Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Issues with WPAD not working for me.

    Scheduled Pinned Locked Moved Cache/Proxy
    14 Posts 6 Posters 3.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C Offline
      C0RR0SIVE
      last edited by

      Where are you placing the wpad files..?  It's probably best to serve wpad files from a webserver other than the one on PFSense.

      1 Reply Last reply Reply Quote 0
      • A Offline
        aGeekhere
        last edited by

        function FindProxyForURL(url, host)
        {
            if (isPlainHostName(host) ||
                shExpMatch(host, "*.local") ||
                isInNet(dnsResolve(host), "192.168.1.1",  "255.255.255.0"))
                return "DIRECT";

        return "PROXY 192.168.1.1:3128";
        }

        try

        
        function FindProxyForURL(url, host) 
        { 
            if (isPlainHostName(host) ||
                shExpMatch(host, "*.local") ||
                isInNet(dnsResolve(host), "192.168.1.0",  "255.255.255.0"))
                return "DIRECT";
        
            return "PROXY 192.168.1.1:3128";
        } 
        
        

        have a read though here https://forum.pfsense.org/index.php?topic=112335.0

        Never Fear, A Geek is Here!

        1 Reply Last reply Reply Quote 0
        • C Offline
          cewjr9842
          last edited by

          Corrosive: I placed the files here :  /usr/local/www.

          aGeekHere: I am updating the files right now and will update you once its done.

          1 Reply Last reply Reply Quote 0
          • KOMK Offline
            KOM
            last edited by

            IIRC, WPAD doesn't work with HTTPS so if you're using pfSense to serve them then you should be running WebGUI in HTTP mode.

            1 Reply Last reply Reply Quote 0
            • C Offline
              cewjr9842
              last edited by

              @KOM:

              IIRC, WPAD doesn't work with HTTPS so if you're using pfSense to serve them then you should be running WebGUI in HTTP mode.

              i understand that. My WEBGUI is on port 8800/HTTP.

              it still is not working after going through you guide exactly given from Ageekhere.

              Also just FYI. I notice the files all are able to be downloaded in the browser, when i use my external windows 2016 webserver that I run on my VM, but im not sure of the configuration after that for http and https blocking in pfsense.
              i am wondering if its something going on somehwere else when trying to use pfsense as the webserver.

              1 Reply Last reply Reply Quote 0
              • C Offline
                cewjr9842
                last edited by

                one thing I am noticing is that when i go to http://192.168.1.30/wpad.dat in my browser it downloads, but when i access http://wpad/wpad.dat it seems to not work. Could this be an issue with DNS resolver?

                1 Reply Last reply Reply Quote 0
                • marcellocM Offline
                  marcelloc
                  last edited by

                  why do you need the host as wpad? on most setups, the wpad url includes the ip address.

                  Treinamentos de Elite: http://sys-squad.com

                  Help a community developer! ;D

                  1 Reply Last reply Reply Quote 0
                  • C Offline
                    cewjr9842
                    last edited by

                    I was following the steps in the guide created by ageekhere to be able to filter HTTPS traffic.

                    https://forum.pfsense.org/index.php?topic=112335.0

                    One thing that is happening is when i enable the DNS host override it will not block any sites.
                    I wanted to do the WPAD  so I would not have to do the MITM setup in the proxy. but at this point all I can get to work is the WPAD disabled with Transparent proxy enabled but of course its not blocking HTTPS traffic.

                    1 Reply Last reply Reply Quote 0
                    • A Offline
                      aGeekhere
                      last edited by

                      One thing that is happening is when i enable the DNS host override it will not block any sites.

                      The DNS override on it's own does not block sites.

                      but at this point all I can get to work is the WPAD disabled with Transparent proxy enabled

                      Did you follow all the steps? it should work.

                      Never Fear, A Geek is Here!

                      1 Reply Last reply Reply Quote 0
                      • C Offline
                        cewjr9842
                        last edited by

                        I followed every step to the T!

                        its crazy even when i try to browse to : http://192.168.1.1/wpad.dat or .da , or the proxy.pac file they are not downloading at all in chrome or IE.

                        1 Reply Last reply Reply Quote 0
                        • A Offline
                          aGeekhere
                          last edited by

                          Do you have auto configure enabled in internet options?

                          Never Fear, A Geek is Here!

                          1 Reply Last reply Reply Quote 0
                          • J Offline
                            jopeme
                            last edited by

                            Have you tried setting dns suffix on windows client?

                            1 Reply Last reply Reply Quote 0
                            • C Offline
                              cewjr9842
                              last edited by

                              I got it working now. I had to use the unofficial WPAD package marcelloc created using nginx and it actually started working as it should. Thanks fellows!

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.