Difference between revisions of "Dansguardian-stats"

From SME Server
Jump to navigationJump to search
m
 
(21 intermediate revisions by 4 users not shown)
Line 1: Line 1:
[[Category:Contrib]]
+
{{Level|Easy}}
 +
 
 +
=== Version ===
 +
{{ #smeversion: smeserver-dansguardian-stats}}
 +
 
  
 
==Maintainer==
 
==Maintainer==
This contrib has been developed by [[User:Knuddi|Jesper Knudsen]]  
+
This contrib has been developed by [[User:Knuddi|Jesper Knudsen]] from [http://smeoptimizer.swerts-knudsen.dk SME Optimizer]
  
 
==Description==
 
==Description==
Line 20: Line 24:
 
==Installation==
 
==Installation==
  
  wget http://distro.ibiblio.org/pub/linux/distributions/smeserver/contribs/swerts-knudsen/SME7/Dansguardian-stats/smeserver-dansguardian-stats-1.0.2-1.noarch.rpm
+
  yum install --enablerepo=smecontribs smeserver-dansguardian smeserver-dansguardian-stats
  yum localinstall smeserver-dansguardian-stats-1.0.2-1.noarch.rpm
+
  signal-event dansguardian-save
 +
 
  
====De-installation or de-activation====
+
When installed, the web interface is is accessible form ( you need to wait for cron script to run):
You can simply remove the package again with the usual rpm command.
 
  
rpm –e smeserver-dansguardian-stats-1.0.2-1
+
http://your.domain.com/dansguardian
  
or disable the functionality with (default: yes):
+
====Upgrade====
 +
yum upgrade --enablerepo=smecontribs smeserver-dansguardian smeserver-dansguardian-stats
 +
signal-event dansguardian-save
 +
 
 +
 
 +
====Uninstall====
 +
You can simply remove the package again with the usual yum command.
 +
 
 +
yum remove smeserver-dansguardian-stats
  
/sbin/e-smith/db configuration setprop dansguardian webstats no
 
 
==Configuration==
 
==Configuration==
The package requires that the logfileformat for dansguardian is set to format 4 (in /etc/dansguardian/dansguardian.conf).  
+
 
 +
====Dansguardian Log file Format====
 +
The package requires that the logfileformat for dansguardian is set to format 4 (in /etc/dansguardian/dansguardian.conf). You have to edit the file. If you have smeserver-dansguardian-panel installed, you can set this in the server-manager.
  
 
  # Log File Format
 
  # Log File Format
Line 41: Line 54:
 
  logfileformat = 4
 
  logfileformat = 4
  
If you ran with a different logfileformat before then change the configuration and restart dansguardian.
+
If you ran with a different logfileformat before then, delete the old log file, change the configuration and restart dansguardian.
 +
 
 +
/etc/init.d/dansguardian stop
 +
rm /var/log/dansguardian/access.log
 +
/etc/init.d/dansguardian start
 +
 
 +
====Dansguardian Anti-virus filtering====
 +
For the scanned and infected graph to display you will have to activate dansguardian clamscan plugin, see https://wiki.contribs.org/Dansguardian#ClamAV_support
 +
 
  
/etc/init.d/dansguardian restart
+
====Unofficial ClamAV signatures====
 +
I would also recommend to install the script that downloads all the unofficial ClamAV signatures as these detects not only virus but equally importantly various kinds of malware and spam.
  
When installed, the web interface is is accessible form:
+
Follow the guide on [[Virus:Additional Signatures]] to do that.
  
http://your.domain.com/dansguardian
 
  
This dansguardian statistics web page can, by default, only be seen from the local network (IP ranges defined in Local Network in the server-manager) but if you want this to be accessible from remote networks (public access) this can be done via (default: yes):
+
====db configuration====
  
  /sbin/e-smith/db configuration setprop dansguardian LocalOnly <no|yes>
+
  config setprop dansguardian \
  expand-template /etc/httpd/conf/httpd.conf
+
# webstats <YES|NO> # by default (YES), gather and display webstat
/etc/rc.d/init.d/httpd-e-smith restart
+
# localonly <YES|NO> # by default (YES), only be seen from the local network (IP ranges defined in Local Network in the server-manager) , set to NO to see from outside
 +
# statsclient <disabled|enabled> # default is enabled. See [[Dansguardian-stats#External Statistics]]
  
====Unofficial ClamAV signatures====
+
then
I would also recommend to install the script that downloads all the unofficial ClamAV signatures as these detects not only virus but equally importantly various kinds of malware and spam.
+
signal event dansguardian-save
  
Follow the guide on http://wiki.contribs.org/Email#Anti_Virus to do that.
 
