search

diladele / docker-websafety

Docker image for Diladele Web Safety ICAP web filter and Squid with HTTPS filtering and SSL Bump
38 stars 12 forks source link

docker image on VMware photon 3 #12

Open CyberWeapon opened 5 years ago

CyberWeapon commented 5 years ago

Following the instructions in the README.md has some issues. Deploying as a regular user in the dockers group. Existing license is expired, waiting on a new trial license.

iptables needs to allow 8000 and 3128 to the photon host to get access to the web UI. On Dashboard, General, System Information dose not display the Addresses. It shows an error about 'IP': 'IP' not being found. I needed to install iproute2 package to resolve that. The System Time Zone shows an error "| [Errno 2] No such file or directory: 'timedatectl': 'timedatectl'". I did not resolve this issue.

Clicking on the Time Zone config shows a traceback for FileNotFoundError at /node/system/timezone/update [Errno 2] No such file or directory: '/etc/timezone'

With the ICAP Server stopped due to the license, the proxy did not work for me. I got The proxy server is refusing connections. I have tried both using the IP for the photon 3 VM and using an SSH tunnel using the localhost IP on the photon VM. Trying something different, I got a error indicating a failure with the ICAP Server which makes sense since it is stopped. However, I would expect that the Squid proxy and the other features to still work without the license.

Tim

ra-at-diladele-com commented 5 years ago

Hello Tim, the UI shall work indeed without the license. By default when we release we insert the valid license so it makes sense to have ICAP enabled - thus after license expiration you need to disable ICAP in UI / Web Filter / Settings / Network and thus click Save and Restart to make Squid operational again without ICAP server integration.

For the UI to work a community license key is still required. See https://docs.diladele.com/administrator_guide_7_0/community.html. The license agreement for the project is at https://docs.diladele.com/administrator_guide_7_0/license_agreement.html and note it is not FOSS.

CyberWeapon commented 5 years ago

That was the case, when I first logged in, it told me the license had expired and that ICAP was disabled. I was having trouble testing the proxy because I was having trouble finding a no SSL site. I have firefox configured proxy for http and https to go to the docker proxy. When I go to www.act.org I get a squid error. The following error was encountered while trying to retrieve the URL: http://www.act.org/

ICAP protocol error.

The system returned: [No Error] This means that some aspect of the ICAP communication failed. Some possible problems are: The ICAP server is not reachable. An Illegal response was received from the ICAP server.

Is it possible that it could be iptables? I am going to try the VMware appliance to see if it's my setup.