Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Problem:Bridge + Squid+SquidGuard

    Scheduled Pinned Locked Moved General pfSense Questions
    2 Posts 2 Posters 1.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      kysiek
      last edited by

      I've problem with pfsense in mode bridge + squid +SquidGuard.
      I'be 2 itwrfaces: LAN and WAN. I set Interfaces->assign->bridge

      Firewall, QOS are OK.

      I installed Squid:
      http://doc.pfsense.org/index.php/Setup_Squid_as_a_Transparent_Proxy
      but squid does not work correct.

      I guess I have to redirect ports

      1.rdr $LAN inet proto tcp from any to any port 80 -> 127.0.0.1 port 3128
      2.pass in quick on $LAN route-to lo0 inet proto tcp from any to 127.0.0.1 port 3128 keep state

      Rdr is Port Redirect
      Firewall->NAT->port redirect
      But second rule? how i can set this?

      1 Reply Last reply Reply Quote 0
      • L
        lsense
        last edited by

        old topic..anyway..

        I'm facing the same problem. you can't set that second rule via web gui but I put it in "by hand":
        I added the rule in /tmp/rules.debug and then pfctl -f /tmp/rules.debug

        so the rules I have now are :

        1. rdr on bridge0 inet proto tcp from any to any port = http -> 127.0.0.1 port 3128
        2. pass in log quick on bridge0 route-to lo0 inet proto tcp from any to 127.0.0.1 port = 3128 flags S/SA keep state

        but it's not working!

        bridge0 = (em1, em2)
        client is on em1 side
        I can see
        IP clientip.3002 > 127.0.0.1.3128: Flags SYN
        on the other side of the bridge member em2. no traffic on lo0 interface.

        so route-to lo0 dosn't work.

        or better.. it's the rest of the rule that doesn't work, if I place the (wrong and temporary) rules like:
        this one: pass in log quick on bridge0 route-to lo0
        or even: pass in log quick on bridge0 route-to lo0 inet proto udp

        then I can see traffic on lo0.

        I tested on 2.0.3 and 2.1 beta1.
        it's been reported here long time ago :
        pfSense bug #1620
        http://redmine.pfsense.org/issues/1620 there's

        on FreeBSD 9.1 it works fine.

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.