Nat reflection dont work with squid

edicastro

my network topology is this:
alt text

I has a internal webserver and I access by external name https://www.site.com. work normaly without squid. but with squid my LAN network dont access the web server. with squid just open the webgui of psense when accessing https://www.site.com. apparently NAT Reflection dont work with squid. how to resolv?

DaddyGo

@edicastro said in Nat reflection dont work with squid:

NAT Reflection dont work with squid

Hi,

Listen, this might help (transparent mode):
https://forum.netgate.com/topic/39674/squid-transparent-proxy-breaks-1-1-nat-nat-reflection

edicastro

@DaddyGo work with combination: nat port foward + dns override + squid by pass . PFsense need improve your algorithm for more simple solutions. pfsense + squid is much problematic

DaddyGo

@edicastro said in Nat reflection dont work with squid:

pfsense + squid is much problematic

Yeah,....

basically pfSense is well configurable, Squid is just an option
Squid is hard to configure everywhere these days, just think of evolving HTTPS