Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Behind another firewall

    Scheduled Pinned Locked Moved Traffic Shaping
    55 Posts 2 Posters 23.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      semperfi
      last edited by

      hi sir, my PFSense box is on transparent bridge mode. where LAN and WAN is set to none and the only interface that has an IP was the OPT1 (192.168.0.2) where I assign the bridge.

      Where can I put this command sir what option will i use?

      thanks,

      1 Reply Last reply Reply Quote 0
      • S
        semperfi
        last edited by

        Sir can i send to you my backup config so that you can see it with or to your test machine?

        1 Reply Last reply Reply Quote 0
        • P
          podilarius
          last edited by

          @semperfi:

          hi sir, my PFSense box is on transparent bridge mode. where LAN and WAN is set to none and the only interface that has an IP was the OPT1 (192.168.0.2) where I assign the bridge.

          Where can I put this command sir what option will i use?

          thanks,

          There are a couple of places. You can get on the console with a keyboard or you can enable ssh and do it remotely in a ssh console session.

          Squid is a proxy and as such is going to need an IP address. The processes goes PC -> LAN -> localhost proxy -> WAN -> remote server. Since the proxy is running on localhost, is going to need some translation and that is going to require an IP address. If you don't have an extra one, then you are not going to be able to use a proxy service.

          1 Reply Last reply Reply Quote 0
          • S
            semperfi
            last edited by

            I cant get what are you saying sir,

            1 Reply Last reply Reply Quote 0
            • S
              semperfi
              last edited by

              Do u mean i will provide an extra IP for my proxy server, not the existing IP of OPT1,

              1 Reply Last reply Reply Quote 0
              • P
                podilarius
                last edited by

                Yes, This is because of how squid works. It is the man in the middle, as in it communicates to remote servers on behalf of the system it is protecting. If you have a fast internet with no caps, it is really not necessary, unless you are using it to block access to certain websites.

                1 Reply Last reply Reply Quote 0
                • S
                  semperfi
                  last edited by

                  In what interface can I assign my new IP?

                  1 Reply Last reply Reply Quote 0
                  • P
                    podilarius
                    last edited by

                    OPT1 or WAN, you just have to create a NAT rule for 127.0.0.1 to use on the outbound NAT.

                    1 Reply Last reply Reply Quote 0
                    • S
                      semperfi
                      last edited by

                      hi sir still I cant forward port 3128 to to port 8080 for my dansguardian. to use transparent proxy from this setup bridge mode of pfsense..
                      Thanks

                      1 Reply Last reply Reply Quote 0
                      • S
                        semperfi
                        last edited by

                        sir how can i make my pfsense as router mode only?

                        thanks

                        1 Reply Last reply Reply Quote 0
                        • P
                          podilarius
                          last edited by

                          In advanced setting under firewall, you check the box to disable firewalling. You then just have to setup the routing table.

                          1 Reply Last reply Reply Quote 0
                          • S
                            semperfi
                            last edited by

                            sir how can i use limiter for upload and download with my pfsense box in transparent bridge mode?
                            tnx,,,

                            1 Reply Last reply Reply Quote 0
                            • P
                              podilarius
                              last edited by

                              Honestly don't know. I have never used the limiter. My guess would be to setup the limits and on your firewall rule use the in/out setting. I tried once, but it didn't work and I was not in the mood to learn it. So I just used traffic shaping.

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.