Squid Reverse Proxy - Firewall rules ?

[Watchix]

Hello,

I've some virtualized PFsense in front of some public servers for my company and many customers.

I did't find how to allow/block an IP / Network / GeoIP ... for a mapping with Squid or PFsense.
Servers in back only sees the LAN IP of the PFsense and not the real source public IP. (normal :-) )

In example i want these mappings :

• https://web1.netgate.com => https://10.0.0.1/test (only reachable from Internet by x.x.x.x and Japan)
• https://web.netgate.com => https://10.0.0.2/prod (Denied from y.y.y.y and RPDC / China | Allowed from all Internet)

PFsense : 2.5.2
Squid : 0.4.45_5

Regards,

Michel.

[Watchix]

Hello,

I did a sheme to see what rules i'm trying to do.