pfSense for Squid with only one interface

[Rico]

Hi,

I want to replace my old squid CentOS box (in production for 600 users) with pfSense as base system and the squid package.
Because I like to separate things squid should not reside on my edge pfSense. There is one very beefy box with VMware vSphere 6.5 where I'd like to install pfSense only for squid.
My edge pfSense already got some DMZ network where the VM pfSense with squid should be connected to. So I would install this VM pfSense with only one vNIC which would then be the WAN interface from pfSense view.
Now before I do the test setup...any traps I can step into because of only having one interface you guys can think of?
Any other suggestions?

Thanks for reading.

-Rico

[stephenw10]

That should work fine.

When you install pfSense with only one interface the default allow rule get placed on it and you will be able to reach the GUI etc on that interface by default.
The only thing to watch out for is if you ever add another interface the default rules will move to that and potentially lock you out.

Steve

[Rico]

Thanks for your answer stephenw10.
I took a deeper look into the pfSense squid package and now I'm not really sure if I could/should continue with this project because of some limitations.
e.g. non editable

acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901  3128 3129 1025-65535

is a no go for my environment.

-Rico

[stephenw10]

Because the proxy allows traffic on those ports?

You can always block it on the firewall.

Steve