Yes it is possible. People can help you but they will not do it all for you. Go ahead and try it, and come back here if you have questions or problems. Have you seen the official Netgate video on squid and squidguard?

Clone and named frontend3-offloading-redirect-2 applied the change it seems to work now , but I do not understand my error or what cause it. I am getting a 503 error on one web site, I have to look to find out why? Thank you would not have been able to find the error with out you. Much appreciated. Charles

@Rico Good point.

@KOM said in Filter some stations and full access to other Squid Guard: the other group has all denied with a whitelist allowed at the top. And the websites placed inside the whitelist ... I understand, thank you very much for the help, I am very clear now.

i am using Chrome (cleared cache) or Safari. Both Browsers have the same problem. I can not edit any haproxy rules without jumping back to another rule. So something really messed up here. i wont touch the system until i am back from vacation but this is horrible. Thinking to downgrade to 2.4.4_2 and reinstall haproxy 0.59_18

@stephenw10 Yes, the Squid reverse proxy is fully functional again.

@RonpfS thank yoy sir. problem solved

@jason0 Make that rule for example: code 307 location https://google.com

@rjcrowder Ok. can you please guide me what is best way to do this.

read this https://forum.netgate.com/topic/74934/how-to-block-youtube-in-pfsense/20

If you put Squid 'in-line' with two interfaces then all the redirects would happen there and not at the main firewall. You don't have to do that though, it's easier to just redirect traffic to the proxy from the firewall as I outlined. In that case whatever is running Squid is only a proxy server, it only needs one interface. Steve

You can do that using Squid and Squidguard as you say. First up watch the hangout we did on this: https://youtu.be/xm_wEezrWf4 Steve

@doktornotor Well the least stated he obvious but was cause of problem. Squidguard.conf was pointing to nonexistent directory, ...log. when installation used ....logs. I think they were just so close I couldn't see the difference for the words.

@netn00b not sure if you found a good solution to this. I do something similar with a script to update the IP's for my VPN in squid.conf I've stripped my VPN config lines out into a seperate file (vpn.conf) and then replaced them with an include include /usr/local/etc/squid/vpn.conf This way the GUI is always correct and can be updated as normal and you can still keep your IP's current.

in Squid/real time i found TAG_NONE/200 102.132.97.27:443 when HTTPS/SSL Interception Enable SSL filtering.

Also the dns name for mydomain.ry works but hits the same page as above. when I add a prefix onto it I continue to get: This site can’t be reached mail.mydomain.ry’s server IP address could not be found. DNS_PROBE_FINISHED_NXDOMAIN