Guide to filtering web content (http and https) with pfsense 2.3
-
@aGeekhere when using manual for firefox proxy IP:192.168.0.1 and port :3128 , then the connection issues
-
for firefox there is a bug where if you set it to use system proxy settings it will not connect https://bugzilla.mozilla.org/show_bug.cgi?id=621429
manually configure firefox to use the proxy
-
@aGeekhere i have set to use manual for IP 192.168.0.1 and port :3128, and tick use this proxy for all protocol but the connection issues also.
-
@aGeekhere I know this is an old topic and all, but I just wanted to express my deepest gratitude to you ageekhere, I have been struggling with squid, pfsense, and trying to get crap to just freaking work for a few weeks to a month now, I am FAR from the most knowledgeable or experienced in this crap, but this is what I'm passionate about as a hobby of mine (hopefully career in the not so far off span of time) and all of my knowledge is self taught, trial and error, a handful of catastrophes (NOTE A POWER SUPPLY SHOULD NEVER, EVER, SOUND LIKE AN ARC WELDER, IF IT DOES, YOU JUST NUKED IT, TAKE MY WORD FOR THIS ONE XD) and a LOT of hard earned money spend in this hobby of mine, to the degree you'd think illicit substances would be cost saving!!! jokes aside though (seriously, bad joke, but I can't help myself because I spend so much money on this hobby its sickening/nauseating to think about!) I do this stuff for fun, and out of all the guides I have followed so far, yours has a HANDFUL of points that I had missed in my attempts to set up wpad/squid/all of this stuff, and so far so good, so I just wanted to pop on here, resurrect an old thread, and say THANK YOU!
-
I still run this setup and everything is working fine, a lot of trial and error went into getting this to work.
Cloudflare's new 1.1.1.2 and 1.1.1.3 is a new thing that can be added to this setup
https://community.cloudflare.com/t/pfsense-and-1-1-1-3-not-blocking-adult-content/164747/10
they are still working on DoT for 1.1.1.3. -
Wow! Thanks for this amazing guide!
-
It has been a while since i made this guide, are people interested in having an updated version for 2026?
It would include- Setting up unofficial packages to install the WPAD package.
- Creating a detailed WPAD for ipv4 and ipv6
- Setting up a non transparent proxy with SSL
- Setting up squidguard for web filtering
- Setting up proxy web caching
- Enabling extra DNS web filtering using 1.1.1.3
Let me know if there is interest our there.
Never Fear, A Geek is Here!
-
@aGeekhere I for one would absolutely love that, mostly due to never quite getting squid with SSL_MITM to work right in a way that didn't break EVERYTHING and cause me to disable that feature, so, at least for me, that's an adamant absolute yes. even taking android and certificate pinning off the table, still never quite got that working right, mostly due to lack of REALLY knowing what I'm doing with any degree of confidence. mostly just "change this and see what happens" till I got things working.
-
@aGeekhere I really think it would be great if you could find the time to publish a full guide that can followed towards the stated goals. Such a setup is very difficult to create and would take A LOT of trial and error and error.
Here’s crossing my fingers for a guide
-
Ok i will put together a new detailed guide
