Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Website Access Problems

    Scheduled Pinned Locked Moved Cache/Proxy
    5 Posts 2 Posters 770 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      fcosta
      last edited by

      Good Morning

      I'm using proxy yes when accessing a site https://dte.sefaz.rs.gov.br/portal/login/index , the site assembles normally, when I try to enter the company's e-CNPJ, it downloads a signature and runs normally and loops to assemble the second window which is the digital certificate screen.
      I searched on the website of sefaz lol,
      had to put the addresses in the proxy
      https://secweb.procergs.com.br
      https://assinador.ac.rs.gov.br
      https://www.ac.rs.gov.br
      *.globalsign.com
      *.assinador.ac.rs.gov.br
      http://crl.globalsign.net
      https://www.alphassl.com
      http://ocsp.globalsign.com
      I put the addresses above to release and nothing and I verified that there is an address that was giving an error in the proxy cache wss://assinador.ac.rs.gov.br:8887, I put TCP destination port allowed and nothing, as also in Firewall. If I get a notebook and access it from outside my network it works. Do you have any suggestions I can make.

      perikoP 1 Reply Last reply Reply Quote 0
      • perikoP
        periko @fcosta
        last edited by

        @fcosta are u running squid in MITM transparent mode or none-transparent mode?
        Regards!!!

        Necesitan Soporte de Pfsense en México?/Need Pfsense Support in Mexico?
        www.bajaopensolutions.com
        https://www.facebook.com/BajaOpenSolutions
        Quieres aprender PfSense, visita mi canal de youtube:
        https://www.youtube.com/c/PedroMorenoBOS

        F 1 Reply Last reply Reply Quote 0
        • F
          fcosta @periko
          last edited by

          @periko Good Morning

          I'm running squid normally and transparent mode is disabled.

          perikoP 1 Reply Last reply Reply Quote 0
          • perikoP
            periko @fcosta
            last edited by

            @fcosta can u show your whitelist please...

            Necesitan Soporte de Pfsense en México?/Need Pfsense Support in Mexico?
            www.bajaopensolutions.com
            https://www.facebook.com/BajaOpenSolutions
            Quieres aprender PfSense, visita mi canal de youtube:
            https://www.youtube.com/c/PedroMorenoBOS

            F 1 Reply Last reply Reply Quote 0
            • F
              fcosta @periko
              last edited by

              @periko Good morning, My whitelist I put https://secweb.procergs.com.br
              https://assinador.ac.rs.gov.br
              https://www.ac.rs.gov.br
              http://crl.globalsign.net
              https://www.alphassl.com
              http://ocsp.globalsign.com

              These were the addresses I put.

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.