Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Allow internet access for device with ip that is in range of proxy

    Scheduled Pinned Locked Moved General pfSense Questions
    2 Posts 2 Posters 302 Views 2 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J Offline
      jucelio_rosa
      last edited by

      Good afternoon.
      In the company where I work we have the following scenario:

      Network with pfsense , with proxy enabled, where a range of ips is subordinated to the proxy.

      I have a router where I configured the wifi, I configured an ip range on the Lan, and on the wan I put an ip of the range destined for the proxy, but I want everyone connected to this router not to go through the proxy. I need them to have direct access to the internet.

      How should I make this happen?

      I went to:
      services/squid proxy server , in the option Bypass Proxy for These Source IPs and Bypass Proxy for Private Address Destination and I put the ip of the router's wan, but it was no use

      1 Reply Last reply Reply Quote 0
      • stephenw10S Offline
        stephenw10 Netgate Administrator
        last edited by

        That should be all that's required assuming the wifi router is NATing to it's WAN IP.

        If the proxy is in transparent mode make sure there are no stale states in pfSense after making the change.

        What you should really do though is use a VLAN from the router/AP to pfSense as a different interface that you can exclude from Squid. It may not be possible with your device.

        Steve

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.