Configure squid & squidguard/dansguardian with SSL $60

justsomeone

Many thanks, I'll give it a try tomorrow.

thecableguy

How did you go?

killmasta93

aGeekHere i know this post is old but im curious about the certificate. In your post it says install it on all the computers but what about on the phones? Would I still get that certificate error? I haven't tried this just because I would need to install certificate on all the computers. Or did i understand wrong?

Thank you

exograpix

Its a old post, I suggest you use pfsense 2.1.5 in case you want to use these settings, it is more stable than current release. You can load self signed certificate in phone too, but its a pain. I suggest to put them in the bypass list.

killmasta93

@exograpix:

Its a old post, I suggest you use pfsense 2.1.5 in case you want to use these settings, it is more stable than current release. You can load self signed certificate in phone too, but its a pain. I suggest to put them in the bypass list.

but if i put it on the bypass list https wont get blocked on phones or am i wrong? I was considering to do wpad but currently pfBlockerNG does get the job done besides youtube. :-[ And only shows cannot find page which kinda sucks compared to website blocked notification though squidguard

off topic completely for exograpix: any news when e2guardian is coming out for pfSense 2.2.2?

aGeekhere

Hi, yes you need to put it in the phone and tablets and ANY/ALL other devices, old post but most of the steps still are still correct.

You can skip System Patches part.

killmasta93

but it seems like for pfSense 2.2.2 theres issues with squid3

exograpix

Lots of issues, don't waste on latest version, it is very unstable

aGeekhere

I am moving (trying to workout how to set it up now) from using a Transparent proxy to using a WPAD.

exograpix

Do send the process if you are successful.

killmasta93

any update on fixing squid3 for 2.2.2? :)

aGeekhere

@killmasta93:

any update on fixing squid3 for 2.2.2? :)

squid3 works fine with 2.2.2 for Transparent HTTP proxy (have not tried https).

Or are you referring to setting up a WPAD with squid3 for pfsense 2.2.2, if that is the case, i am working on it (getting somewhere).

killmasta93

well.. if i reboot i need to stop squid3 and squidGuard and start it again weird..but it works. I just gave up on https so I use pfblockerNG for all the https sites (facebook,twitter,whatsapp) Funny thing I cant get youtube to block though IP. :-[

But in theory 90 percent of people when they go to youtube or facebook they usually type on the url facebook.com that always comes at http. But if you search in google facebook it will come as https (thats where pfBlockerNG comes in)

I have been also following your post for WPAD pretty impressive stuff best of luck ;) But one thing i cant understand is how WPAD works with squid or squidGuard

aGeekhere

@killmasta93:

if i reboot i need to stop squid3 and squidGuard and start it again weird

I have to reinstall the blocklist.

@killmasta93:

I have been also following your post for WPAD pretty impressive stuff best of luck

If I work it out i'll post a how to;

killmasta93

I have to reinstall the blocklist.

thats the worst hopefully fix soon :)

If I work it out i'll post a how to

Thanks ;)

aGeekhere

Just to post an update I have got the wpad working with http and https filtering working without using a transparent proxy.
see link https://forum.pfsense.org/index.php?topic=93060.msg516254#msg516254

Hope this helps some people

KOM

Squid3 works just fine for me in explicit mode.