PFsense as http Proxy only

bruor

I would like to install pfsense into an existing network and use it as a web proxy.

I would like to just be able to change default gateway assignemend for the workstations so i can use squid in transparent mode.

I have attempted to configure this with 2 interfaces, but it does not seem to grab and proxy web traffic.

Can i get away with doing this using a single interface (router on a stick) configuration?

Thanks in advance!

Cry Havok

It has to be the gateway for the transparent proxy to work.

bruor

I had it as the gateway. here is a detailed configuration
pfsense
Lan 172.16.0.5/16
gateway 172.16.0.3/16
Wan 172.16.0.6/16

computer:
IP 172.16.5.254
GW 172.16.0.5

when testing internet access thorough this device, none of the whitelist/blacklist settings would take place.

Cry Havok

And you've configured it as a transparent proxy, and none of the browsers have a proxy configured?

Is squid installed?

bruor

yes i have verified that squid is installed, and that the workstations are configured correctly. I will need to re-install pfsense to do further testing as i tried to force all traffic for these subnets to use the wan interface.

jahonix

@bruor:

pfsense
Lan 172.16.0.5/16
gateway 172.16.0.3/16
Wan 172.16.0.6/16

How is pfSense supposed to route (through its transparent proxy) with all IPs in the same subnet?
IMHO pfSense's WAN and gateway have to be on a different subnet.

jahonix

@bruor:

Can i get away with doing this using a single interface (router on a stick) configuration?

Physically yes, logically not.
You would have to use VLANs which logically makes it different interfaces and subnets.

bruor

I was hoping that when it caught a packet destined for another network on port 80, that it would harness the request and use its wan interface configuration to fetch the desired content.

I will post any results i can find to this thread

bruor

I have gotten this to work by configuring the following.

LAN: 172.16.0.5/16
WAN: 172.16.0.6/16
Gateway: (your wan gateway) 172.16.0.2

install squid, select transparent mode.

the issues I was having were related to windows. when i added the gateway via the TCP/IP properties, it added a second gateway with a higher metric. this made things a bit difficult to test, once the pfsense was set as the lowest metric gateway, it started to proxy traffic for me.

I hope this saves someone else a bit of time!