Issues with WPAD not working for me.

[cewjr9842]

I configured WPAD in DHCP settings and the DNS resolver as well.

with this config:

**function FindProxyForURL(url, host)
{
    if (isPlainHostName(host) ||
        shExpMatch(host, "*.local") ||
        isInNet(dnsResolve(host), "192.168.1.1",  "255.255.255.0"))
        return "DIRECT";

return "PROXY 192.168.1.1:3128";
}**
and in DHCP settings its configured :

number: 252 type: string value: "http://wpad/wpad.dat"
number: 252 type: string value: "http://wpad/wpad.da"
number: 252 type: string value: "http://wpad/proxy.pac"

and in DNS resolver :

Host: wpad
Domain: my domain name
IP Address: 192.168.1.1
Description: WPAD Autoconfigure Host

For some reason I can not download the files when i browse to them in chrome.

When i do a nslookup wpad i get this below :
**C:\Users\cw>nslookup wpad
Server:  pfsense.local

*** pfsense.local can't find wpad: Non-existent domain**

Also when i Curl i get this error below:
[2.3.3-RELEASE][admin@CaesarsNetwork.CEEsNETHOME]/root: curl http://wpad/proxy.pac
curl: (6) Could not resolve host: wpad

I also updated the mime types just to be safe even though  i dont think i needed to.

I still can not get this to work to be ale to block HTTP and HTTPs traffic via squid-guard. Any help or a place to look and see what is going on would surely be appreciated.

[C0RR0SIVE]

Where are you placing the wpad files..?  It's probably best to serve wpad files from a webserver other than the one on PFSense.

[aGeekhere]

function FindProxyForURL(url, host)
{
    if (isPlainHostName(host) ||
        shExpMatch(host, "*.local") ||
        isInNet(dnsResolve(host), "192.168.1.1",  "255.255.255.0"))
        return "DIRECT";

return "PROXY 192.168.1.1:3128";
}

try

function FindProxyForURL(url, host) 
{ 
    if (isPlainHostName(host) ||
        shExpMatch(host, "*.local") ||
        isInNet(dnsResolve(host), "192.168.1.0",  "255.255.255.0"))
        return "DIRECT";

    return "PROXY 192.168.1.1:3128";
} 

have a read though here https://forum.pfsense.org/index.php?topic=112335.0

[cewjr9842]

Corrosive: I placed the files here :  /usr/local/www.

aGeekHere: I am updating the files right now and will update you once its done.

[KOM]

IIRC, WPAD doesn't work with HTTPS so if you're using pfSense to serve them then you should be running WebGUI in HTTP mode.

[cewjr9842]

@KOM:

IIRC, WPAD doesn't work with HTTPS so if you're using pfSense to serve them then you should be running WebGUI in HTTP mode.

i understand that. My WEBGUI is on port 8800/HTTP.

it still is not working after going through you guide exactly given from Ageekhere.

Also just FYI. I notice the files all are able to be downloaded in the browser, when i use my external windows 2016 webserver that I run on my VM, but im not sure of the configuration after that for http and https blocking in pfsense.
i am wondering if its something going on somehwere else when trying to use pfsense as the webserver.

[cewjr9842]

one thing I am noticing is that when i go to http://192.168.1.30/wpad.dat in my browser it downloads, but when i access http://wpad/wpad.dat it seems to not work. Could this be an issue with DNS resolver?

[marcelloc]

why do you need the host as wpad? on most setups, the wpad url includes the ip address.

[cewjr9842]

I was following the steps in the guide created by ageekhere to be able to filter HTTPS traffic.

https://forum.pfsense.org/index.php?topic=112335.0

One thing that is happening is when i enable the DNS host override it will not block any sites.
I wanted to do the WPAD  so I would not have to do the MITM setup in the proxy. but at this point all I can get to work is the WPAD disabled with Transparent proxy enabled but of course its not blocking HTTPS traffic.

[aGeekhere]

One thing that is happening is when i enable the DNS host override it will not block any sites.

The DNS override on it's own does not block sites.

but at this point all I can get to work is the WPAD disabled with Transparent proxy enabled

Did you follow all the steps? it should work.

[cewjr9842]

I followed every step to the T!

its crazy even when i try to browse to : http://192.168.1.1/wpad.dat or .da , or the proxy.pac file they are not downloading at all in chrome or IE.

[aGeekhere]

Do you have auto configure enabled in internet options?

[jopeme]

Have you tried setting dns suffix on windows client?

[cewjr9842]

I got it working now. I had to use the unofficial WPAD package marcelloc created using nginx and it actually started working as it should. Thanks fellows!