Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Weird problem in squid guard - Partial access to the Internet

    Scheduled Pinned Locked Moved Cache/Proxy
    14 Posts 2 Posters 6.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • KOMK
      KOM
      last edited by

      Is it a case of HTTP vs HTTPS?  Are you using Transparent mode?

      1 Reply Last reply Reply Quote 0
      • F
        firefox
        last edited by

        If you mean proxy server settings
        Then yes

        I did not find any similar settings
        in the Squid Guard tab

        ![home.plex - Proxy server General settings - 2015-03-02_05.54.53.png](/public/imported_attachments/1/home.plex - Proxy server General settings - 2015-03-02_05.54.53.png)
        ![home.plex - Proxy server General settings - 2015-03-02_05.54.53.png_thumb](/public/imported_attachments/1/home.plex - Proxy server General settings - 2015-03-02_05.54.53.png_thumb)

        1 Reply Last reply Reply Quote 0
        • KOMK
          KOM
          last edited by

          Anything that silently intercepts an HTTPS session will trigger a browser Man in the Middle attack warning unless you have distributed the pfSense server certificate to all your clients.  You can avoid this by either installing the cert on every client PC, tablet, phone, etc etc, or stop using Transparent mode.

          1 Reply Last reply Reply Quote 0
          • F
            firefox
            last edited by

            Not clear to me
            how the other computers work correctly ?

            1 Reply Last reply Reply Quote 0
            • KOMK
              KOM
              last edited by

              If they were going to an HTTP site then it would work without any errors.  Where were these clients going when they did/didn't work right?

              1 Reply Last reply Reply Quote 0
              • F
                firefox
                last edited by

                Accesses the same sites - google.com, walla.co.il, ynet.co.il,
                I did not check more sites
                Because it's not my computer (do not have much access to it)
                It's my sister

                Update
                Two computers back to work correctly
                Only one causing problems (my sister computer)
                And there is not at all the sites

                1 Reply Last reply Reply Quote 0
                • KOMK
                  KOM
                  last edited by

                  It could be that for the other computers, someone added the pfSense cert to the list of Trusted certificates.

                  1 Reply Last reply Reply Quote 0
                  • F
                    firefox
                    last edited by

                    how can i check if certificates is pfsense ?

                    two computer use ubuntu and firefox are ok
                    one computer use win xp and crome or iexplorer not ok          <–-------- problem computer
                    one computer use win7 and firefox is ok

                    1 Reply Last reply Reply Quote 0
                    • KOMK
                      KOM
                      last edited by

                      Run IE and go to Options - Content - Certificates.  Look for a cert from either pfSense or Electric Sheep Fencing (ESF).

                      1 Reply Last reply Reply Quote 0
                      • F
                        firefox
                        last edited by

                        I checked all computers (5 computers)

                        The certificate does not appear in any of them

                        1 Reply Last reply Reply Quote 0
                        • KOMK
                          KOM
                          last edited by

                          Well then, I don't know what to tell you.  You have one computer with a problem.  I doubt it's pfSense or Squid.  The one computer that has the problem is so old, it may not have the proper Root Certificate updates from Microsoft.  Chrome and IE share the same certificate store, whereas Firefox uses its own.  Try running Firefox on the XP box and see if that is any different.

                          1 Reply Last reply Reply Quote 0
                          • F
                            firefox
                            last edited by

                            Try running Firefox on the XP box and see if that is any different.

                            I'll try

                            Clarification
                            the computer is old old
                            the operating system is old

                            Update from yesterday
                            But it was already too late and I turned off my computer

                            The computer in question was one hour ahead

                            I set the computer time and date accurate
                            And now

                            Only two sites inaccessible
                            And show the same message as before

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.