Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Block all traffic except proxy

    Firewalling
    1
    1
    370
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mandrekogmail.com last edited by

      So I'm trying to setup a lab to simulate some more advanced clients, who deny all traffic into and out of their network, except via a proxy server (typically a websense).

      I have the squid proxy running on my pfsense device, and I created an interface which is now assigning DHCP addresses. I added rules to allow the hosts on the network to connect to the pfsense box on port 3128 (proxy) and 53 (dns) for both TCP and UDP. That way they should be able to resolve DNS addresses, and access HTTP(s) through the proxy. However, when doing nslookups, they often won't resolve. If I manually specify "server 10.0.60.1", they work fine. I can also see that 10.0.60.1 is configured as the host's only DNS server, so I'm not sure why it wouldn't be going through.

      Is there a best practice for this type of setup? I figure it's becoming more common in large enterprises, so surely there must be something I'm neglecting.

      1 Reply Last reply Reply Quote 0
      • First post
        Last post

      Products

      • Platform Overview
      • TNSR
      • pfSense
      • Appliances

      Services

      • Training
      • Professional Services

      Support

      • Subscription Plans
      • Contact Support
      • Product Lifecycle
      • Documentation

      News

      • Media Coverage
      • Press
      • Events

      Resources

      • Blog
      • FAQ
      • Find a Partner
      • Resource Library
      • Security Information

      Company

      • About Us
      • Careers
      • Partners
      • Contact Us
      • Legal
      Our Mission

      We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

      Subscribe to our Newsletter

      Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

      © 2021 Rubicon Communications, LLC | Privacy Policy