squidGuard + Shallalist blacklist allows you to block most ads.  squidGuard also has a Clean advertising checkbox that replaces blocked ads with a blank image.

I have a problem with HaProxy exiting on signal 10… since few days...
PfSense 2.2.5 and the latest haproxy-devel

I don't have any clue on this issue.

Dying 1..2...or 3 times a day...  I have to restart by hand each time.

Was working well for months before.

I did that.  It's well below the 20% mark.  But it's either not clearing the cache at all, or some things come thru that won't clear.  It seems to take about a week, typically, for things to go pear shapped.

The issue isn't that it's not working at all, it's that the cache fills up and doesn't self clear as it should. And I don't see any reason for it.

I followed a reasonably good guide to set up, and it included some settings for cache size in 'if your hd is X, don't use more than Y' type info.  And I've decreased it since then (now below 3gb on a 5gb drive).  So I don't know what's up.

But thanks for being a smart ass and not really reading what's going on in my first post.  B/c the lmgtfy link was for general set up.

UPDATE

If I setup HAProxy frontend bound to an interface (where I can specify a gateway) everything is fine.
Seems something related to gateway on the virtual IP.

In WAN interface I dedined an additional gateway for the virtual IP subnet.
In the firewall rule I specified that gateway, I also defined a route for all traffic on the alias IP subnet.

After all this settings, virtual IP is still not working.. Any idea?

I use it on a corporate LAN and it seems to work fine for me.  I even use schedules to allow/deny access based on time of day and it works like a charm.

This seems to only happen on WIFI.  With LAN its ok.

However, WIFI works well when not using pfsense.  Latency issues with pfsense?

@C0RR0SIVE:

How did you get youtube to work properly with the safesearch?  That is something I have been wanting to do, but, haven't had luck with as far as I can tell… How does one even test that it works?  (Still learning a good bit along with everyone else)

see my last post on how to setup dns safesearch for youtube
and as for how to check it … i tried searching "sex" and compared the results. its not perfect, but will settle  for what they offer

The problem of the auth I found what it was the password must be less then 8 characters long

have you checked the allow users on the interface??if not… do tick it..

Untitled.png
Untitled.png_thumb

I'm searching for this feature too…
OR
only proxy on specific URL (RegEx matching)

Hi there

According to package-info of Dansguardian (0.1.14):

WARNING! This package bundles ClamAV that conflicts with 'Squid3', 'Mailscanner' and 'HAVP antivirus' packages! Installing these will result in a broken state.

So, if i believe in this message, it's either squid3 or dansquardian, but not both of them at the same time. Might be the case also with you.

rgds
Walbog

It seams that haproxy does not include the hostname in the path. I've changed my hcl like this:

path starts with /MySite
host equals www.mysite.com

This works perfectly. Thanks for your help.

Those config options you mention are for squid..
Maybe however you could try adding 'option prefer-last-server' in the the advanced section of the backend.
http://cbonte.github.io/haproxy-dconv/snapshot/configuration-1.6.html#4.2-option%20prefer-last-server

Haproxy does not strip headers away unless it is configured to do so.. Could you perhaps post the haproxy.cfg to see if there are any options mentioned that might interfere? And give a little more understanding about your setup.

p.s.
The client browsers do have sharepoint.company.url configured in their 'local intranet' settings in IE ? AFAIK for 'internet' and 'trusted websites' the NTLM authentication is never automatically send. But i could be wrong there..

Fair enough. It's been a while since I've looked at this particular combination (Squid/AD) so I guess I fell out of the loop a bit.

I found this:

https://github.com/pfsense/FreeBSD-ports/pull/34

Any idea when this will come into squid?

This is needed for reverse proxy but the question is will there be a auth delegation to the proxy for sharepoint and owa?

OK, get rid of that and install the squid3 package.  That's your problem.  That package is for squid2 which is ancient and I'm not even sure it works properly.  Your eperiences seem to confirm that something weird is going on.  The squid3 package is the only one really being maintained moving forward, so you should use that one.

This should work.. Have you tried inspecting (tcpdump/wireshark) the traffic between haproxy and backend? And haproxy itself does perform ssl offloading right?

@phoenixsampras:

Same Problem!!

Dear lord, is pfsense getting worst with every version?? now https doesnt work with proxy….. traffic shapping doesnt work with XENSERVER, etc.

What's wrong Pfsense?? this are basic stuff!! come on!!

yeah  ::)