Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Proxy and Content Filter

    Scheduled Pinned Locked Moved General pfSense Questions
    6 Posts 3 Posters 1.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      BlazeStar
      last edited by

      Hi guys,

      I'm new to pfSense and I have a few questions about proxy and content filter.

      Previously I was using latest versions of SQUID and SQUID GUARD on a CentOS machine.

      Now using pfSense 2.1.5-RELEASE (amd64) I see a lot of different packages which could provide me with a proxy and content filter.

      I want to use SQUID as a proxy, I guess most people would recommend that, but then which package should i use to best work with pfSense ?

      • squid

      • squid3

      • squid3-dev

      And concerning the content filter, which do you suggest?

      I know about SQUIDGUARD, I hear about DANSGUARDIAN…

      I read a few threads about that but most of them were very old.

      So concerning the current version, which one is best for use with pfSense ?

      I can't find any recent, interesting info on that.

      Also, if I were to choose SquidGuard, which one should I use?

      • squidGuard

      • squidGuard-devel

      • squidGuard-squid3

      Thanks guys !!!

      1 Reply Last reply Reply Quote 0
      • B
        BlazeStar
        last edited by

        so I decided to go with SQUID3 and all is good.

        I'd just like to know if I should choose SQUIDGUARD or DANSGUARDIAN for a content filter.

        I just want to have a website blacklist and ideally custom block pages.

        Thanks!

        1 Reply Last reply Reply Quote 0
        • H
          heper
          last edited by

          squidguard is an urlfilter (it just checks url-blacklist/whitelist for a match  –> not a content filter)
          dansguardian scans the websites for content and with the use of a set of parameters you can configure it to allow or block the page. in addition it ALSO does urlfiltering on the side)

          depending on what you want to do you can pick on or the other.

          do note: urlfiltering uses "little" cpu/memory. Content filtering has much higher requirements.

          1 Reply Last reply Reply Quote 0
          • B
            BlazeStar
            last edited by

            @heper:

            squidguard is an urlfilter (it just checks url-blacklist/whitelist for a match  –> not a content filter)
            dansguardian scans the websites for content and with the use of a set of parameters you can configure it to allow or block the page. in addition it ALSO does urlfiltering on the side)

            depending on what you want to do you can pick on or the other.

            do note: urlfiltering uses "little" cpu/memory. Content filtering has much higher requirements.

            Thanks for clearing that out!

            That's exactly what I was wondering… the difference between both.

            Well I only need to filter URL, I don't care about the content.

            i want to block time-blackholes such as Facebook, YouTube and such.

            I was also wondering if there's an efficient way to block SKYPE and various messager apps?

            1 Reply Last reply Reply Quote 0
            • R
              rocaembole
              last edited by

              I would choose squid + squidguard in non-transparent mode

              It is lightweight, functional and easy. There are many tutorials and many different ways to do what you want to do so depends on you!

              You can block domains like facebook.com and youtube.com with target categories.

              But if you want a proxy in transparent mode + block https then you should pick up squid3

              cheers

              Powered by google translate

              No Pain
              No Gain

              1 Reply Last reply Reply Quote 0
              • B
                BlazeStar
                last edited by

                I don't want it in transparent mode because I want to activate authentication

                However I want to filter HTTPS too.

                So I'm already running SQUID3, I'll start to integrate SQUIDGUARD !

                Thanks all!

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.