• Access home assistant externally through Duckdns with squid proxy sever

    1
    0 Votes
    1 Posts
    704 Views
    No one has replied
  • HAProxy causes failure to operate properly after 2.4.4 upgrade

    1
    0 Votes
    1 Posts
    534 Views
    No one has replied
  • Pfsense 2.4.4 can't install / reinstall Squid Package 0.4.44_4

    4
    0 Votes
    4 Posts
    2k Views
    G
    I fixed the problem with backup config, cut out the Squid-Reverse Proxy section and Restore the modified backup file. Then the Squid-Package installed without problem. Also does the new package 0.4.44_5. the problem was inside this section: <squidreverse> <config> <reverse_interface>wan</reverse_interface> <reverse_external_fqdn>server11.xxx.xx</reverse_external_fqdn> <reverse_http></reverse_http> <reverse_http_port></reverse_http_port> <reverse_http_defsite></reverse_http_defsite> <reverse_https></reverse_https> <reverse_https_port></reverse_https_port> <reverse_https_defsite></reverse_https_defsite> <reverse_ssl_cert></reverse_ssl_cert> <reverse_int_ca></reverse_int_ca> <deny_info_tcp_reset>on</deny_info_tcp_reset> <reverse_ignore_ssl_valid></reverse_ignore_ssl_valid> <reverse_owa></reverse_owa> <reverse_owa_ip>192.168.10.38</reverse_owa_ip> <reverse_owa_activesync></reverse_owa_activesync> <reverse_owa_rpchttp></reverse_owa_rpchttp> <reverse_cache_peer>SE9TVDE7MTkyLjE2OC4xMC4xMDs4MDtIVFRQ</reverse_cache_peer> <revrse_uri>VVJJMTtwdWJsaWM7d3d3Lnh4eC54eA=</revrse_uri> <reverse_acl>SE9TVDE7VVJJMQ==</reverse_acl> </config> </squidreverse>
  • HAProxy url-rewrite

    Moved
    1
    0 Votes
    1 Posts
    392 Views
    No one has replied
  • [2.4.x] Squid/ClamAV: Fix for C-ICAP 0.5.x not starting

    17
    4 Votes
    17 Posts
    11k Views
    jimpJ
    @eden said in [2.4.x] Squid/ClamAV: Fix for C-ICAP 0.5.x not starting: Hello all I am also having this issues with the ICAP service not starting. I have edited then config as requested above no joy. I then decided to reinstall the package but this did not make a difference. I have now uninstall the squid package completely and reinstalled it. Still the service will not start. If that is the case then your problem is not the same problem as this thread. Start a new thread with details about your configuration, any error messages from logs, etc.
  • RESOLVIDO

    1
    0 Votes
    1 Posts
    303 Views
    No one has replied
  • Package install error after latest patches

    4
    0 Votes
    4 Posts
    1k Views
    P
    OK fixed it.. Here is how I did it... Have WAN connectivity assigned via DHCP dhclient bce0 Update the pkg metadata pkg-static update -f Forcefully reinstall all packages pkg-static upgrade -fy Note: I have a broadcom NIC, thus BCE0, it might be different on your setup.
  • Update package Ha-Proxy Fails 0.59.11

    2
    0 Votes
    2 Posts
    578 Views
    P
    Fixed after upgrade tot 2.4.4
  • block all sites except some ones in squid

    1
    0 Votes
    1 Posts
    289 Views
    No one has replied
  • LDAP authentication with a Fusion LDAP server

    Moved
    3
    0 Votes
    3 Posts
    720 Views
    S
    I am doing LDAP authenthication with Zentyal AD [image: 1537789758514-pfsense-ldap-resized.png] Can anyone help.
  • Squid and OpenVPN - remote internet traffic proxying

    4
    0 Votes
    4 Posts
    6k Views
    T
    @zeureo1 said in Squid and OpenVPN - remote internet traffic proxying: add a FW rule on the OpenVPN iface to allow TCP/3128 from OpenVPN subnet to localhost. Can you please be clear on "adding a FW rule on the OpenVPN iface to allow TCP/3128 from OpenVPN subnet to localhost". I've been using pfsense for years and I don't believe I've heard of adding FW rule on OpenVPN
  • Bug in newest check_ip.php

