Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Unofficial WPAD package for pfSense software

    Scheduled Pinned Locked Moved Cache/Proxy
    51 Posts 18 Posters 15.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      Bigdaddy168
      last edited by

      @marcelloc:

      @Bigdaddy168:

      Nice! Can you make this package official?

      I can submit a pull request to oficial repo. But need core team review to get merged.

      That would be great!

      1 Reply Last reply Reply Quote 0
      • M
        muhammet
        last edited by

        Thanks, great !

        1 Reply Last reply Reply Quote 0
        • W
          warmadmax
          last edited by

          any news on if this will make it to official package status?

          1 Reply Last reply Reply Quote 0
          • X
            xchaz
            last edited by

            Hi,

            squid+WPAD bypasses my captive portal. Is there any other way?

            Thanks,
            Chaz

            1 Reply Last reply Reply Quote 0
            • A
              asterix
              last edited by

              @marcelloc:

              @Bigdaddy168:

              Nice! Can you make this package official?

              I can submit a pull request to oficial repo. But need core team review to get merged.

              Great work here marcelloc. Finally I have wpad hosted with webconfigurator on https.

              Any update on the pull request to official repo?

              1 Reply Last reply Reply Quote 0
              • V
                vicpome
                last edited by

                Hi, Marcelloc , Is there a step-by-step manual or instuctions for config the GUI of the "wpad" after it is installed?.
                Thanks.

                C 1 Reply Last reply Reply Quote 0
                • C
                  chicago_cs @vicpome
                  last edited by

                  @vicpome , check out this topic

                  V 1 Reply Last reply Reply Quote 0
                  • kklouzalK
                    kklouzal
                    last edited by kklouzal

                    @marcelloc said in Unofficial WPAD package for pfSense software:

                    fetch -q -o /usr/local/etc/pkg/repos/Unofficial.conf https://raw.githubusercontent.com/marcelloc/Unofficial-pfSense-packages/master/Unofficial.24.conf

                    I logged into SSH, opened Shell, pasted in the 2.4 unofficial repo command and hit enter.

                    Now when I go to my package manager inside web gui there are no available packages being listed, none at all.

                    Going to Diagnostics->Edit File and saving "/usr/local/etc/pkg/repos/Unofficial.conf" as a blank file brings my official packages back thankfully.

                    EDIT:

                    Solved it, a little searching found that the github repo supplies a patch you must apply so PfSense can display unofficial repos. Check the main page on the github page for more info.

                    V 1 Reply Last reply Reply Quote 0
                    • KOMK
                      KOM
                      last edited by

                      That's a lot of hassle with the potential to break pfSense just to configure WPAD, which is simple to configure by hand.

                      V 1 Reply Last reply Reply Quote 0
                      • V
                        vicpome @chicago_cs
                        last edited by

                        @chicago_cs Agradezco tu respuesta, yo ya instale el pack , pero queria saber cuales son los pasos que siguen despues del 7, o sea como completar el "Gui" ya que no me funciona.
                        Gracias.

                        1 Reply Last reply Reply Quote 0
                        • V
                          vielfede @KOM
                          last edited by

                          @KOM if you use FW as wpad server, It is to avoid web interface protocol change, that's a secuirty issue

                          KOMK 1 Reply Last reply Reply Quote 0
                          • V
                            vielfede @kklouzal
                            last edited by

                            @kklouzal said in Unofficial WPAD package for pfSense software:

                            I logged into SSH, opened Shell, pasted in the 2.4 unofficial repo command and hit enter.

                            Now when I go to my package manager inside web gui there are no available packages being listed, none at all.

                            Going to Diagnostics->Edit File and saving "/usr/local/etc/pkg/repos/Unofficial.conf" as a blank file brings my official packages back thankfully.

                            EDIT:

                            Solved it, a little searching found that the github repo supplies a patch you must apply so PfSense can display unofficial repos. Check the main page on the github page for more info.

                            Just to clarify 2.4.4 Install

                            1. System=>Pakages=>Available packages=>System_Patches=>install
                            2. System=>Patches=>add new patch=>244_unofficial_packages_list.patch (download it from https://github.com/marcelloc/Unofficial-pfSense-packages)
                            3. save
                            4. Apply (patch)
                            fetch -q -o /usr/local/etc/pkg/repos/Unofficial.conf https://raw.githubusercontent.com/marcelloc/Unofficial-pfSense-packages/master/Unofficial.24.conf
                            
                            
                            1. System=>Pakages=>Available packages=>WPAD=>install
                            2. configure wpad from Services=>WPAD
                            1 Reply Last reply Reply Quote 0
                            • KOMK
                              KOM @vielfede
                              last edited by

                              @vielfede Sorry, what? I don't understand what you mean. There is no inherent security issue using the firewall as the WPAD source. You're already running a web server on it. Serving up wpad.dat and proxy.pac from it doesn't make it insecure.

                              V 1 Reply Last reply Reply Quote 0
                              • V
                                vielfede @KOM
                                last edited by vielfede

                                @KOM said in Unofficial WPAD package for pfSense software:

                                @vielfede Sorry, what? I don't understand what you mean. There is no inherent security issue using the firewall as the WPAD source. You're already running a web server on it. Serving up wpad.dat and proxy.pac from it doesn't make it insecure.

                                I think that If you configure WPAD by hand, you have to switch fw web interface from https to http and this is an issue. Or am I wrong?

                                1 Reply Last reply Reply Quote 0
                                • KOMK
                                  KOM
                                  last edited by

                                  OK, now I see what you mean. No, you're right that WPAD needs an HTTP server. I don't see how a WPAD package gets around that unless it's installing its own http server.

                                  1 Reply Last reply Reply Quote 0
                                  • V
                                    vielfede @marcelloc
                                    last edited by

                                    @Kom, In the first post there is the answer...

                                    @marcelloc said in Unofficial WPAD package for pfSense software:

                                    Here are install instructions for UNOFFICIAL wpad package for pfSense(R) software 2.3.x

                                    It's based on forum tutorials to configure a second nginx instance to host pac file(s) in http and leave gui on https.
                                    .....

                                    1 Reply Last reply Reply Quote 0
                                    • A
                                      aGeekhere @marcelloc
                                      last edited by aGeekhere

                                      @marcelloc
                                      I have installed the WPAD package, added the DNS host overrides in the DNS Resolver

                                      wpad pfsensedomain.local 192.168.1.1 wpad
                                      

                                      added the DHCP additional BOOTP.

                                      number: 252 type: string value: "http://192.168.1.1/wpad.dat"
                                      number: 252 type: string value: "http://192.168.1.1/wpad.da"
                                      number: 252 type: string value: "http://192.168.1.1/proxy.pac"
                                      

                                      pfsense webConfigurator is set to https with webGUI redirect selected

                                      However I am having issues downloading the wpad file

                                      http://192.168.1.1/proxy.pac This site can’t be reached
                                      https://192.168.1.1/proxy.pac 404 Not Found nginx
                                      http://192.168.1.1/wpad0/proxy.pac This site can’t be reached
                                      https://192.168.1.1/wpad0/proxy.pac the pac file downloads
                                      

                                      I seem to only be able to download the proxy.pac with

                                      https://192.168.1.1/wpad0/proxy.pac
                                      

                                      Am i missing something?

                                      UPDATE: I had the wpad listen port set to the proxy port 3128, changing it to port 80 now downloads the file

                                      Never Fear, A Geek is Here!

                                      1 Reply Last reply Reply Quote 0
                                      • A aGeekhere referenced this topic on
                                      • A aGeekhere referenced this topic on
                                      • First post
                                        Last post
                                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.