• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Weird problem in squid guard - Partial access to the Internet

Scheduled Pinned Locked Moved Cache/Proxy
14 Posts 2 Posters 6.4k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • K
    KOM
    last edited by Mar 2, 2015, 2:18 PM

    Anything that silently intercepts an HTTPS session will trigger a browser Man in the Middle attack warning unless you have distributed the pfSense server certificate to all your clients.  You can avoid this by either installing the cert on every client PC, tablet, phone, etc etc, or stop using Transparent mode.

    1 Reply Last reply Reply Quote 0
    • F
      firefox
      last edited by Mar 2, 2015, 9:34 PM

      Not clear to me
      how the other computers work correctly ?

      1 Reply Last reply Reply Quote 0
      • K
        KOM
        last edited by Mar 3, 2015, 12:32 AM

        If they were going to an HTTP site then it would work without any errors.  Where were these clients going when they did/didn't work right?

        1 Reply Last reply Reply Quote 0
        • F
          firefox
          last edited by Mar 3, 2015, 4:19 AM

          Accesses the same sites - google.com, walla.co.il, ynet.co.il,
          I did not check more sites
          Because it's not my computer (do not have much access to it)
          It's my sister

          Update
          Two computers back to work correctly
          Only one causing problems (my sister computer)
          And there is not at all the sites

          1 Reply Last reply Reply Quote 0
          • K
            KOM
            last edited by Mar 3, 2015, 2:09 PM

            It could be that for the other computers, someone added the pfSense cert to the list of Trusted certificates.

            1 Reply Last reply Reply Quote 0
            • F
              firefox
              last edited by Mar 3, 2015, 5:42 PM Mar 3, 2015, 5:38 PM

              how can i check if certificates is pfsense ?

              two computer use ubuntu and firefox are ok
              one computer use win xp and crome or iexplorer not ok          <–-------- problem computer
              one computer use win7 and firefox is ok

              1 Reply Last reply Reply Quote 0
              • K
                KOM
                last edited by Mar 3, 2015, 6:06 PM

                Run IE and go to Options - Content - Certificates.  Look for a cert from either pfSense or Electric Sheep Fencing (ESF).

                1 Reply Last reply Reply Quote 0
                • F
                  firefox
                  last edited by Mar 3, 2015, 6:45 PM

                  I checked all computers (5 computers)

                  The certificate does not appear in any of them

                  1 Reply Last reply Reply Quote 0
                  • K
                    KOM
                    last edited by Mar 3, 2015, 8:32 PM

                    Well then, I don't know what to tell you.  You have one computer with a problem.  I doubt it's pfSense or Squid.  The one computer that has the problem is so old, it may not have the proper Root Certificate updates from Microsoft.  Chrome and IE share the same certificate store, whereas Firefox uses its own.  Try running Firefox on the XP box and see if that is any different.

                    1 Reply Last reply Reply Quote 0
                    • F
                      firefox
                      last edited by Mar 4, 2015, 4:58 AM

                      Try running Firefox on the XP box and see if that is any different.

                      I'll try

                      Clarification
                      the computer is old old
                      the operating system is old

                      Update from yesterday
                      But it was already too late and I turned off my computer

                      The computer in question was one hour ahead

                      I set the computer time and date accurate
                      And now

                      Only two sites inaccessible
                      And show the same message as before

                      1 Reply Last reply Reply Quote 0
                      14 out of 14
                      • First post
                        14/14
                        Last post
                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                        This community forum collects and processes your personal information.
                        consent.not_received