Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    New to PFsense - Transparency mode

    Scheduled Pinned Locked Moved Off-Topic & Non-Support Discussion
    56 Posts 5 Posters 36.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      kejianshi
      last edited by

      I REALLY miss that place  :-[ 
      Gotta get there again soon.

      Anyway - I'd use OpenDNS - They have 2 servers near(ish) to you.
      DynDNS only has 1 sort of close.

      1 Reply Last reply Reply Quote 0
      • H
        heirkeyso
        last edited by

        Sir,

        I'm trying to configure the pfsense for web proxy cache and content filtering using squid 3 and dansguardian. Base on my web search one of the instruction is to configure in the firewall to redirect all the http request or port 80 to 8080. When I following there instruction I'm getting an error of SSL error and I cannot access the pfsense webconfiguration.

        Below is the link what I follow for the configuration.
        http://www.theninjageek.co.za/blog/2013/07/02/pfsense-squid3-and-dansguardian-a-better-alternative-to-squidguard/

        Kindly assist me with this.

        Thank you

        1 Reply Last reply Reply Quote 0
        • K
          kejianshi
          last edited by

          You can direct all of port 80 in and that will work, but not port 443.  OK?

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            If you put in a firewall rule that redirects all traffic on port 80 that may include traffic for the webgui. Either change the port the webgui listens on or add a rule above the squid rule to allow traffic to the webgui without redirection.

            Steve

            1 Reply Last reply Reply Quote 0
            • H
              heirkeyso
              last edited by

              I'm confuse. Is it necessary or mandatory to redirect the port? What us the purpose of doing it?

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                Redirecting port 80 is necessary in that configuration. It captures http requests from clients behind pfSense and sends them to Squid/Dansguardian.

                Steve

                1 Reply Last reply Reply Quote 0
                • H
                  heirkeyso
                  last edited by

                  Sir,

                  I was trying to follow the instruction on the link I gave in the last post. I'm getting a trouble accessing the pfsense webconfig. Now I'm really confuse and don't know what to do. Kindly assist me with this.

                  Thank you in advance.

                  1 Reply Last reply Reply Quote 0
                  • K
                    kejianshi
                    last edited by

                    Try this.

                    at the command line:

                    pfctl -d

                    Now - Access your pfsense web menu.  Correct the rule that locked you out.  When you are sure you have fixed the rule that caused the lock-out, then:

                    pfctl -e

                    You can always do this if you make a mistake and lock yourself out of the web interface.

                    1 Reply Last reply Reply Quote 0
                    • O
                      onlinecentric1
                      last edited by

                      Sir/Madam!
                      I am new in pfsense.
                      Please, advice me which activities are allowed in this forum.

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        Read the rules:

                        http://forum.pfsense.org/index.php/topic,70.0.html

                        Don't hijack someone else's thread to ask an unrelated question.  ::)

                        Steve

                        1 Reply Last reply Reply Quote 0
                        • S
                          shehan31
                          last edited by

                          I had the same problem but still haven't received any thing to my question which is on the pfsense forum. Therefore I have work out my self and found some kind of a solution. I suggest you to switch off transparent mode and configure your browser for proxy. use the DNS as your PFsense local IP address and add a dns forwarders in your pfsense. use squid guard to mange url filtering. It will also filter https too. There is a small problem with this. the block pages may not display the error message that you have entered.

                          @heirkeyso:

                          Sir,

                          The diagram what I present to you is not a good practice?

                          I want to use the pfsense for the purpose to serve as a internet or the pfsense is the giving an internet connection to the user and in the same time I can block the website the are using like the social media(facebook, tweeter and etc)., instant messenger, torrent and etc. for the users and I want also to control whose user will I block or gave a full access for the website or url.

                          Below are my concern:
                          -> documentation or manual for setting up pfsense
                          -> if I already finished set-up the box how can I block the https://www.facebook.com and https://www.twitter.com?
                          -> setting up port forwarding. is it the same in configuring in link-sys router?
                          -> Is the i7 processor with 8gb ram will enough for the around 60 users?

                          Sorry for these questions. I'm just new to pfsense and I just want to know everything before I deploy to our office network.

                          Thank you in advance for your response.

                          Precious

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.