Starting proxy server external ip ?

marcelloc

Just install any proxy server (HAVP,squid) on pfsense and configure it to listen on port 21.

To restrict it to your ip, create a firewall rule to allow only your ip.

Depending on how your current firewall filter port 21, you will get a ftp proxy.

bmironb

firewall rule from wan is to allow (pass) everything
''create a firewall rule to allow only your ip'' what do you mean by this ? my exterior ip

marcelloc

@bmironb:

firewall rule from wan is to allow (pass) everything
''create a firewall rule to allow only your ip'' what do you mean by this ? my exterior ip

If you do not want to be blacklisted as a open proxy, you need to close your firewall rules to allow only you to connect to it.

bmironb

can you help me in web gui or in ssh to set it properly ? with acess…thanks

bmironb

hi,
thanks for help ! it's working now very good !
but i still wondering how this traffic is framed were i set my ext ip as proxy on port 21 ?

thanks !

bmironb

ERROR
The requested URL could not be retrieved

–------------------------------------------------------------------------------

The following error was encountered while trying to retrieve the URL: http://www.google.it/

Access Denied.

Access control configuration prevents your request from being allowed at this time. Please contact your service provider if you feel this is incorrect.

Your cache administrator is admin@localhost.

Now i'm getting this mesage when i try to connect

marcelloc

Include your ip on squid access list.

bmironb

in unrestricted ip's or where ?
regards

marcelloc

@bmironb:

in unrestricted ip's or where ?
regards

Yes.

Enter each unrestricted IP address on a new line that is not to be filtered out by the other access control directives set in this page.

bmironb

ok it's working
i'm wondering how this traffic is framed ? where i m using this proxy that i created
thanks

bmironb

now it's ok !

but how can i make this proxy server secure ? i mean where i'm using this proxy to be less traceable my ip/eterior ? how to set up instead of http , to work with https ? packages to be less traceable and traffic also (traffic from exterior ip-that is add in unrestricted ip in squid / and my ip) ? i mean instead (adding proxy in lan proxy settings at http ) http to be add at secure ?

also i can enter in pfsense from exterior ip how can i disable that , but proxy server also working and connect to it from outside on port 21?

Thanks for your help !!!