The ACL part you did I just added on GUI squid –> Access Control --> External Cache-Managers
There I added just an IP address of one of my VLAN interfaces (LAN site).

unfortunately, squid 3.x GUI does not have a 'External Cache-Managers ACL' under squid GUI –> ACLs

Or maybe I am just blind and cannot see it  :)

Then I will be prompted for username - which is admin - an my password myVerySecretMasswordForUserAdmin

Not sure but if you do not use any password then it could be possible for someone from your LAN to check the cachmgr.cgi which probably should not be possible.

On my network, pfSense webConfigurator is only accessible if you are in the "management" network… clients on the lan have to tunnel through VPN to access the management network and I am the only user allowed to get there... of course, I should probably set a password because "you never know"tm

I will look into it. Thanks.

-bu

I added this to the custom configuration on squid GUI:

cachemgr_passwd disable offline_toggle reconfigure shutdown;
cachemgr_passwd myVerySecretMasswordForUserAdmin all;

The ACL part you did I just added on GUI squid –> Access Control --> External Cache-Managers
There I added just an IP address of one of my VLAN interfaces (LAN site).

Then I will be prompted for username - which is admin - an my password myVerySecretMasswordForUserAdmin

Not sure but if you do not use any password then it could be possible for someone from your LAN to check the cachmgr.cgi which probably should not be possible.

PS:
I am using squid 2.x and pfsense 2.0.3

Check this post:

http://forum.pfsense.org/index.php?topic=67607.0

;)

Exolon you're a star! it works like a treat  ;D

I like this solution, I do not mind that the page won't be integrated into pfsense's webConfigurator. I use Bandwithd too, so it won't be that strange  ;)

Right now I cannot test it, but I will report back with the results tomorrow when I will try.

-bu

http://forum.pfsense.org/index.php?topic=67607.0

;)