    3
    0 Votes
    3 Posts
    971 Views
    M
    del /usr/local/bin/check_ip.php and use the following code. i solve #!/usr/local/bin/php-cgi -q <?php /* * check_ip.php * * part of pfSense (https://www.pfsense.org) * Copyright (c) 2016-2017 Rubicon Communications, LLC (Netgate) * Copyright (c) 2013-2016 Marcello Coutinho * All rights reserved. * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ require_once("config.inc"); require_once("globals.inc"); error_reporting(0); global $g; // stdin loop if (!defined(STDIN)) { define("STDIN", fopen("php://stdin", "r")); } if (!defined(STDOUT)) { define("STDOUT", fopen('php://stdout', 'w')); } while (!feof(STDIN)) { $check_ip = trim(fgets(STDIN)); $dbs = glob("{$g['vardb_path']}/captiveportal*.db"); $status = NULL; foreach ($dbs as $db) { if(!strpos($db, "_radius")) { $status = squid_check_ip($db, $check_ip); if (isset($status)){ break; } } } if (!is_null($status)) { fwrite(STDOUT, "OK user={$status}\n"); } else { fwrite(STDOUT, "ERR\n"); } } function squid_check_ip($db, $check_ip) { exec("/usr/local/bin/sqlite3 {$db} \"SELECT ip FROM captiveportal WHERE ip='{$check_ip}'\"", $ip); if ($check_ip == $ip[0]) { exec("/usr/local/bin/sqlite3 {$db} \"SELECT username FROM captiveportal WHERE ip='{$check_ip}'\"", $user); return $user[0]; } } ?>
  • block upload file ext.

    Moved
    1
    0 Votes
    1 Posts
    263 Views
    No one has replied
  • my home pfsense block outlook

    Moved
    1
    0 Votes
    1 Posts
    260 Views
    No one has replied
  • Last version of Squidguard not read/write target rules access

    3
    0 Votes
    3 Posts
    640 Views
    C
    @fabricioguzzy said in Last version of Squidguard not read/write target rules access: You are probably talking about this issue Exactly this problem Fabrizio. Thank you.
  • squid real ip

    4
    0 Votes
    4 Posts
    724 Views
    H
    I don't think so. It's either thru the vpn or not.
  • Squid Filter shows blank page regardless of int error page setting

    1
    0 Votes
    1 Posts
    431 Views
    No one has replied
  • Trying AD authentication group based on Squid

    3
    0 Votes
    3 Posts
    2k Views
    R
    Hello, As per experience during implementation. There are 2 problems in pFSense Squid. Base domain can't use "DC=Domain,DC=local", you must use something like OU=something,DC=domain,DC=local . And OU needs to be the same one using in "Search Filter" The AD user needs exists in that OU, user accounts located from other OU, Container or anywhere. Even these accounts in Search filter group". Authentication remains fail
  • Squid causing isues connecting to secured sites

    Moved
    11
    1
    0 Votes
    11 Posts
    2k Views
    T
    Had a problem again with SquidGuard again today trying to hit amazon web services. aws.amazon.com. SSL error. Disabled Squid and was able to hit the site. Did a little research online and changed the following: Services-->Squid Proxy Server: General changed SSL Certificate Deamon Children to 100. Keep in mind, the research online I have done on this about Squid says it's highest value can be no more than 32. However, when I change it to 100 pfsense (Squid) never tells me that value is not valid. My guess is it could still be 32 even though it says 100. Not sure though. Also changed the following in Services-->Squid Proxy Server: General-->Show Advanced Options In Integrations I replaced: url_rewrite_children 16 startup=8 idle=4 concurrency=0 with url_rewrite_children 100 startup=10 idle=10 concurrency=0 Guess it's just a wait and see game now. I will say this. I have my home home network VLANed for Guest Wireless and I implemented Squid a while back and had to turn it off cause the ole Fortnite wouldn't work for the kid's laptop. I turned Squid and Squidguard back on this morning before leaving with all the changes in this post, and whattda ya know, Fortnite worked when I tested it. So we're definitely on to something here.
  • Block sites

    Moved
    6
    0 Votes
    6 Posts
    978 Views
    BBcan177B
    Try this tutorial: https://www.linuxincluded.com/block-ads-malvertising-on-pfsense-using-pfblockerng-dnsbl/
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.