Squid, optionally?
-
I am running pfSense TESTING-SNAPSHOT-02-19-06-pfSense with Squid and it is working great. Is it possible to have some clients access the Internet through Squid and at the same time have other clients access the Internet without Squid?
-
yes,
then you must disable transperend proxy
and set the proxy in ie of firefox etc
for those clients that want to use the proxy -
You can use transparent proxy just for some users by setting custom firewall rules. Just redirect connections from the IPs you want to pass through the proxy to port 80 to 127.0.0.1:3128.
-
You can also configure, in squid.conf, which clients, ranges of IP addresses or which authenticated clients should not access the cache and should be allowed to go straight through. Check out the squid documentation.
-
You can use transparent proxy just for some users by setting custom firewall rules. Just redirect connections from the IPs you want to pass through the proxy to port 80 to 127.0.0.1:3128.
Sorry, but how do I redirect by setting custom firewall redirect rules? I cant find it.
-
Create a portforward at firewall>nat, portforward tab. choose LAN or OPTx interface instead of WAN, depending at which interface your clients are coming from.