Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    FW rule and NAT rule to redirect all traffic from port 80/443 to 3128 (squid proxy) is not working.

    Scheduled Pinned Locked Moved Firewalling
    2 Posts 2 Posters 1.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      ambrish
      last edited by

      Hello,
      I have 3 interfaces on my pfsense 1 LAN and 2 for WAN (WAN1 and WAN2 respectively). I have installed squid proxy and squid guard packages to setup proxy. Which is running fine when I manually insert firewall ip and 3128 port number (which is default port for squid proxy). As per my setup I cannot use trasperant proxy setting nor WPAD. So, want to set firewall rules to divert all traffic form port 80/443 to 3128. But it is now working out for me.
      I have added below rules under "Firewall > NAT > Port Forward"

      interface = LAN
      source = any
      source port = any
      Destination = any
      Destination port = 80
      Redirect port = 192.168.10.1 (which is my firewall ip)
      Redirect target port = 3128 (squid proxy port)

      And similar rule for 443 (HTTPS) port

      I have also added rule under "Firewall > Rules > LAN"

      Action = pass
      Interface = LAN
      Address = IPV4
      Protocol = TCP/UDP
      Source = Any
      source port = any
      Destination= This firewall (self)
      Destination Port Range = 3128

      FYI, I am using pfsense version 2.4.3-RELEASE.

      Thanks in advance to all

      JonathanLeeJ 1 Reply Last reply Reply Quote 0
      • JonathanLeeJ
        JonathanLee @ambrish
        last edited by JonathanLee

        @ambrish did you make a proxy certificate from squid and import it into the firewall.

        https://forum.netgate.com/topic/174070/squid-config-help-certificate-needed-issued-from-squid-proxy

        Make sure to upvote

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.