Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    SquidGuard Group ACL not applying; incorrect client IP address

    Scheduled Pinned Locked Moved pfSense Packages
    3 Posts 2 Posters 4.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      pfSense2User
      last edited by

      Hello everyone,
      After I reinstalled SquidGuard and set up Access Lists for certain IP addresses (my laptop and router*) after several reboots, I cannot access sites that I whitelisted in my Group ACLs for no apparent reason, and not only that, the client IP shows the pfSense LAN IP Address and not the client's IP address (ex: 10.0.0.2 - my laptop) and the group is set to default and not the Group ACL that I assigned for my laptop…

      Did I do something wrong, like miss several steps?  I can access any other site that is not blocked without a problem, just can't access the sites that I have set up to be allowed in my Group ACL...

      1 Reply Last reply Reply Quote 0
      • S
        srk3461
        last edited by

        Is your client source is set correct !? Did you set any order pref!? Is your "Target Categories" set properly!

        In your "Target Rules" under "Groups ACL" did you set your desired group to "white-list"? Is your "default access" at the bottom of the same is set to "allow"!?

        Did you hit "save" bottom after all your configuration and then hit "apply" on general page of squid-guard!?

        Try clearing your browser cache before checking!

        1 Reply Last reply Reply Quote 0
        • P
          pfSense2User
          last edited by

          @srk3461:

          Is your client source is set correct !? Did you set any order pref!? Is your "Target Categories" set properly!

          In your "Target Rules" under "Groups ACL" did you set your desired group to "white-list"? Is your "default access" at the bottom of the same is set to "allow"!?

          Did you hit "save" bottom after all your configuration and then hit "apply" on general page of squid-guard!?

          Try clearing your browser cache before checking!

          I knew I forgot to hit apply; it officially works.  I double checked my configurations to see what the heck was going on; I forgot to add the LAN IP address in the whitelist.

          Group ACL names and source IP addresses:

          Ben: 10.0.0.1-10.0.0.4 (pfSense, my laptop, server, and FreeNAS)
          Wireless Clients: 10.0.0.1 10.0.0.5 (pfSense; Wireless Router*)

          • not connected yet

          The space in between the 10.0.0.1 and 10.0.0.5 represents a separate IP address.

          Thanks for the info, man.

          Edit: When I change my laptop's IP address from 10.0.0.2 to 10.0.0.5 with every setting as the same (subnet mask, gateway, DNS1, and DNS2), the group ACL doesn't go from Ben to Wireless Clients, just stays at Ben.  What else did I do wrong?  Must be pfSense 2.1-RC0-i386 has bugs in it; I'm going to install pfSense-2.0.3-AMD64

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.