Is it possible to block unwanted websites with PfSense (with Squid + ACLs)?

Gaucho · Oct 3, 2007, 3:24 PM

Hello all,

I'm about to install PfSense as a firewall/proxy for a small LAN and I need also to block unwanted sites (porn, violence, racist, this kind of stuff).

I didn't find anything regarding this on the FEATURES of PfSense (specially implementing Squid + ACLs, wich is the easiest way to do IMO).

Please let me know if this is possible, this is crucial for me, and how to do it.

Thanks in advance,
Gaucho (from Brasil :-)

Cry Havok · Oct 3, 2007, 10:09 PM

Yes - see the Access Control tab of the Squid configuration.

Gaucho · Oct 3, 2007, 10:39 PM

I installed it on a MS Virtual PC, run the web configuration, but couldn't find it. Also could not find it on the DOCS link (neither in TUTORIALS link).

Where's the Access Control tab?

I'm runnign 1.2RC2 version.

Thanks! :-)

dhipo · Oct 3, 2007, 10:58 PM

the better way is use squidguard+squid …

Gaucho · Oct 4, 2007, 12:12 AM

@dhipo:

the better way is use squidguard+squid …

With PfSense? If yes, how?

Thanks! :-)

Cry Havok · Oct 4, 2007, 8:57 AM

Have you installed the squid package? Until you do so you won't find any configuration options for it ;)

Gaucho · Oct 4, 2007, 8:47 PM

@Cry:

Have you installed the squid package? Until you do so you won't find any configuration options for it ;)

No, I have not yet.

How do I install it? Please teach me, I'm a noob trying to learn PfSense :)

Thanks!

GruensFroeschli · Oct 5, 2007, 6:38 AM

You need to use the full install not embedded.
Go to packages and select the package you want to install.
If you're running squid you should have enought RAM.

Cry Havok · Oct 5, 2007, 8:16 AM

@Gaucho:

No, I have not yet.

How do I install it? Please teach me, I'm a noob trying to learn PfSense :)

I suggest you take the time to look at all the menu options available from the GUI.

Gaucho · Oct 5, 2007, 2:36 PM

@GruensFroeschli:

You need to use the full install not embedded.
Go to packages and select the package you want to install.
If you're running squid you should have enought RAM.

Looks like I'm doing something wrong….

What I did:

burn the Live .iso image on a CD
boot from it
follow the standard install
reboot, open web browser... but on the menus there is no option to donwload/add packages...

Where do I select these packages?

Gaucho · Oct 5, 2007, 2:39 PM

@Cry:

@Gaucho:

No, I have not yet.

How do I install it? Please teach me, I'm a noob trying to learn PfSense :)

I suggest you take the time to look at all the menu options available from the GUI.

I did it, clicked on all options on all menus and sub-menus. There's definetly no Squid option to install/add/download, etc…

aaron · Oct 5, 2007, 7:47 PM

It's the Packages option under the System menu…

Gaucho · Oct 5, 2007, 11:21 PM

@aaron:

It's the Packages option under the System menu…

I do not see this option ther. Under system menu, I only see:

Advanced
Firmware
General Setup
Setup Wizard
Static Routes

What am I doing wrong?

GruensFroeschli · Oct 6, 2007, 10:58 AM

to quote myself:
@GruensFroeschli:

You need to use the full install not embedded.

Gaucho · Oct 6, 2007, 7:34 PM

@GruensFroeschli:

to quote myself:
@GruensFroeschli:

You need to use the full install not embedded.

OK ok ok… and HOW do I install the 'full' version? Like I said above, I donwloaded and burned the LiveCD .iso file, is this the correct one?

If not, where's the FULL .iso? I only see Live, Embedded and Development versions on 'Download' section...

Please help!

GruensFroeschli · Oct 6, 2007, 11:02 PM

If you install from the life version you can select what kernel you want to install.
To run the full install you have to install on a harddisk and not on a CF-card.

Cry Havok · Oct 7, 2007, 7:20 PM

Well, that sounds like you did install the full version. As a double check - what's the contents of /etc/platform?

I've never seen the Packages menu missing from a full install - I've seen it empty when the pfsense.com server couldn't be contacted.

dhipo · Oct 8, 2007, 3:35 PM

get it on snapshot in
http://snapshots.pfsense.com/FreeBSD6/RELENG_1_2/iso/pfSense.iso.gz

burn CD
boot with cd
install on Hard disl with 99 option on menu..

reboot
look packages on system menu, install squid ,
to install squidguaard look at forum topic http://forum.pfsense.org/index.php/topic,3111.0.html
andfollow the way ..

JackTripper · Oct 11, 2007, 11:44 AM

@Gaucho:

@GruensFroeschli:

You need to use the full install not embedded.

OK ok ok… and HOW do I install the 'full' version? Like I said above, I donwloaded and burned the LiveCD .iso file, is this the correct one?

If not, where's the FULL .iso? I only see Live, Embedded and Development versions on 'Download' section...

i don't understand it either. The only download choices are:
LiveCD
Embedded
Developers Edition

You are being told you need to download the Full version and not the Embedded one. Ignoring the fact that the LiveCD and Embedded both point to the same download location, there is no Full version.

What's even more infurating is the note on the download page: "If you are not sure which version is right for you, visit this primer wiki". But that page "doesn't exist yet". And you're not allowed to create it because you don't have a login. And you can't create a login "because of stupid spammers".

It's a debacle from top to bottom.

cmb · Oct 12, 2007, 3:03 AM

Yeah the web sites are a mess. They're improving, and the main site will be replaced in its entirety soon.

The full version is installed from the Live CD. You need:
http://pfsense.untouchable.net/downloads/pfSense-1.2-RC2-LiveCD-Installer.iso.gz