Thanks.  That fixed the problem.

I'm not sure if squid3 with dynamic contents enabled can handle this.

An option to test may be a varnish daemon configured as proxy in front of squid cache.

http://forums.freebsd.org/showthread.php?t=4962

@marcelloc:

It's not a bug, you need to:

empty/disable your lists

Increase Firewall Maximum Table Entries on system -> advanced -> firewall/nat

re enable pfblocker lists

Yep, there it was.. config defaulted to 200K and I didn't even notice it.

There is a bug, though. After deleting lists, the table isn't being updated correctly. Reproducing is pretty easy, but iffy - add 5 lists, delete the 3rd. Aliases update correctly, but file table does not - instead it acts as though list 5 was deleted instead of list 3. Only happens sometimes though.

The fix is not working for me …

@lovin_it:

Is there any way to use pfSense with postfix with my config? I am a little bit confused because I have found no thread concerning my problems with the POP3-matter…

This package has no pop3 fetch integration and will not work with your full custom config. You can merge your config using custom options.

To use postfix on you system without the gui, follow these steps:

Remove postfix package

On console/ssh, install postfix binaries using pkg_add -r http://files.pfsense.org/packages/amd64/8/All/postfix-2.8.7%2c1.tbz(amd64 version)

Install filer package and open it`s gui (diagnostics -> filer)

add postfix startup script to filer config(it will load current file)

Edit default startup status from NO to YES and save file

create your postfix config file and select startup script to run after file changes

Not easy but not impossible too  :)

@alexand3r:

I've unzipp the tar.gz but now I do not know how I can install it on the pfsense, the command install or make install doesn't seem to work and after several searches over the web I couldn't find a way to do this.

It is on freebsd ports, you do not need to compile it

http://www.freebsd.org/cgi/ports.cgi?query=Csync2&stype=all

get the tbz package from freebsd archive:
i386
http://ftp-archive.freebsd.org/pub/FreeBSD-Archive/old-releases/i386/8.1-RELEASE/packages/All/

amd64
http://ftp-archive.freebsd.org/pub/FreeBSD-Archive/old-releases/amd64/8.1-RELEASE/packages/All/

mohandshamada,

I think you need a rule before this http deny rule allowing access to lan_address at http port.

If users can't access wpad file they can't get access to proxy.

att,
Marcello Coutinho

Some NAS do a "fake" MAC-Auth. They put the mac address of the host as username and password.
If that's the fac then you need to add this "user" in freeradius -> users

I'm still working on figuring this out.  It seems like squidGuard won't block frames properly.  Adblock seems to remove frames and shift the content whereas squidGuard creates the frame but makes it blank.

I'm loading easylist in to squidGuard using the following method:
http://forum.pfsense.org/index.php?topic=19756.0

Can someone tell me if the following Facebook entries in the expressions file are correct?

–---------------------
||facebook.com/whitepages/wpminiprofile.php?partner_id=
facebook.com###fbPhotoSnowliftAdsSide
facebook.com###home_sponsor_nile
facebook.com##.ego_spo
facebook.com##.fbEmu
facebook.com##.fbEmuBlock
facebook.com##.fbEmuEgo
facebook.com##.fbEmuEgoUnit
facebook.com##.fbEmuLink
facebook.com##.fbPhotoAdsCol
facebook.com##.fbPhotoSnowboxAds
facebook.com##.fbTimelineSideAds
facebook.com##a[ajaxify^="/ajax/emu/end.php?"]
facebook.com##a[href^="/ajax/emu/end.php?"]
–---------------------

I'm wondering if the conversion filter (regex.sed) is working properly ("cat easylist.txt | sed -f regex.sed > expressions").    My regex.sed file is as follows:

/@@./d;
/^!./d;
/^[.]$/d;
s#http://##g;
s,[.?=&/|],\&,g;
s##.#g;
s,$.$,,g;
–---------------------

OK I figured this out.  All you have to do is put a comment open at the ending of the error file.  i.e.

I'm working to see why went the users have special characters it has issues.

Thanks for your info Gloom, see u latter!!!

try to run dansguardian on console to see if it returns a config error

@cmb:

USB flash has the same write limits as CF.

Agreed, however if the USB flash drive exceeds the max. number of writes that it can handle, it will crash and burn without crashing the entire firewall in the process. At worst it would stop showing up as a drive, and pfSense could fall back to using the flash RAM to store the files. In theory, that is. :-)

@cmb:

The only option would be to add an external hard drive for such storage, which is difficult and not supported for a variety of reasons, primarily because the partitions can't easily be split up in the fashion that would be required.

Hmm.. I'm interested in the background on why external drives aren't supported, but I have a feeling that goes outside the scope of this post. If you're so inclined, PM me with the details. If not, I certainly understand.

For the sake of argument, let's forget about external storage entirely. What about network-based storage? For instance, what if I could hypothetically mount a NFS or SMB share from pfSense to a NAS device, like FreeNAS? In that scenario the amount of storage would be virtually limitless since squidguard/squid log files are not large in the grand scheme of file storage.

As you can see, the gears in my head are turning. These devices are incredibly useful. pfSense is incredibly useful. If there's any way to overcome the finer points of using the appliance instead of a PC, I'm all about it.

Thanks (as always) in advance!

@Cino:

re-appy the Global Settings page and Interface Edit: If Settings page. This should re-create the missing cron job

I was having the same issue, following the above worked for me as well. Thanks

Your post is difficult to understand for me.  ;)

If your NAS supports "account"ing then Simultaneous-Use will work.

If you use pfsense Captive portal then try with "Disable concurrent logins".

follow this thread

http://forum.pfsense.org/index.php/topic,48347.0.html

squid-reverse and squid3 is now merged.

Try to use squid without transparent mode.

@jwelter99:

Anyone working on an update?  1.4.19 is available, but 1.4.20 adds some bug fixes and specifically fixes some FreeBSD related build issues.

Haproxy pfsense package is on 1.4.20.

What version of pfsense are you using?