Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Help me with squid guard

    Scheduled Pinned Locked Moved pfSense Packages
    25 Posts 3 Posters 7.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D Offline
      dvserg
      last edited by

      Enable Transparent proxy in Squid

      SquidGuardDoc EN  RU Tutorial
      Localization ru_PFSense

      1 Reply Last reply Reply Quote 0
      • I Offline
        iamthed
        last edited by

        @dvserg:

        Enable Transparent proxy in Squid

        still the same.. i can browse.. any idea??
        i configure the squid only like this..
        is it wrong?

        3.JPG
        3.JPG_thumb

        i'm dumb.. but i have a desire to learn

        1 Reply Last reply Reply Quote 0
        • D Offline
          dvserg
          last edited by

          Possible view squid and squidGuard config's ?
          /usr/local/etc/squid/squid.conf
          /usr/local/etc/squidGuard/squidGuard.conf

          SquidGuardDoc EN  RU Tutorial
          Localization ru_PFSense

          1 Reply Last reply Reply Quote 0
          • I Offline
            iamthed
            last edited by

            do you mean like this?

            how do you see
            /usr/local/etc/squid/squid.conf
            /usr/local/etc/squidGuard/squidGuard.conf
            in shell ??
            sorry i'm newbie in freebsd this shell makes me crazy..

            12.txt
            13.txt
            14.txt

            i'm dumb.. but i have a desire to learn

            1 Reply Last reply Reply Quote 0
            • D Offline
              dvserg
              last edited by

              still the same.. [u][b]i can browse[/b][/u].. any idea??
              i configure the squid only like this..
              is it wrong?
              

              You can browse or you users ?
              I found this in you config

              src test2 {
              ip 122.200.14.67
              }
              ...
              acl {
              # 
              test2 {
              pass !in-addr !blk_BL_porn !blk_BL_warez [u][b]all[/b][/u]
              redirect ...
              rewrite test62
              }
              

              From ip 122.200.14.67 - you allow browse. All any - no

              SquidGuardDoc EN  RU Tutorial
              Localization ru_PFSense

              1 Reply Last reply Reply Quote 0
              • I Offline
                iamthed
                last edited by

                i'm the one who configured it.. and i test it..
                the illustration like this

                my PC –--->PFsense------>switch-----> router

                when i browse i'm act as a user.. before i'm implementing it..

                i already set the deny rules
                see the picture above
                is there any error on my log?

                563.JPG
                563.JPG_thumb

                i'm dumb.. but i have a desire to learn

                1 Reply Last reply Reply Quote 0
                • D Offline
                  dvserg
                  last edited by

                  Also if you setup browser proxy options  - what behavior with blocking ?

                  SquidGuardDoc EN  RU Tutorial
                  Localization ru_PFSense

                  1 Reply Last reply Reply Quote 0
                  • I Offline
                    iamthed
                    last edited by

                    @dvserg:

                    Also if you setup browser proxy options  - what behavior with blocking ?

                    i wanna test the squidguard is working.. so i deny all as the default..
                    if my default is deny then it must be block anything right..
                    but i still can browse..
                    or i should reinstall sg and squid and installed it again?
                    hey if you don't mind can u PM me ur printscreen squid+squidguard
                    i'd like to see it..
                    i'm affraid that i misconfigure about the squid..
                    and sorry if it's bother you..

                    i'm dumb.. but i have a desire to learn

                    1 Reply Last reply Reply Quote 0
                    • D Offline
                      dvserg
                      last edited by

                      Try this pls

                      • disable transparent mode in squid, disable squidGuard
                      • set you brouser Proxy options as squid configured (ip/port)
                      • test http browsing = must work
                      • enable SG, remove all ACL's, Default page set [all Deny], disable safesearch, Apply
                      • test HTTP browsing - must be nothing.

                      SquidGuardDoc EN  RU Tutorial
                      Localization ru_PFSense

                      1 Reply Last reply Reply Quote 0
                      • I Offline
                        iamthed
                        last edited by

                        @dvserg:

                        Try this pls

                        • disable transparent mode in squid, disable squidGuard
                        • set you brouser Proxy options as squid configured (ip/port)
                        • test http browsing = must work
                        • enable SG, remove all ACL's, Default page set [all Deny], disable safesearch, Apply
                        • test HTTP browsing - must be nothing.

                        thx for ur answer but when i configure like u said i have a problem..
                        when i set proxy..
                        it cannot connect to internet..
                        plz see the picture below
                        any idea where it might be wrong??
                        thx again

                        1.JPG
                        1.JPG_thumb
                        2.JPG
                        2.JPG_thumb
                        3.JPG
                        3.JPG_thumb
                        4.JPG
                        4.JPG_thumb

                        i'm dumb.. but i have a desire to learn

                        1 Reply Last reply Reply Quote 0
                        • D Offline
                          dvserg
                          last edited by

                          Why enabled squid upstream proxy? Squid has parent proxy server ?
                          And you browser must be set to squid IP/Port, but not to upstream proxy setting.

                          SquidGuardDoc EN  RU Tutorial
                          Localization ru_PFSense

                          1 Reply Last reply Reply Quote 0
                          • I Offline
                            iamthed
                            last edited by

                            @dvserg:

                            Why enabled squid upstream proxy? Squid has parent proxy server ?
                            And you browser must be set to squid IP/Port, but not to upstream proxy setting.

                            thx.. it's worked.. it's blocked everything.. even i tried to change the default rules to allow all traffic..  ???

                            but how to enable the transparent proxy server..
                            so if client want to access website with port 80 they go to proxy server..
                            cmiiw if i'm using transparent proxy it means i don't need to setup the browser proxy right?

                            i already setup the like this but it's blocked all traffic..
                            thx dvserg

                            gbr2.JPG
                            gbr2.JPG_thumb
                            gbr3.JPG
                            gbr3.JPG_thumb
                            gbr1.JPG
                            gbr1.JPG_thumb

                            i'm dumb.. but i have a desire to learn

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.