IPCop 1.4 and Dan's Guardian HOWTO

Eugene Koontz (ekoontz@hiro-tan.org)

November 4, 2006

WARNING

The software described here (my packaging of Dan's Guardian for IPCop) is unmaintained and obsolete. It is only known to work with IPCop version 1.4.0a9, which is (as of this writing) more than 2 years older than the current versions of IPCop.

This installation procedure is known to not work with more recent IPCops because the IPCop GUI has changed, causing my installation script to break the web administration CGI scripts.

Rather than trying to use this, I recommend that you use Cop+ : IPCop with some Extras, which provides Dan's Guardian for more recent IPCop versions.

I will continue to leave this page here for reference/research purposes, but I regret that I will not be unable to provide support for it. Since it is licensed under the GPL, of course, you are free to download it and hack it as you like.

I would like to thank Davis Stovall, who was conscientious enough to dig into how the GUI was broken, and thoughtfully emailed me a description of what he found. If you are curious about how to fix the install described here to work with more recent IPCops, please read these notes from Davis.

I considered incorporating Davis' suggestions into a fixed version of this code; however, I then learned about Cop+ (see above) and I believe that Cop+ is probably a better solution, so fixing this code would simply be pointlessly duplicating what Cop+ has already done (i.e., providing a Dan's Guardian install that is compatible with recent IPCop installations.)

Introduction

The tarballs below are derived from dageek's files. IPCop 1.4 no longer works with dageek's dansguardian binary, so I rebuilt dansguardian. Also, IPCop 1.4 has a different GUI framework and so dageek's Dan's Guardian GUI no longer works either, so I had to modify this as well.

Currently, the tarball below is my build of version 2.6.1-13 of Dan's Guardian.

If you want to build Dan's Guardian from source yourself, please see my instructions on how to do so. Then come back here and continue with the install.

Otherwise, if you trust my binary, continue on with the steps below.

  1. Get the dan's guardian tarball :
    Get only one of these two alternatives - if unsure, use the left one.
    Known to work :
    dan's guardian 2.6 :
    Dan's Guardian for IPCop 1.4
    FOR TESTING ONLY :
    dan's guardian 2.8 :
    Dan's Guardian 2.8.0.3 for IPCop 1.4
  2. Get the Dan's Guardian Gui for IPCop 1.4
  3. Download ipcop-1.4.0a9.iso
  4. Burn this ISO to a CD-R
  5. Install from ISO, and boot your new IPCop installation.
  6. Determine the Green IP of your IPCop - the internal network IP. This is the IP you chose for your Green interface when you installed IPCop in the previous step. I'll use "192.168.0.6" as an example which you should replace with whatever your actual IP is.
  7. now you should be able to access the web interface on the newly-installed ipcop (http://192.168.0.6:81). Enable the ssh daemon (System->SSH Access ; check "Enabled"; hit "Save") and the proxy (Services->Proxy; check "green" and "transparent on green"; hit "Save") .
  8. Now we'll copy the tarballs from steps 1 and 2 to the ipcop. If you're on Windows, you need cygwin, and you'll also need "scp" which is installable through the Cygwin installer : choose "Net Default" -> "openssh" in the installer.

    On your linux desktop, start a terminal, or on Windows, open a cygwin shell, and go to the directory where you saved the tarballs from step 1. Now do:

    1. scp -o "Port 222" dansguardian.tar.gz dansguardiangui.tar.gz root@192.168.0.6:/tmp
      ssh -l root -p 222 192.168.0.6 "cd /tmp && tar xfz /tmp/dansguardian.tar.gz && /tmp/setup"
    2. You'll see output similar to the following :
      Step 1, Installing the DansGuardian Files
      ...list of files...
      /tmp/setup: line 8: clear: command not found
      Step 1, Installing the DansGuardian Files
      Step 2, Backup Up IPCop System Files
      etc/rc.d/rc.sysinit
      var/ipcop/proxy/acl
      home/httpd/cgi-bin/proxy.cgi
      var/ipcop/Ethernet/settings
      etc/rc.d/rc.firewall
      tar: Removing leading '/' from member names
      Step 3, Patching IPCopy System Files
      DansGuardian Setup Complete
      Now do :
    3. ssh -l root -p 222 192.168.0.6 "cd /tmp && tar xfz /tmp/dansguardiangui.tar.gz && /tmp/setup"
    4. You'll see output similar to the following :
      ...list of files...
      Step 1, Installing the DansGuardian Web GUI
      Step 2, Patching IPCop System Files
      ...more information...
      DansGuardian GUI Setup Complete
      
  9. Go back to the web interface of the IPCop and go to the home (System->Home). Now you should be able to see the Dan's Guardian menu item (Services->DansGuardian Content Filter). Choose this item and you'll see a button to start the Dan's Guardian (Start Content Filter). Scrolling down allows you to update the Dan's Guardian options.
  10. You're up and running! Any problems, let me know.

October 9, 2006 I am getting some mails from people getting a 500 Server Error after installing my code as described above. Please see note at the top of this page - this software is not functional or supported with recent IPCop versions.


Last modified: Mon Nov 6 13:30:46 PST 2006