  
==Statistics==
+
==External Statistics==
  
 
An additional feature of the Dansguardian statistics is to send the collected statistics to a central statistics central at http://central.swerts-knudsen.dk. The gathering of data is not stressful for the server and the data sent is not sensitive (well in my opinion) and consists of:
 
An additional feature of the Dansguardian statistics is to send the collected statistics to a central statistics central at http://central.swerts-knudsen.dk. The gathering of data is not stressful for the server and the data sent is not sensitive (well in my opinion) and consists of:
Line 74: Line 95:
 
  /sbin/e-smith/db configuration setprop dansguardian statsclient <disabled|enabled>
 
  /sbin/e-smith/db configuration setprop dansguardian statsclient <disabled|enabled>
  
==How do I report a problem or a suggestion?==
+
==Bugs==
This contrib has not yet been created in the bugtracker so just send an email to mailto:contribs@swerts-knudsen.dk. Please make sure to be ready to provide your dansguardian log file (/var/log/dansguardian/access.log)
+
This contrib has been created in the bugtracker so just raise a bug by following {{BugzillaFileBug|product=SME%20Contribs|component=smeserver-dansguardian-stats|title=this link}}. Please make sure to be ready to provide your dansguardian log file (/var/log/dansguardian/access.log)
 +
 
 +
{{#bugzilla:columns=id,product,version,status,summary |sort=id |order=desc |disablecache=1 |component=smeserver-dansguardian-stats|noresultsmessage="No open bugs found."}}
 +
 
 +
===Changelog===
 +
Only versions released in smecontrib are listed here.
 +
 
 +
{{ #smechangelog: smeserver-dansguardian-stats}}
 +
 
 +
----
 +
[[Category:Contrib]]
 +
[[Category:Administration:Monitoring]]
 +
[[Category:Administration:Content Spam Virus Blocking]]
 +
[[Category:Contrib:webfiltering]]

Latest revision as of 20:01, 24 April 2018

PythonIcon.png Skill level: Easy
The instructions on this page can be followed by a beginner.


Version

smeserver-dansguardian-stats
The latest version of smeserver-dansguardian-stats is available in the SME repository, click on the version number(s) for more information.



Maintainer

This contrib has been developed by Jesper Knudsen from SME Optimizer

Description

smeserver-dansguardian-stats provides a web statistics interface to the results of the content filtering provided by Dansguardian. I will on the statistics page present:

  • Pages Scanned, Allowed, Blocked and Infected pages and the amount of data scanned (Bytes)
  • Top 10 Visited sites
  • Top 10 Blocked Sites
  • Top 10 Malware/Virus Blocked content (requires ClamAV enabled)
  • Top 10 Blocked Categories as reported by Dansguardian

Its a prerequisite that dansguardian and the smeserver-dansguardian contribs have been installed. See http://wiki.contribs.org/Dansguardian for install details.

Dansguardian-stats.jpg

Installation

yum install --enablerepo=smecontribs smeserver-dansguardian smeserver-dansguardian-stats
signal-event dansguardian-save


When installed, the web interface is is accessible form ( you need to wait for cron script to run):

http://your.domain.com/dansguardian

Upgrade

yum upgrade --enablerepo=smecontribs smeserver-dansguardian smeserver-dansguardian-stats
signal-event dansguardian-save


Uninstall

You can simply remove the package again with the usual yum command.

yum remove smeserver-dansguardian-stats

Configuration

Dansguardian Log file Format

The package requires that the logfileformat for dansguardian is set to format 4 (in /etc/dansguardian/dansguardian.conf). You have to edit the file. If you have smeserver-dansguardian-panel installed, you can set this in the server-manager.

# Log File Format
# 1 = DansGuardian format (space delimited)
# 2 = CSV-style format
# 3 = Squid Log File Format
# 4 = Tab delimited
logfileformat = 4

If you ran with a different logfileformat before then, delete the old log file, change the configuration and restart dansguardian.

/etc/init.d/dansguardian stop
rm /var/log/dansguardian/access.log
/etc/init.d/dansguardian start

Dansguardian Anti-virus filtering

For the scanned and infected graph to display you will have to activate dansguardian clamscan plugin, see https://wiki.contribs.org/Dansguardian#ClamAV_support


Unofficial ClamAV signatures

I would also recommend to install the script that downloads all the unofficial ClamAV signatures as these detects not only virus but equally importantly various kinds of malware and spam.

Follow the guide on Virus:Additional Signatures to do that.


db configuration

config setprop dansguardian \
  1. webstats <YES|NO> # by default (YES), gather and display webstat
  2. localonly <YES|NO> # by default (YES), only be seen from the local network (IP ranges defined in Local Network in the server-manager) , set to NO to see from outside
  3. statsclient <disabled|enabled> # default is enabled. See Dansguardian-stats#External Statistics

then

signal event dansguardian-save


External Statistics

An additional feature of the Dansguardian statistics is to send the collected statistics to a central statistics central at http://central.swerts-knudsen.dk. The gathering of data is not stressful for the server and the data sent is not sensitive (well in my opinion) and consists of:

  • Amount of pages scanned
  • Top 10 names of virus/malware infected content (names from ClamAV)
  • Top 10 names of Blocked domains and their Dansguardian categories (Proxies, Pornography, etc.)
  • The version of SME server used (7.x)
  • Public IP address of server (used to plot in Google Maps on central.swerts-knudsen.com)

Should you want to disable this functionality then this can obviously be done:

/sbin/e-smith/db configuration setprop dansguardian statsclient <disabled|enabled>

Bugs

This contrib has been created in the bugtracker so just raise a bug by following this link . Please make sure to be ready to provide your dansguardian log file (/var/log/dansguardian/access.log)

"No open bugs found."

Changelog

Only versions released in smecontrib are listed here.