 is a bugfix release and has the following fixes:

  • Implement a workaround for a fatal bug in gcc 4.x when -O3 is used, that causes ufdbguardd to dump core. Users who use the RPM packages do not suffer from this gcc bug since -O3 is not used.
  • The pidfile parameter was not used and the pid was written to the default pidfile.
  • On blocking https sites, the final block page was not shown without ssl_bump.
Posted by ufdbGuard project admin 2018-07-25 Labels: ufdbguard

ufdbGuard V1.33.6 has been released

ufdbGuard v1.33.6 fixes a bug that was introduced in version 1.33.5.
The fix is for ufdbGuard blocking all HTTPS-based URLs when HTTPS probing is used, i.e. the parameter check-proxy-tunnels has a value other than off.

Posted by ufdbGuard project admin 2018-05-28

ufdbGuard v1.33.5 has been released

ufdbGuard v1.33.5 is a bugfix release with an important fix for a crash during database reload.
This release has the following fixes:
* ufdbguardd may crash during a database refresh,
* empty pass statements in acls may cause a crash,
* SSH tunnels were detected but access was not blocked,
* sometimes the SSL/TLS certificate was not checked to be signed by a CA,
* skip acls with "pass any" if the source has the continue flag set.... read more

Posted by ufdbGuard project admin 2018-04-19 Labels: ufdbguard

ufdbGuard v1.33.3 has been released

ufdbGuard version 1.33.3 is a bugfix release and has the following fixes:
1. ufdbgclient truncates Squid request lines to 8K which means that very long URLs cannot be filtered,
2. ufdbGenTable erroneously warned about URLs inside a comment,
3. when 'evaluate-and' and IPv4/6 is used in a source definition, the source may not matched,
4. ufdbguardd did not accept the IPv6 address '::'.

A lot of sites still use version 1.32.x which has a bug on systems that have a high load or are slowish and prevents ufdbguardd to load a fresh URL database. If on your system there are crash reports in /tmp like (see output of ls -l /tmp/*crashreport*), it is highly recommended to upgrade to 1.33.3.

Posted by ufdbGuard project admin 2017-06-08 Labels: ufdbguard 1.33.3

ufdbGuard v1.33 has been released

New Functionality

  • ufdbGenTable and ufdbguardd support URLs with UTF8 characters in the domain, path and parameters
  • new keywords ipv6 and ipv6list can be used in source definitions,
  • new keywords ipv4 and ipv4list replace the existing keywords ip and iplist but for backward compatibility the keywords ip and iplist remain functional,
  • the certificate of sites used by the ucweb browser (which circumvents URL filters) are detected,
  • ufdbgclient has a new -m parameter to use multithreading and improve performance considerably,
  • the file ufdbguardd.pid is made world-readable,
  • the new keyword ufdb-log-url-details controls if URLs in the log file have parameters or not.... read more
Posted by ufdbGuard project admin 2017-03-16 Labels: ufdbGuard 1.33

ufdbGuard 1.32.2 has been released

Version 1.32.2 of ufdbGuard was released on October 20, 2016.

Version 1.32 has new features, including
- can handle very large numbers of configured users,
- significantly reduced database load time,
- less HTTPS probing resulting in better throughput,
- cache the results of the execuserlist directive to ensure high performance under all conditions,
- new parameters for new features.

See https://www.urlfilterdb.com/release-1.32.html and the CHANGELOG for more details. RPMs exist for CentOS and Redhat 6.x 64bit and 7.x 64bit.

Posted by ufdbGuard project admin 2016-10-20 Labels: ufdbguard squid URL filter internet filter

ufdbGuard 1.13 patch 14 has been released

patch 14 for ufdbGuard 1.13 is relased on October 9, 2015 and fixes fatal errors on very old Linux systems when probing HTTPS sites, fixes issues with RPM install on some systems and does not need to be restarted any more after a the "connection queue full" error.
patch 14 also adds an enhancement where now a source definition can both include users and IP addresses.

ufdbGuard is a free URL filter for Squid which can be downloaded at https://sourceforge.net and at https://www.urlfilterdb.com. ufdbGuard supports any flat text database and the commerecial database from the Dutch company URLfilterDB B.V..

Posted by ufdbGuard project admin 2015-10-08 Labels: ufdbGuard Squid URL filter

ufdbGuard-1.31 has now an RPM for Redhat 7 and CentOS 7

ufdbGuard, the free filter for the internet, has added an RPM package for Redhat 7 / CentOS 7 to the list of packages.
ufdbGuard supports any text-based URL database and a commercial URL database from https://www.URLfilterDB.com.

Posted by ufdbGuard project admin 2014-11-13

ufdbGuard v1.31 patch 12 has been released

ufdbGuard is an Open Source URL filter.

On November 3, 2014, patch 12 of ufdbGuard v1.31 was released and contains the following 3 fixes:
1) Use a hostname hint (TLS SNI) when probing HTTPS connections. This sometimes prevents incorrect blocking of HTTPS-based URLs.
2) Enforce the correct directory permissions when the directory for the pid file is created. This fix is for all Linux systems where the /run file system has type tmpfs.
3) Resolve compiler warnings of gcc 4.8.... read more

Posted by ufdbGuard project admin 2014-11-03 Labels: ufdbguard patch

ufdbGuard v1.31 patch1 has been released

ufdbGuard v1.31 had a fatal error where "make install" failed.
ufdbGuard v1.31 patch1 (ufdbGuard-1.31-2.tar.gz) has a fix for this issue.

