• E2Guardian using * for subdomain

    6
    0 Votes
    6 Posts
    878 Views
    P

    @ravegen:

    pfsensation,

    so theres no need to specify subdomains ?

    For this particular case, and in my testing. There wasn't a need, as Dropbox only seemed to care about its main domain. Dropbox.com.

  • E2Guardian: Failed to negotiate ssl connection to client

    12
    0 Votes
    12 Posts
    3k Views
    P

    @ravegen:

    so to block dropbox, skype, yahoo messenger is to mitm ssl disrupting connection and to allow them under mitm ssl connection is to place them on exemption, right?

    Pretty much, yes. Although if you completely want to block them, use banned list and don't rely on the SSL pinning to block it as the developers of the platform can change things.

  • Control the traffic for each user.

    Moved
    3
    0 Votes
    3 Posts
    635 Views
    marcellocM

    Squid can use captive portal authentication. this will help lightsquid get complete http/https report.

  • E2Guardian translation key missing

    1
    0 Votes
    1 Posts
    459 Views
    No one has replied
  • 0 Votes
    3 Posts
    1k Views
    A

    This is exactly the setup I would like to configure as well.

    Effectively it looks like we would need to be able to set IPSEC as the applicable interface within squid, but that doesn't seem to be an option. Has anyone else been able to get this working effectively?

  • Lightsquid password error

    2
    0 Votes
    2 Posts
    1k Views
    A

    Hi,

    I had the same problem on SG-3100. I have checked logs and got info:
    2018-05-16 19:59:52: (mod_auth.c.525) password doesn't match for / username: admin, IP:

    so for test I renamed user from admin to testadmin and works.

    It seems that webGUI is not changing password for default user admin :-(

    Best regrads,
    Andcza

  • Rc.filter_configure_sync: [squid] Installed but disabled

    3
    0 Votes
    3 Posts
    668 Views
    R

    yes squid is enabled and started as seen on pfsense gui

  • Inbound load balancing using HAProxy

    6
    0 Votes
    6 Posts
    932 Views
    F

    Thanks very much for explaining this to me! Very much appreciated! :)

  • Squid (or another proxy) for chain-proxy for several resources

    3
    0 Votes
    3 Posts
    425 Views
    M

    cool, thanks! will look onto it

  • Squid

    4
    0 Votes
    4 Posts
    671 Views
    KOMK

    but if you put me where I should do those configurations I'd appreciate it.

    That depends on your OS.  For Windows, in the proxy definition dialog there is a 'Bypass for local addresses' checkbox or something similar.

  • Problem blocking youtube with squidguard

    2
    0 Votes
    2 Posts
    2k Views
    E

    Hi, in my opinion you need to create a new list in Target categories called Denied sites, writte youtube.com (Domain List) and youtube.com/ (URL List), then you need Denied the list in Groups ACL. APPLY in General Settings.

  • PFSENSE, Squid + SquidGuard User based ACL´s

    2
    0 Votes
    2 Posts
    979 Views
    KOMK

    I don't think so.  Here is what you have to work with when using a squidguard ACL:

    Enter client's IP address or domain or "username" here. To separate them use space.

    Example:
    IP: 192.168.0.1 - Subnet: 192.168.0.0/24 or 192.168.1.0/255.255.255.0 - IP-Range: 192.168.1.1-192.168.1.10
    Domain: foo.bar matches foo.bar or *.foo.bar
    Username: 'user1'
    Ldap search (Ldap filter must be enabled in General Settings): ldapusersearch ldap://192.168.0.100/DC=domain,DC=com?sAMAccountName?sub?(&(sAMAccountName=%s)(memberOf=CN=it%2cCN=Users%2cDC=domain%2cDC=com))

  • Squid NTLM Authentication

    Moved
    2
    0 Votes
    2 Posts
    747 Views
    No one has replied
  • SSL Certificate Deamon Children?

    1
    0 Votes
    1 Posts
    452 Views
    No one has replied
  • Squid (Forward) Proxy - Setting Outbound Interface/Gateway

    3
    0 Votes
    3 Posts
    6k Views
    D

    I had the same issue. After searching I found a solution, I don't remember who posted these or I'd give them props. You'll need something like this in your Squid advanced options:

    acl vpn_clients src 192.168.1.0/24 tcp_outgoing_address xxx.xxx.xxx.xxx vpn_clients

    You'll also need a way to update the outgoing address if it's not static. I have a cron job to run this:

    #!/bin/sh # Variables VPN_IFACE=ovpnc1 SQUID_CONFIG_FILE=/usr/local/etc/squid/squid.conf # Get current IP address of VPN interface VPN_IFACE_IP=$(ifconfig $VPN_IFACE | awk '{print $2}' | egrep -o '([0-9]+\.){3}[0-9]+') # Check if VPN interface is up and exit if it isn't if [ -z "$VPN_IFACE_IP" ] then         exit 0; fi # Check current IP for VPN interface in squid.conf file VPN_CONFIG_IP=$(grep -m 1 "tcp_outgoing_address" $SQUID_CONFIG_FILE | awk '{print $2}' | egrep -o '([0-9]+\.){3}[0-9]+') # Check if the config file matches the current VPN interface IP, and if so exit script if [ "$VPN_IFACE_IP" == "$VPN_CONFIG_IP" ] then         exit 0; fi # Replace the previous IP address in the squid.conf file with the current VPN interface address sed -ie 's/'"$VPN_CONFIG_IP"'/'"$VPN_IFACE_IP"'/' $SQUID_CONFIG_FILE # Force reload of the new squid.conf file /usr/local/sbin/squid -k reconfigure
  • Using Squid with Limiters To Restrict Bandwidth

    1
    1 Votes
    1 Posts
    371 Views
    No one has replied
  • HAProxy Web site OWA collision

    7
    0 Votes
    7 Posts
    1k Views
    P

    You my friend are officially on my Christmas card list. Thank You !!
    If you like Siberian Husky puppys, there will be a live stream of them in June.
    If you have a donation button somewhere point me to it.

  • Flash threw HAProxy

    3
    0 Votes
    3 Posts
    522 Views
    P

    The 1935 in the firewall rules was a shot in the dark to fix why it may not be working.

    The web site itself is http, This is what I am using "https://helpx.adobe.com/adobe-media-server/dev/stream-on-demand-media-http.html"

  • [HAProxy] HTTP Basic Auth

    Moved
    4
    0 Votes
    4 Posts
    2k Views
    P

    I dont see the "http-request auth" in there?

  • Error in PfSense

    3
    0 Votes
    3 Posts
    688 Views
    KOMK

    I use squid and it works fine for me.  Maybe you have a config issue with transparent mode and certificates, peek & splice settings etc.

Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.