Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Squid - select loopback interface or not?

    Scheduled Pinned Locked Moved Cache/Proxy
    13 Posts 3 Posters 3.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      pfsense_user12123
      last edited by

      There are hundreds of tutorials in this forum and on the web about configuring squid the correct way.
      But the main question for me is:

      Is it necessary to select the „loopback“ interface for proxy along with the lan interfaces or not?
      Everyone says something different. It looks like no one really knows the right answer.
      Please ….can some pro answer this question?

      Thx very much

      MB: Supermicro X11SBA-LN4F/F
      RAM: 8GB
      HD: 120 GB SSD
      Switch: Cisco SG 200-08
      AP: TP-Link AP500

      1 Reply Last reply Reply Quote 0
      • perikoP
        periko
        last edited by

        I ask u this.

        U have a network in the range 192.168.1.0/24, u setup pfsense with 2 interfaces, WAN+LAN.

        Them u decide to install squid, u want to protect the network behind the LAN, in this situation u need the loopback?

        In my little experience, I just need loopback went I need to get squid internal performance info which mgr give us, other than that no need loopback.

        Hope this give u some info.

        Necesitan Soporte de Pfsense en México?/Need Pfsense Support in Mexico?
        www.bajaopensolutions.com
        https://www.facebook.com/BajaOpenSolutions
        Quieres aprender PfSense, visita mi canal de youtube:
        https://www.youtube.com/c/PedroMorenoBOS

        1 Reply Last reply Reply Quote 0
        • P
          pfsense_user12123
          last edited by

          @periko:

          I ask u this.

          U have a network in the range 192.168.1.0/24, u setup pfsense with 2 interfaces, WAN+LAN.

          Them u decide to install squid, u want to protect the network behind the LAN, in this situation u need the loopback?

          In my little experience, I just need loopback went I need to get squid internal performance info which mgr give us, other than that no need loopback.

          Hope this give u some info.

          I have three lan Interfaces.

          I hope I understood you correctly, and so I disabled the loopback interface now.

          I found this on the pfsense page
          https://doc.pfsense.org/index.php/Setup_Squid_as_a_Transparent_Proxy

          Or does anyone disagree turning off the loopback interface?

          MB: Supermicro X11SBA-LN4F/F
          RAM: 8GB
          HD: 120 GB SSD
          Switch: Cisco SG 200-08
          AP: TP-Link AP500

          1 Reply Last reply Reply Quote 0
          • KOMK
            KOM
            last edited by

            IIRC you need the loopback interface selected for Lightsquid to work.

            1 Reply Last reply Reply Quote 0
            • P
              pfsense_user12123
              last edited by

              @KOM:

              IIRC you need the loopback interface selected for Lightsquid to work.

              ok only for lightsquid. And if i wanna use squidguard….Do i have to turn loopback device also on ?

              MB: Supermicro X11SBA-LN4F/F
              RAM: 8GB
              HD: 120 GB SSD
              Switch: Cisco SG 200-08
              AP: TP-Link AP500

              1 Reply Last reply Reply Quote 0
              • KOMK
                KOM
                last edited by

                Not sure.  I'd just leave loopback selected unless it's giving you some specific problem.

                1 Reply Last reply Reply Quote 0
                • P
                  pfsense_user12123
                  last edited by

                  @KOM:

                  Not sure.  I'd just leave loopback selected unless it's giving you some specific problem.

                  Ok. Thx. Is loopback necessary for clam (antivirus) ?

                  MB: Supermicro X11SBA-LN4F/F
                  RAM: 8GB
                  HD: 120 GB SSD
                  Switch: Cisco SG 200-08
                  AP: TP-Link AP500

                  1 Reply Last reply Reply Quote 0
                  • KOMK
                    KOM
                    last edited by

                    Definitely no idea.  I don't run that crap on my router.  AV belongs on the client, not the router.

                    1 Reply Last reply Reply Quote 0
                    • P
                      pfsense_user12123
                      last edited by

                      Thx KOM….you helped me and a lot of other users in this forum. :-)

                      MB: Supermicro X11SBA-LN4F/F
                      RAM: 8GB
                      HD: 120 GB SSD
                      Switch: Cisco SG 200-08
                      AP: TP-Link AP500

                      1 Reply Last reply Reply Quote 0
                      • P
                        pfsense_user12123
                        last edited by

                        I found a difference when I activate loopback interface in proxy mode.

                        if the loopback interface is activated, advertising links on google search results won´t open.  thats great!
                        if i deactivate the loopback interface, advertising links on google search results open again..

                        can someone explain why it is like that?

                        thx

                        MB: Supermicro X11SBA-LN4F/F
                        RAM: 8GB
                        HD: 120 GB SSD
                        Switch: Cisco SG 200-08
                        AP: TP-Link AP500

                        1 Reply Last reply Reply Quote 0
                        • KOMK
                          KOM
                          last edited by

                          Perhaps the loopback interface is used by squidguard?

                          1 Reply Last reply Reply Quote 0
                          • P
                            pfsense_user12123
                            last edited by

                            no

                            MB: Supermicro X11SBA-LN4F/F
                            RAM: 8GB
                            HD: 120 GB SSD
                            Switch: Cisco SG 200-08
                            AP: TP-Link AP500

                            1 Reply Last reply Reply Quote 0
                            • KOMK
                              KOM
                              last edited by

                              It's now a week later and you're still worrying about this?  Stuff works when it's selected, stuff breaks when it isn't.  Just leave it selected.

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.