I have no interest in MITM proxy which essentially breaks SSL, making all but pointless. (Sorry to be blunt).

I've decided to uninstall Squid. A comment hit home to me. Installing another application, putting my firewall packets through ANOTHER application, simply for a (secondary) virus scan. Not worth it. (As far as I know), (knocking on my wood shelf), I haven't had an issue with a virus since I can remember. I'm not saying it's a risk. I'm very aware of the need for a good virus scanner, but to add another layer to my firewall? Nah.

Squid is officially retired in my book.

I don't believe that Android, or at least older Android versions, supports WPAD. For the wifi connection, you would have to configure the proxy details manually. Make sure you block tcp80,443 on LAN to prevent people from going around the proxy (if that matters to you).

@fabricioguzzy said in Why E2guardian package is not Officially avaliable in Pfsense?:

Hello Vallum,
I´ve been testing the e2guardian package since December/18 and it's working fine.
It's way better then squidguard, no doubts or comparisons.
The package still has some small/cosmetic issues, most of them related to the LDAP search group/users and REstarting service mechanisms, but it's fully functional.
I also made some security scans over the firewall after install it and it got nothing, so it looks safe at all.
it worth to go ahead and try it. If you are still confused, consider create a Non-Production environment to test it until you get used to the GUI and processes.

Not sure why pfsense team didn't consider the package so far. Maybe because is it still under-construction, but I do agree with you. That is a "must have" package for sure.

hope that helps you.
Fabricio.

Thanks Fabricio . I will test this.

Does it work with squid disabled?

Have you tried go to Services - Squid Proxy Server - General - Transparent Proxy Settings - Bypass Proxy for These Destination IPs and added their hostname there?

Hey,

I found this video on the topic that was very helpful.
https://youtu.be/xm_wEezrWf4

thanks for your help, I had to reset the equipment to factory values, reconfigure and function correctly, maybe, as KOM says, squidgard was broken

After upgrading to 2.4.4_2 the menu worked just fine. Thanks.

Simple fix.

0_1547077823279_lightsquid.jpg

What?

Bypass is not destination in your case. It is source as it is internal IP and outgoing traffic, if you change that i guess it will work for you.

Hi @surinameclubcard thanks for taking the time to answer! I will definitely try that second example then. FWIW, I am currently using the first example i.e. NAT then HAProxy, and can confirm that does work.