Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Proxy exposed to the internet (Pandora - Access Denied)

    Scheduled Pinned Locked Moved Cache/Proxy
    5 Posts 2 Posters 813 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • L
      lmanes
      last edited by

      Hi guys,

      2.4.2-RELEASE (amd64)

      I opened my squid/proxy port 3128 to the internet so that I can listen to Pandora.com while I travel abroad.
      I am using simple Local authentication with username/password and I also tried no authentication (for test only) and I keep getting the Access Denied squid error.

      I have "Allow Users on Interface" selected on the General settings but nay nay…
      It requests the username and password just fine but then, Access Denied for every page I request.

      Any thoughts?

      Thanks ALL

      Leo Manes

      1 Reply Last reply Reply Quote 0
      • C
        C0RR0SIVE
        last edited by

        Are you using a mobile device to listen to Pandora, or a computer?  Not all apps on mobile devices will respect proxy settings.

        Also, can you confirm you are in fact going through your proxy server?

        Why not just get a VPN?

        1 Reply Last reply Reply Quote 0
        • L
          lmanes
          last edited by

          Thanks for your reply Corrosive,

          Pandora.com is just an example. Any http or https will display the error message.

          Attached you will find a screen grab showing the proxy login page and the Access Denied page.

          All my other services work.. vpn, samba, webserver and others.

          Pandora was just an excuse for me to open port 3128 to the external world. It is more about learning more about pfsense. Specialy because I could not find a single post talking about opening squid to the outside world… like a public proxy.

          Regards
          Leo Manes

          scr1.jpg_thumb
          scr1.jpg

          1 Reply Last reply Reply Quote 0
          • C
            C0RR0SIVE
            last edited by

            Well, the fact you are getting the SQUID error page is a good thing…

            How do you have SQUID configured exactly?
            Have you tied SQUID to your WAN interface? (Now that I think about it, you probably have...)

            1 Reply Last reply Reply Quote 0
            • L
              lmanes
              last edited by

              An update…

              I connected a laptop to the WAN side segment and I was able to connect to the proxy. So seems the problem is the router port forward... it is like it needs another port besides 3128 to connect.

              Leo Manes

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.