Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Weird problem in squid guard - Partial access to the Internet

    Scheduled Pinned Locked Moved Cache/Proxy
    14 Posts 2 Posters 6.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      firefox
      last edited by

      help
      someone ?
      No one encounter something like this ?

      1 Reply Last reply Reply Quote 0
      • KOMK
        KOM
        last edited by

        Is it a case of HTTP vs HTTPS?  Are you using Transparent mode?

        1 Reply Last reply Reply Quote 0
        • F
          firefox
          last edited by

          If you mean proxy server settings
          Then yes

          I did not find any similar settings
          in the Squid Guard tab

          ![home.plex - Proxy server General settings - 2015-03-02_05.54.53.png](/public/imported_attachments/1/home.plex - Proxy server General settings - 2015-03-02_05.54.53.png)
          ![home.plex - Proxy server General settings - 2015-03-02_05.54.53.png_thumb](/public/imported_attachments/1/home.plex - Proxy server General settings - 2015-03-02_05.54.53.png_thumb)

          1 Reply Last reply Reply Quote 0
          • KOMK
            KOM
            last edited by

            Anything that silently intercepts an HTTPS session will trigger a browser Man in the Middle attack warning unless you have distributed the pfSense server certificate to all your clients.  You can avoid this by either installing the cert on every client PC, tablet, phone, etc etc, or stop using Transparent mode.

            1 Reply Last reply Reply Quote 0
            • F
              firefox
              last edited by

              Not clear to me
              how the other computers work correctly ?

              1 Reply Last reply Reply Quote 0
              • KOMK
                KOM
                last edited by

                If they were going to an HTTP site then it would work without any errors.  Where were these clients going when they did/didn't work right?

                1 Reply Last reply Reply Quote 0
                • F
                  firefox
                  last edited by

                  Accesses the same sites - google.com, walla.co.il, ynet.co.il,
                  I did not check more sites
                  Because it's not my computer (do not have much access to it)
                  It's my sister

                  Update
                  Two computers back to work correctly
                  Only one causing problems (my sister computer)
                  And there is not at all the sites

                  1 Reply Last reply Reply Quote 0
                  • KOMK
                    KOM
                    last edited by

                    It could be that for the other computers, someone added the pfSense cert to the list of Trusted certificates.

                    1 Reply Last reply Reply Quote 0
                    • F
                      firefox
                      last edited by

                      how can i check if certificates is pfsense ?

                      two computer use ubuntu and firefox are ok
                      one computer use win xp and crome or iexplorer not ok          <–-------- problem computer
                      one computer use win7 and firefox is ok

                      1 Reply Last reply Reply Quote 0
                      • KOMK
                        KOM
                        last edited by

                        Run IE and go to Options - Content - Certificates.  Look for a cert from either pfSense or Electric Sheep Fencing (ESF).

                        1 Reply Last reply Reply Quote 0
                        • F
                          firefox
                          last edited by

                          I checked all computers (5 computers)

                          The certificate does not appear in any of them

                          1 Reply Last reply Reply Quote 0
                          • KOMK
                            KOM
                            last edited by

                            Well then, I don't know what to tell you.  You have one computer with a problem.  I doubt it's pfSense or Squid.  The one computer that has the problem is so old, it may not have the proper Root Certificate updates from Microsoft.  Chrome and IE share the same certificate store, whereas Firefox uses its own.  Try running Firefox on the XP box and see if that is any different.

                            1 Reply Last reply Reply Quote 0
                            • F
                              firefox
                              last edited by

                              Try running Firefox on the XP box and see if that is any different.

                              I'll try

                              Clarification
                              the computer is old old
                              the operating system is old

                              Update from yesterday
                              But it was already too late and I turned off my computer

                              The computer in question was one hour ahead

                              I set the computer time and date accurate
                              And now

                              Only two sites inaccessible
                              And show the same message as before

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.