Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Transparent Mode with User Validation

    Scheduled Pinned Locked Moved Cache/Proxy
    7 Posts 3 Posters 1.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S Offline
      Softwhere-IT
      last edited by

      Hi,

      Start off with what we got: pfsense 2.2.4 with Squid 4.3.9 and Squidguard 1.9.15. All works with failover and Squid set up as transparent.
      there are 4 LAN connections 2x Internet connection with Failover, 1x LAN, 1x WFi

      Our question: how can we set that  the proxy settings are passed on to all devices, regardless of Device and/or Browser, (transparent works), 1 Internet domain should be available without User Validation, any other Internet sites would require a logon.

      Thanks for any support. Just didn't find anything.

      Jeff

      1 Reply Last reply Reply Quote 0
      • D Offline
        doktornotor Banned
        last edited by

        @Softwhere-IT:

        Just didn't find anything.

        Probably because it's complete nonsense.

        http://wiki.squid-cache.org/Features/Authentication#Authentication_in_interception_and_transparent_modes
        http://wiki.squid-cache.org/SquidFaq/InterceptionProxy#Why_can.27t_I_use_authentication_together_with_interception_proxying.3F

        1 Reply Last reply Reply Quote 0
        • S Offline
          Softwhere-IT
          last edited by

          Hi,

          My question was how can we do what the transparent does, without using the transparent mode? Have tried with WPAD but not working yet.
          Is this a proper option, or is there a better way?

          BTW Thanks for the links, helpful info for authentication when we get that far.

          Jeff

          1 Reply Last reply Reply Quote 0
          • D Offline
            doktornotor Banned
            last edited by

            @Softwhere-IT:

            My question was how can we do what the transparent does, without using the transparent mode?

            Once again, no.

            1 Reply Last reply Reply Quote 0
            • S Offline
              Softwhere-IT
              last edited by

              WPAD not either?

              1 Reply Last reply Reply Quote 0
              • KOMK Offline
                KOM
                last edited by

                WPAD will help most clients discover your proxy server on their own.  Transparent mode with Squid is crap but seductive so most users flock to it before finding out all the problems with that mode.  You should either have your users manually set the proxy on their device, or use WPAD since it's your only other option.  Everythint under the Sun seems to work with WPAD with the exception of Android.

                1 Reply Last reply Reply Quote 0
                • S Offline
                  Softwhere-IT
                  last edited by

                  Thanks KOM for the info, we had to put the Project on ice for a time, other things :( but Will be starting up again soon. We will be looking for sending Proxy settings automatically or maybe have to set up Website on the Proxy to Redirect.
                  We just have a WiFi and LAN that we want to provide Internet using a Login with mulitple (2) Internet connections. that was our purpose in choosing pfsense.
                  Thanks again and any suggestions are appreciated.

                  The biggest room in the world is the room for improvement.

                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post
                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.