Hi Jsheed,

I followed your steps, however I'm able to use "" to enter "domain-name\username", are you using the latest pfsense version, have you tried copying and pasting "domain-name\username" from notepad

misc-proxy.JPG
misc-proxy.JPG_thumb

@KOM:

No idea where that config might hlive, but it will be overwritten at every pfSense upgrade so that's not really the best solution.

Hey Kom,

Thanks .

For now i have done changes in /usr/local/pkg/squidguard_configurator.inc

now the value is permanent after, Save + Apply.

Not just quickly, it's working like there's nothing in between. Just as it should be.

To summarize for everyone who might have this or a similar issue, I got this problem fixed by going the route of non-transparent proxy(or explicit if you will). Some bumps along the road, but comrade KOM helped me see the error of my ways and set me on the right path.

Phase 1 complete, Phase 2 of my "Ban-Facebook-and-Youtube-for-EVERYONE" is just starting…

@Naughty:

i did create a text file with the below content :
function FindProxyForURL(url,host)
{
return "PROXY 192.168.1.1:3128";
}
but as per the article i can't loaded in the specified path "/usr/local/www/" as it's not supported in pfsense 2.2.6 so it went to /tmp/wpad.dat.

so would u please explain to me if that will work <<

Hi, if it helps follow how i set up my wpad
https://forum.pfsense.org/index.php?topic=93060.0

I tried to make it work with perl in pfsense 2.6 with little success.

anyways I did make a helper in PHP with and loaded with some configs and rewrite parterns

works pretty fine altough I had some hangs in steam do not know why.

https://github.com/rudiservo/pfsense_storeid

Great @KOM, thanks!  Deleted the archived (the .0) access and cache files and it greatly freed up HD spaces and keeps pfsense working.  I've not checked upon reboot but I think it will be okay.

Again, many thanks KOM!

Hello Everyone,
This is my first post on pfsense.org
As a System / Network admin it is really difficult to adapt new changes happening in technology or in Internet World. As well as end users on a Restricted network always look for bypass & which leads to serious flaws to the security policies deployed by System Admin or to the entire company.
I am not a System / Network admin but I am a geek & want my Home Network to be secured from External attacks as well as I make sure that no one will breach the policies that I deploy for my network.
(My home network used by 6 homes of my Family & friend with extended routers or repeaters) To secure the whole network & ensures that everything on my network stay under control, I strictly monitor whole traffic every time using OpenDNS. I have been using OpenDNS for a long time & I am a kind of expert in that. Now if you want to block an access to the UC Browser that I found sometime back was able to bypass my OpenDNS rules, so I did an extensive research & continuously monitoring my network traffic, reading hundreds of forums. Simultaneously I was using UC Browser as well as mini to understand its working.
      i found following hosts of UC Browser & blocked access to them using OpenDNS. Now not a single query or single request disobey my OpenDNS law. i ruled UC & I am having complete control over my network.

BLOCK THE FOLLOWING DOMAINS & THEIR SUB-DOMAINS:

1. baidu.com
2. mandriva-art.org
3. meego-central.org
4. ucweb.com
5. ijinshan.com (This is I think DNS Resolver for UC Browser which leads to proxy server connections & allows users to access blocked sites.)
6. umengcloud.com
7. uc.cn
8. 9game.com (UC Game Market Place)
9. 9apps.com (UC App Market Place)
10. umeng.com
11. ucweb.co

Block all above domains to restrict access on UC & remain under control of your firewall.

No difficult firewall rule creation, no hassle. Just add above domains in block list.

NOTE: Block all the sub-domains of above mentioned domains. Then only you will receive 100% result. BLOCK ALL SUB-DOMAINS OF ABOVE DOMAINS!

Please let me know that whether this works for you or not.

Screenshot_20160311_104737.png
Screenshot_20160311_104737.png_thumb
Screenshot_2016-03-11-10-12-10.png
Screenshot_2016-03-11-10-12-10.png_thumb

@mark81:

Hi,

I have a working setup with squid3 & antivirus. When I enable ssl interception and restart my firewall squid3 doesn't start.
If I disable ssl interception and restart all works well.

I'm not sure how I can troubleshoot this. Hope somebody can help.

Thanks!

Same thing does not start when I enable ssl…...

Yeah, I should have mentioned checking squidguard's log much sooner than I did.

I want to use SSL Inspection of squid3 but without displaying errors and inconvenience to users.

What should I do ? Anything ?

Transparent proxy won't help you at all.  Run squid in explicit mode.  Configure WPAD to allow most OSes to find the proxy on their own.  Others will have to manually configure.

I changed some values in parameters.  Some fields were empty.
Services -> haproxy -> settings
I changed parameters in "stats tab" and "logging".

It's running without glitches since I've done that, about 3 or 4 days ago.
I don't know wich parameter does the thrick.  I don't know if it's for good.

https://forum.pfsense.org/index.php?topic=80410.0

Maybe, but now I have figured out that the issue I was dealing with had happened because of the limiter. I formatted for nothing but a clean and fresh install afterall. Atleast I learnt something.

Hi, I have exactly same problem. How fix it?

I have the same problem  :(

Install squidGuard.  Create 2 Target Categories, each with a Domain List containing the specific list of sites you want your groups to access.  Create separate ACLs for your 2 different groups of users.  Associate each ACL with the respective target category.  Set the Common ACL and your 2 custom ACL's default access to Deny, and make sure your target categories are listed above the Deny rule.  Don't forget that whenever you make a change to squidGuard, you must go back to the General Settings page and click Save then Apply or it won't work.  I just typed this of the top of my head so I may have forgotten a step or confused you with the order of operations.