Squid Guard basic setup

mzaknoen

Hi all,

I've done a bit of research on Squid Guard and it seems like a good solution for what I am looking for:

Basic "NSFW" website blocking. Some of the tutorials online showed how to set up cache, to optimize downloads across the LAN for others when exact data has been previously downloaded - but that's not a feature I really need at the moment.

Could I simply install the Squid Guard package, and add the "shalla secure services"

And deny the categories I want to block?

We have a DNS server and I thought I saw in one of the guides that DNS resolver has to be enabled with 127.0.0.0 as the IP so that devices look to the firewall for what traffic is allowed / denied but I am hesitant to do this without having a better understanding of what each change entails.

Can someone point me to the direction of a noob guide or provide barebones instructions / advise for simply blacklisting the categories in the "shalla" list once it is added?

Thanks

usaiat

I'm also after this solution and any pointers/guide etc will be really appreciated. Ive got DNS resolver disabled and have DNS forwarder enabled with two interface enabled for CP.

LAN - 192.168.2.1/24
Guest- 192.168.3.1/24

KOM

Have you watched the Hangout video?

Squid, SquidGuard, and Lightsquid on pfSense 2.4

usaiat

@KOM Yes, Ive seen that video.Almost finish the video, but haven't seen/heard anything about about CP with squid/suidGuard.

I install this last night using my own notes I made out of certain videos I watched - https://www.youtube.com/watch?v=e6J2yRYNoKs&t=302s

The CP page pops up and when I enter the credential it goes to this error - captive portal request denied by pfsense proxy: 403 forbidden

KOM

Sorry, my question was for OP. I've never used captive portal so I can't help you there. I assume you've posted your issue in the Captive Portal forum? Maybe someone there can help.

Also, if you haven't already, take a look at these as they might have something for you.

Captive Portal on pfSense 2.3/2.4

Advanced Captive Portal on pfSense

usaiat

Yay !!! Got this working. Have to add rule to both interface to allow proxy port. Users will log in using CP credentials then access go through squidGuard