Can't get YouTube to to work on iPad but works on iPhone when using Squidguard

Architekt

I have SquidGuard working great, except for one issue I can't track down. I for some reason can't post the name of my blacklist, it keeps marking my post as spam. It's from shallalist.

For target rules, I only chose "deny" for "blk_BL_adv" (advertising) and "blk_BL_spyware" (spyware) from the above list. The rest left at pass.

On my iPhone, I have no issues accessing and playing YouTube videos. However on my iPad, videos don't start, even ones without ads. So I went to the SquidGuard log tab to see if/what was being blocked. My iPad was saying "www.googleadservices.com:443" when I tried to use YouTube so I figured whatever I'll just whitelist that, google serves ads on their own domain. I did this by going to Target Categories, making a category called "whitelist" and entering "www.googleadservices.com" to the "Domain List". Hit save, and under Common ACL I chose "whitelist" for my new whitelist, making sure it's at the top above the other denies. Hit save, went to general settings, hit save then apply when that finished.

Back on the iPad I killed and restarted YouTube and tried to play the same video: it just stalls out. I can play the same one on my iPhone. I went back to the SquidGuard logs and nothing is being blocked when I do this. Nothing shows up at all for being blocked. So I don't know how to diagnose what/if any site may be preventing me from accessing YouTube on it. I looked at my pfsense firewall logs as well and don't see anything being blocked for the iPad.

If I disable using a proxy on my iPad, YouTube works fine. The weird thing is I didn't have to whitelist that with my iPhone even playing YouTube videos, but I did see that same domain pop up in the block list when I played said videos. I know SquidGuard is working on my iPhone because if I open say my Bloomberg news app, ads don't show and I do see the relevant domains appearing in SquidGuard's logs. I guess I'm confused as to why it wouldn't work on 1 device but does on others and furthermore that I'm not seeing anything being blocked in the logs.

Looking at my filter config, down at the bottom where it specifies the acl's, this is what it looks like:

	# 
	default  {
		pass whitelist !blk_BL_adv !blk_BL_spyware all
		redirect https://192.168.1.1:443/sgerror.php?url=403%20&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u
		log block.log
	}
}

I'm not sure if there's other configs that make sense to post, didn't want to post a giant wall of text of everything, so if there's a pertinent config I should post other than the above ACL entry let me know. Thanks.

aGeekhere

@architekt Did you set your iPad to use the proxy?
If you have a WPAD setup you can set it to auto detect proxy else you may need to manually set the proxy. If you do nothing than it will use the transparent proxy and that can causes issues like this.

So use WPAD (or manually set proxy on all devices) and on all pc/devices use auto detect proxy (that will use the WPAD) and have the transparent proxy to catch traffic that cannot use the WPAD.

hope this helps

Architekt

@ageekhere Ya, I have the iPad manually set to use the proxy. Same as the iPhone. Looking at them both side by side right now, they are the same settings. I don't have my squidguard set up to auto set a proxy as I don't want it to apply to everything, just specific devices that I opt in to. I really only use it on those 2 devices, sometimes my PC but I've found I don't really have a need on the PC as the only ads I see are in my browser and adblock plus + privacy badger do the job fine enough. They're both using the same IP (192.168.1.1) and port (3128), the defaults of squidguard. I guess I could try adding an explicit youtube allow whitelist and see if that changes anything....

Edit: I don't know why I didn't think to try whitelisting youtube in the first place. I did that and it solved the problem. Not sure why I get different behavior with just that one site on two different devices but whatever, problem solved.