Posted by ufdbGuard project admin 2013-06-29 Labels: ufdbguard v1.31 ufdbguard

ufdbGuard v1.31 has been released

ufdbGuard, the URL filter for Squid, has a new release.
Version 1.31 has a major new feature and is now able to produce various reports and also prints more statistics in its log files.

New with version 1.31 is the release of RPM packages for Redhat and CentOS. So besides installing from source, there is now also the easier installation with RPM.

Version 1.31 also fixes 4 issues found in earlier versions.... read more

Posted by ufdbGuard project admin 2013-06-27 Labels: ufdbGuard Squid URL filter 1.31

ufdbGuard v1.30 has been released

ufdbGuard v1.30 has 4 fixes and 7 enhancements:

Fixes

1. ufdbguardd erroneously stated that an empty group did not exist.
2. ufdbguardd sometimes crashed when issueing an error for a category being defined twice.
3. prevent crash on reload when a very large number of ACLs is used.
4. remove race condition when calling ufdb-pstack.

Enhancements

1. new keywords 'execuserlist' and 'refreshuserlist' enable easier integration with LDAP and other user databases
2. aolsearch.com and search.aol.com are added to the list of SafeSearch search engines
3. log number of URL lookups of which the URL was not in the URL database (uncategorised URL)
4. new option to log uncategorised URLs
5. the ufdbConvertDB script generates errors with more details
6. the installation procedure uses LSB scripts or chkconfig if it exist to configure the startup script in /etc/init.d
7. startup script in /etc/init.d removes old UNIX socket when ufdbguardd is started at system boot

Posted by ufdbGuard project admin 2013-01-22

ufdbGuard v1.29 has been released

Version 1.29 of ufdbGuard has been released to fix 10 issues and to support use of the URL list of PhishTank, improve database reload times and has various other new features.
With the release of v1.29 ufdbGuard supports new subcategories of the URL database.
More information can be found here: www.urlfilterdb.com/en/release-1.29.html

Posted by ufdbGuard project admin 2012-08-29

ufdbGuard v1.28 - URL filter for Squid

ufdbGuard v1.28 has been released.

ufdbGuard is a URL filter for Squid with many additional features besides filtering web content.

This release adds support for YouTube edufilter, extends the support for SafeSearch on search engines with blekko.com and izito.com ans makes the restart of ufdbhttpd much faster.

This release includes fixes for the following issues:
- time-based ACLs were not always evaluated correctly
- ufdbguardd did not compile on BSD systems
- ufdbguardd crashed just after startup when duplicate time definitions were used
- ufdbguardd crashed on startup when debugging was turned on and browsers were active at the same time... read more

Posted by ufdbGuard project admin 2012-01-19

ufdbGuard v1.26 has been released

ufdbGuard v1.26 fixes one issue where sometimes ufdbUpdate was not able to send a signal to ufdbguardd when run as a non-root user

Posted by ufdbGuard project admin 2011-06-24

ufdbGuard v1.25 has been released

ufdbGuard v1.25, the URL filter for Squid, was released on June 9, 2011

ufdbGuard v1.25 fixes a number of minor issues:
* SSH tunnel detection was sometimes skipped
* unknown protocols on HTTPS port 443 were always blocked and a new parameter controls the behaviour of ufdbguardd: block or allow (default)
* re-probe SSL-based connections after a new configuration has been loaded
* the monitor sometimes reported a wrong status
* compilation failure on BSD systems... read more

Posted by ufdbGuard project admin 2011-06-10

Version 1.24 of ufdbGuard has been released

Version 1.24 of ufdbGuard is released on February 15, 2011.
ufdbGuard is a URL filter for the Squid web proxy.
Version 1.24 of ufdbGuard has 4 fixes for problems that rarely occur and new features.
The new features are:
* support monitoring of ufdbguardd by email and by command execution * ufdbUpdate and ufdbguardd report on expiration of license
* ufdbUpdate has a defined set of exit codes
* configurable behaviour of the URL filter when it cannot perform URL lookups: allow all (default) or deny all
* options for ufdbgclient to define redirection URL in case of a fatal error
* a new cacerts keyword allows the use of an alternate location of the CA certificates

Posted by ufdbGuard project admin 2011-02-16

ufdbGuard v1.23 has been released

Fix: on some platforms ufdbguardd did not die gracefully when stopped with "/etc/init.d/ufdb stop"

Port: ufdbguardd was ported to OpenBSD and Mac OS X

Enhancements:
Support time-based ACLs.
The Skype VOIP application can be detected and allowed without disabling HTTPS security features.
Performance improvement of 20% to 96% depending on which categories are used.
Add duckduckgo.org, search-results.com and qbyrd.com to the list of SafeSearch search engines.
Add new Google API to the list of SafeSearch search engines.
Reserved words can be used for categories and sources when quoted.
Short man pages are added.
ufdbGenTable: strip starting and trailing spaces from URLs.
ufdbhttpd: give more details on the error page.

Posted by ufdbGuard project admin 2010-09-09

Who needs a URL filter?

Everybody needs a URL filter.
ufdbGuard is free and fast. ufdbGuards works with Squid and besides blocking websites, it can also enforce SafeSearch for many search engines, detect HTTPS tunnels and block HTTPS websites that have no valid certificate.
Version 1.15 is released and adds support for SafeSearch for more search engines, a GUI based on webmin and gives more feedback during the installation procedure.
You may go to http://sourceforge.net/projects/ufdbguard to learn more and download the Reference Manual.

Posted by ufdbGuard project admin 2008-07-02