Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Redirect Traffic from-to external proxy !

    Scheduled Pinned Locked Moved NAT
    6 Posts 4 Posters 5.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      salahts
      last edited by

      Dear all, Good day

      firstly i have to explain the situation, on my office i got the internet through explicit proxy (MS TMG 2010) that is mean i should set the proxy in my browser settings and other apps to access the internet (viber hasn't proxy setting) .
      i thinking if i can put pfsense box between the explicit proxy and my network then let pfsense bypassing the proxy like this :

      explicit proxy (tmg2010)10.176.8.1:8080 ====>Wan 10.176.8.0/22(Pfsense box with transparent squid port 3128) Lan 192.168.1.0/24 ====> My network (clients get the internet transparently from port 3128) .

      or by second scenario using pfsense's firewall and NAT redirection from 10.176.8.1:8080 to pfsense box then to my network .
      in shourt i want let pfsense convert the external explicit proxy to local transparent proxy to get internet without modify my applications settings, is this possible and how ?.

      thank you for help

      1 Reply Last reply Reply Quote 0
      • M
        muswellhillbilly
        last edited by

        If I understand you correctly (you lost me completely with "viber hasn't proxy setting"), you want to redirectly your web traffic from your LAN via an external proxy server (10.176.8.1:8080) without having to amend the proxy settings on the browsers running from your LAN.

        If that's so, your best bet would be to install the Squid package on your firewall and run this as a transparent proxy from your LAN. Just configure Squid to treat the 10.176.8.1 server as it's upstream proxy, and your LAN users will be directed to the TMG without touching any of your browser settings.

        T 1 Reply Last reply Reply Quote 0
        • S
          salahts
          last edited by

          Dear muswellhillbilly

          Thank you for your help, regarding viber i mean there is no proxy option to configure such as skype for example, so i installed squid3 and configured remote cache with external proxy it is working fine when visit http websites but https websites and viber not working, what I missed ? should i use firewall rule ? help me please

          1 Reply Last reply Reply Quote 0
          • M
            muswellhillbilly
            last edited by

            You have to configure Squid for SSL:

            https://forum.pfsense.org/index.php?topic=72528.0

            1 Reply Last reply Reply Quote 0
            • T
              tigs @muswellhillbilly
              last edited by

              @muswellhillbilly said in Redirect Traffic from-to external proxy !:

              10.176.8.1

              I know this is an old thread. I find it is exactly what I am trying to accomplish. Is there any detail instruction to this? thanks

              W 1 Reply Last reply Reply Quote 0
              • W
                wbptls @tigs
                last edited by wbptls

                @tigs redirect to proxy although this thread is very old,basics still stand the gui i guess has changed so you might need to figure out where exactly the settings apply.

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.