Behind another firewall

semperfi

sir how can i use transparent proxy in transparent bridge mode

thankas,,,

podilarius

I have not done this before, but I would speculate that you just need to install squid3, set is to listen on WAN and LAN, and check the option to be transparent.

semperfi

ok sir thank I'll try the squid3..

semperfi

how to use this squid3 sir?

podilarius

Where are you having trouble? Perhaps some questions. Search, there is probably a doc or a forum write up for a simple starter config.

semperfi

hi si this is what i get in my setup using squid3, i cant access my pfsense box,

![reverse proxy.png](/public/imported_attachments/1/reverse proxy.png)
![reverse proxy.png_thumb](/public/imported_attachments/1/reverse proxy.png_thumb)

podilarius

Well to get back into your gui, ssh or get to a console and do this:

pgrep -fl proxy_monitor

<get the="" process="" id=""># pgrep -fl squid
<get this="" process="" id="" also=""># kill -9 <proxy_monitory process="" ids=""># kill -9 <squid process="" ids="">This should stop squid and stop it from restarting. You should be able to get to your GUI to remove the package or change the config to only listen on the bridge interface. Does the bridge have an IP address? If not, then it will probably not work.</squid></proxy_monitory></get></get>

semperfi

hi sir, my PFSense box is on transparent bridge mode. where LAN and WAN is set to none and the only interface that has an IP was the OPT1 (192.168.0.2) where I assign the bridge.

Where can I put this command sir what option will i use?

thanks,

semperfi

Sir can i send to you my backup config so that you can see it with or to your test machine?

podilarius

@semperfi:

hi sir, my PFSense box is on transparent bridge mode. where LAN and WAN is set to none and the only interface that has an IP was the OPT1 (192.168.0.2) where I assign the bridge.

Where can I put this command sir what option will i use?

thanks,

There are a couple of places. You can get on the console with a keyboard or you can enable ssh and do it remotely in a ssh console session.

Squid is a proxy and as such is going to need an IP address. The processes goes PC -> LAN -> localhost proxy -> WAN -> remote server. Since the proxy is running on localhost, is going to need some translation and that is going to require an IP address. If you don't have an extra one, then you are not going to be able to use a proxy service.

semperfi

I cant get what are you saying sir,

semperfi

Do u mean i will provide an extra IP for my proxy server, not the existing IP of OPT1,

podilarius

Yes, This is because of how squid works. It is the man in the middle, as in it communicates to remote servers on behalf of the system it is protecting. If you have a fast internet with no caps, it is really not necessary, unless you are using it to block access to certain websites.

semperfi

In what interface can I assign my new IP?

podilarius

OPT1 or WAN, you just have to create a NAT rule for 127.0.0.1 to use on the outbound NAT.

semperfi

hi sir still I cant forward port 3128 to to port 8080 for my dansguardian. to use transparent proxy from this setup bridge mode of pfsense..
Thanks

semperfi

sir how can i make my pfsense as router mode only?

thanks

podilarius

In advanced setting under firewall, you check the box to disable firewalling. You then just have to setup the routing table.

semperfi

sir how can i use limiter for upload and download with my pfsense box in transparent bridge mode?
tnx,,,

podilarius

Honestly don't know. I have never used the limiter. My guess would be to setup the limits and on your firewall rule use the in/out setting. I tried once, but it didn't work and I was not in the mood to learn it. So I just used traffic shaping.