ufdbGuard for Squid 1.35.5 has been released

ufdbGuard project admin — Tue, 07 Feb 2023 16:03:40 -0000

From the Changelog:

Fix: fix compilation error on Solaris 10 and 11
Fix: any network with IP/CIDR in a file referred by ipv4list caused a crash

ufdbGuard for Squid 1.35.4 has been released

ufdbGuard project admin — Wed, 28 Dec 2022 12:39:54 -0000

From the CHANGELOG:

Fix: sometimes ufdbguardd crashes if num-worker-threads is very high and a configuration reload starts
Fix: fix more compiler warnings for recent compilers on FreeBSD and OpenBSD
Fix: init.d script on Debian systems now accepts all options as RHEL script accepts.
Fix: Debian packages did not install ufdbsignal with setuid-root
Fix: the install script checks for resolvability of updates.urlfilterdb.com which did not work with a CNAME record
Fix: configure script searches for ar command in the PATH and uses AR variable in Makefile
Fix: support OpenSSL 3.0
Change: maximum log file size increased from 2 GB to 200 GB
Change: new altdns category included in configuration file
Change: URLs with a simple hostname (no FQDN) are no longer administered as an uncategorised URL.
Change: README.PACKAGES file added for package maintainers

ufdbGuard 1.34.5 has been released

ufdbGuard project admin — Thu, 02 Apr 2020 19:55:29 -0000

One of the memory leak fixes in ufdbGuard 1.34.4 was incorrect and caused core dumps of ufdbguardd. ufdbGuard 1.34.5 fixes this.

ufdbGuard 1.34.4 has been released

ufdbGuard project admin — Fri, 27 Mar 2020 15:58:46 -0000

Version 1.34.4 of ufdbGuard for Squid is a bugfix release and has 3 fixes:

various potential buffer overruns are fixed,
various memory leaks are fixed,
wording of French messages is improved.

ufdbGuard 1.34.2 has been released

ufdbGuard project admin — Fri, 01 Mar 2019 16:52:29 -0000

ufdbGuard for Squid 1.34.2 has been released on March 1, 2019 which contains 2 enhancements and 2 fixes:

Enhancement: support LibreSSL
Enhancement: improve error messages in ufdbUpdate when URL database download fails
Fix: timing issue trying to get a lock for the database refresh is resolved
Fix: the pid file could not always be created

The Support team of https://www.urlfilterdb.com

PS: some do not know that ufdbGuard is free, but it is. ufdbGuard for Squid supports free URL databases, your own database or a commercial database from URLfilterDB B.V.

ufdbGuard version 1.33.7 has been released

ufdbGuard project admin — Wed, 25 Jul 2018 15:47:09 -0000

Version 1.33.7 is a bugfix release and has the following fixes:

Implement a workaround for a fatal bug in gcc 4.x when -O3 is used, that causes ufdbguardd to dump core. Users who use the RPM packages do not suffer from this gcc bug since -O3 is not used.
The pidfile parameter was not used and the pid was written to the default pidfile.
On blocking https sites, the final block page was not shown without ssl_bump.

ufdbGuard V1.33.6 has been released

ufdbGuard project admin — Mon, 28 May 2018 15:16:45 -0000

ufdbGuard v1.33.6 fixes a bug that was introduced in version 1.33.5.
The fix is for ufdbGuard blocking all HTTPS-based URLs when HTTPS probing is used, i.e. the parameter check-proxy-tunnels has a value other than off.

ufdbGuard v1.33.5 has been released

ufdbGuard project admin — Thu, 19 Apr 2018 15:28:25 -0000

ufdbGuard v1.33.5 is a bugfix release with an important fix for a crash during database reload.
This release has the following fixes:
* ufdbguardd may crash during a database refresh,
* empty pass statements in acls may cause a crash,
* SSH tunnels were detected but access was not blocked,
* sometimes the SSL/TLS certificate was not checked to be signed by a CA,
* skip acls with "pass any" if the source has the continue flag set.

ufdbGuard can be downloaded from sourceforge.net and urlfilterdb.com.

ufdbGuard v1.33.3 has been released

ufdbGuard project admin — Thu, 08 Jun 2017 19:12:40 -0000

ufdbGuard version 1.33.3 is a bugfix release and has the following fixes:
1. ufdbgclient truncates Squid request lines to 8K which means that very long URLs cannot be filtered,
2. ufdbGenTable erroneously warned about URLs inside a comment,
3. when 'evaluate-and' and IPv4/6 is used in a source definition, the source may not matched,
4. ufdbguardd did not accept the IPv6 address '::'.

A lot of sites still use version 1.32.x which has a bug on systems that have a high load or are slowish and prevents ufdbguardd to load a fresh URL database. If on your system there are crash reports in /tmp like (see output of ls -l /tmp/*crashreport*), it is highly recommended to upgrade to 1.33.3.

ufdbGuard v1.33 has been released

ufdbGuard project admin — Thu, 16 Mar 2017 13:43:01 -0000

New Functionality

ufdbGenTable and ufdbguardd support URLs with UTF8 characters in the domain, path and parameters
new keywords ipv6 and ipv6list can be used in source definitions,
new keywords ipv4 and ipv4list replace the existing keywords ip and iplist but for backward compatibility the keywords ip and iplist remain functional,
the certificate of sites used by the ucweb browser (which circumvents URL filters) are detected,
ufdbgclient has a new -m parameter to use multithreading and improve performance considerably,
the file ufdbguardd.pid is made world-readable,
the new keyword ufdb-log-url-details controls if URLs in the log file have parameters or not.

Fixes for Issues

for URL tables with over 2000 URLs and more than one URL with the same (sub)domain, ufdbGenTable may produce an incorrect URL table,
on the ARM platform generated URL tables were corrupt,
sometimes ufdbguardd had false positives with Tor proxy detection on port 443,
failed probes for :443 were not properly cached and resulted in too many probes for IP,
when reverse IP lookups are used, the URL category was not logged correctly,
implicitly allowed URLs were logged with category "any" instead of the correct category ID,
ufdbGenTable uses less memory,
the feature "block-bumped-connect on" never blocked a CONNECT request.

Recent posts to news