Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Squid proxy

    Scheduled Pinned Locked Moved pfSense Packages
    16 Posts 3 Posters 3.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • G
      glimso
      last edited by

      But if we select both "Transparent AND Allow users on interface" we can't navigate at all (the page cannot be reached).
      We are using the package "squid" installed trought pfsense package interface (so i suppose that is version 2 cause it isn't squid3 package) we don't necessary need to filter https.

      Thanks

      1 Reply Last reply Reply Quote 0
      • KOMK
        KOM
        last edited by

        Is SquidGuard still installed?  If so, remove it and test with only Squid and don't worry about SquidGuard until your users can access the web with just Squid installed.  Do you have LAN selected as Proxy interface?  Are your users on the same subnet as your pfSense router?

        1 Reply Last reply Reply Quote 0
        • G
          glimso
          last edited by

          Tried that also. Now I've removed squidguard ….testing... and squid doesn't work.
          Yes the proxy interface is only LAN, and yes i'm in the same subnet/network (192.168.0.0./24)

          Edit:

          Squid doesn't work means: https traffic is ok, works, but all http traffic is blocked by squid and theres no rule for this.

          1 Reply Last reply Reply Quote 0
          • KOMK
            KOM
            last edited by

            With just Squid installed, how doesn't it work?  Timeout?  Error?

            Could you please show me your screens for Services - Proxy server - General and Services - Proxy server - Access control?

            If you use SSH to shell in, check your /var/squid/logs/access.log and cache.log and see if it has any errors or clues.

            1 Reply Last reply Reply Quote 0
            • G
              glimso
              last edited by

              I also tried to restart the process, but still not work.
              here is the screenshot of configuration. No clue in the access log…seems that after uninstall of squidguard not log in access.log  :(

              Thanks a lot

              Capture1.JPG
              Capture1.JPG_thumb
              Capture2.JPG
              Capture2.JPG_thumb

              1 Reply Last reply Reply Quote 0
              • KOMK
                KOM
                last edited by

                Sorry, how does it fail again?  Timeout or some error message right away?

                Why do you use Google DNS for proxy server?  Normally you select your forwarders under System - General Setup - DNS Servers.  Is there any change if you remove 8.8.8.8 from Use alternate DNS…?

                Perhaps your config is somehow corrupted.  You can find directions on resetting everything in this post:

                https://forum.pfsense.org/index.php?topic=78521.0

                1 Reply Last reply Reply Quote 0
                • G
                  glimso
                  last edited by

                  We get the message right away.
                  Thank you for the support.
                  I'll try to reset on Monday and will let you know…

                  1 Reply Last reply Reply Quote 0
                  • KOMK
                    KOM
                    last edited by

                    What message exactly are you getting?  It is more helpful if you answer all of the questions you are asked.  Why do you use Google DNS as an alternate just for the proxy?

                    1 Reply Last reply Reply Quote 0
                    • F
                      finalcut
                      last edited by

                      i got this error

                      pf php: /pkg_edit.php: The command '/usr/pbi/squid-amd64/sbin/squid -k reconfigure -f /usr/pbi/squid-amd64/etc/squid/squid.conf' returned exit code '1', the output was 'squid: ERROR: No running copy'

                      1 Reply Last reply Reply Quote 0
                      • KOMK
                        KOM
                        last edited by

                        Yeah, looks like something is broken.  I would remove Squid and then use the link I gave you to do a cleanup, then try again.

                        1 Reply Last reply Reply Quote 0
                        • G
                          glimso
                          last edited by

                          We get "unable to connect to site xxxxxxx".
                          I set the dsn just to check if this could solve this problem,
                          thinking that for some reason the proxy needed an ulterior dsn, but it didn't help.

                          I'll try the procedure you linked before.

                          1 Reply Last reply Reply Quote 0
                          • KOMK
                            KOM
                            last edited by

                            OK, now I understand why you were using a separate DNS just for the proxy.  As a suggestion, when you try something and it doesn't work, you should revert your change back or else you risk making the problem worse, or starting a new problem that will confuse you, or confusing people who are trying to help you 8)

                            Squid by itself is mainly used for caching web content, or as a base for SquidGuard, and it has very limited access control.  You typically only need to check the Transparent and Allow users on interface boxes and it just works as long as your users are on the same subnet as your pfSense server.  A default install of Squid will not block anything, last time I checked.

                            SquidGuard is the filtering component and it is more complex.  Try to get basic Squid working first, and then move on to SquidGuard.

                            1 Reply Last reply Reply Quote 0
                            • G
                              glimso
                              last edited by

                              Goodmorning all!

                              thanks to KOM we managed to get Squid and SquidGuard works!

                              we followed the steps to remove the proxy and its settings, then reinstalled it.

                              a minimal configuration and now it works smoothly!

                              our steps:

                              • removed Squid and SquidGuard following the instructions https://forum.pfsense.org/index.php?topic=78521.0
                              • installed Squid (2.x)
                              • enable Transparent Proxy and let checked Allow User on Interface
                              • verified that Squid works adding a site in the blacklist
                              • installed SquidGuard
                              • added a blacklist
                              • started the service
                              • profit

                              thanks again for your support!

                              1 Reply Last reply Reply Quote 0
                              • KOMK
                                KOM
                                last edited by

                                Glad to hear you got it working.

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.