Categories: Pfsense

Setup Squid Guard (Proxy Server) on Pfsense

&NewLine;<&excl;-- WP QUADS Content Ad Plugin v&period; 2&period;0&period;92 -->&NewLine;<div class&equals;"quads-location quads-ad2524 " id&equals;"quads-ad2524" style&equals;"float&colon;none&semi;margin&colon;0px 3px 3px 3px&semi;padding&colon;0px 0px 0px 0px&semi;" data-lazydelay&equals;"0">&NewLine;&NewLine;<&sol;div>&NewLine;&NewLine;<h2 class&equals;"wp-block-heading">Setup Squid Guard &lpar;Proxy Server&rpar; on Pfsense<&sol;h2>&NewLine;&NewLine;&NewLine;&NewLine;<p>In order to setup Squid Guard you should have two packages installed on your Pfsense for it to work properly&period;<&sol;p>&NewLine;<&excl;-- WP QUADS Content Ad Plugin v&period; 2&period;0&period;92 -->&NewLine;<div class&equals;"quads-location quads-ad2529 " id&equals;"quads-ad2529" style&equals;"float&colon;none&semi;margin&colon;0px 3px 3px 3px&semi;padding&colon;0px 0px 0px 0px&semi;" data-lazydelay&equals;"0">&NewLine;&NewLine;<&sol;div>&NewLine;&NewLine;<&excl;-- WP QUADS Content Ad Plugin v&period; 2&period;0&period;92 -->&NewLine;<div class&equals;"quads-location quads-ad2526 " id&equals;"quads-ad2526" style&equals;"float&colon;none&semi;margin&colon;0px 3px 3px 3px&semi;padding&colon;0px 0px 0px 0px&semi;" data-lazydelay&equals;"0">&NewLine;&NewLine;<&sol;div>&NewLine;&NewLine;<&excl;-- WP QUADS Content Ad Plugin v&period; 2&period;0&period;92 -->&NewLine;<div class&equals;"quads-location quads-ad2523 " id&equals;"quads-ad2523" style&equals;"float&colon;none&semi;margin&colon;0px 3px 3px 3px&semi;padding&colon;0px 0px 0px 0px&semi;" data-lazydelay&equals;"0">&NewLine;&NewLine;<&sol;div>&NewLine;&NewLine;&NewLine;&NewLine;&NewLine;<p>First package should be Squid 3 &lpar;In case you&&num;8217&semi;re publishing Exchange web services with it&rpar; or Squid if not&period;<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p>Second Package would be Squid Guard-Squid3 for Squid 3 or in case you don&&num;8217&semi;t have Squid 3 you can use the normal &&num;8220&semi;Stable&&num;8221&semi; Squid-Guard version for Squid&period;&nbsp&semi;<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<h2 class&equals;"wp-block-heading">Squid Package<&sol;h2>&NewLine;&NewLine;&NewLine;&NewLine;<p>In my case I am using Squid 3 because I use its reverse proxy to publish Exchange web services so I will install SquidGaurd-Squid 3 to configure its proxy server&period;<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p>I already downloaded and installed it but If you didn&&num;8217&semi;t do so then you will have to navigate to >System > Packages >Available Packages and there you can find it and install it&period;<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<figure class&equals;"wp-block-image"><img src&equals;"https&colon;&sol;&sol;sites&period;google&period;com&sol;a&sol;moh10ly&period;com&sol;tech2&sol;&lowbar;&sol;rsrc&sol;1431547307869&sol;blog&sol;pfsense&sol;setup-squid-guard-proxy-server-on-pfsense&sol;pfsquid1&period;png" alt&equals;""&sol;> &NewLine;&NewLine;<&excl;-- WP QUADS Content Ad Plugin v&period; 2&period;0&period;92 -->&NewLine;<div class&equals;"quads-location quads-ad2522 " id&equals;"quads-ad2522" style&equals;"float&colon;none&semi;margin&colon;0px 3px 3px 3px&semi;padding&colon;0px 0px 0px 0px&semi;" data-lazydelay&equals;"0">&NewLine;&NewLine;<&sol;div>&NewLine; &NewLine;<&sol;figure>&NewLine;&NewLine;&NewLine;&NewLine;<p>From the Services Menu drop down you will find those 3 below &lpar;Proxy Filter&comma; Proxy Server and Reverse Proxy&rpar; <&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<figure class&equals;"wp-block-image"><img src&equals;"https&colon;&sol;&sol;sites&period;google&period;com&sol;a&sol;moh10ly&period;com&sol;tech2&sol;&lowbar;&sol;rsrc&sol;1431547307869&sol;blog&sol;pfsense&sol;setup-squid-guard-proxy-server-on-pfsense&sol;pfsquid2&period;png" alt&equals;""&sol;><&sol;figure>&NewLine;&NewLine;&NewLine;&NewLine;<p>First I will go to Proxy Server tick which Interfaces I want to enable the proxy on &lpar;<strong>LAN&comma; DMZ<&sol;strong>&rpar; and Enable &&num;8220&semi;<strong>Transparent Http Proxy<&sol;strong>&&num;8221&semi; and &&num;8220&semi;<strong>Allow users on interface&&num;8221&semi;<&sol;strong> in the General tab page<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<figure class&equals;"wp-block-image"><img src&equals;"https&colon;&sol;&sol;sites&period;google&period;com&sol;a&sol;moh10ly&period;com&sol;tech2&sol;&lowbar;&sol;rsrc&sol;1431547307870&sol;blog&sol;pfsense&sol;setup-squid-guard-proxy-server-on-pfsense&sol;pfsquid3&period;png" alt&equals;""&sol;><&sol;figure>&NewLine;&NewLine;&NewLine;&NewLine;<p>If you scroll down you will find &&num;8220&semi;Logging Settings&&num;8221&semi; and other options that you don&&num;8217&semi;t need to enable&period; Logging is required mostly for troubleshooting times&period;<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p>Next I will go to &&num;8220&semi;Local Cache&&num;8221&semi; tab and change the&nbsp&semi;<strong>Squid Hard Disk cache Settings&nbsp&semi;<&sol;strong>in order to take more than 100 mb&period; I will make it 5000mb which is 5 GB to make internet browser faster for users who visit the same websites often&period;<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p>After that you don&&num;8217&semi;t need to do anything except saving changes in the end of the page below<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<figure class&equals;"wp-block-image"><img src&equals;"https&colon;&sol;&sol;sites&period;google&period;com&sol;a&sol;moh10ly&period;com&sol;tech2&sol;&lowbar;&sol;rsrc&sol;1431547307870&sol;blog&sol;pfsense&sol;setup-squid-guard-proxy-server-on-pfsense&sol;pfsquid4&period;png" alt&equals;""&sol;><&sol;figure>&NewLine;&NewLine;&NewLine;&NewLine;<p>Go to &&num;8220&semi;<strong>ACLs<&sol;strong>&&num;8221&semi; page and enable the Local networks that I have&comma; I will write them in the &&num;8220&semi;<strong>Allowed subnets<&sol;strong>&&num;8221&semi; section and save the page&period; <&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<figure class&equals;"wp-block-image"><img src&equals;"https&colon;&sol;&sol;sites&period;google&period;com&sol;a&sol;moh10ly&period;com&sol;tech2&sol;&lowbar;&sol;rsrc&sol;1431547307870&sol;blog&sol;pfsense&sol;setup-squid-guard-proxy-server-on-pfsense&sol;pfsquid5&period;png" alt&equals;""&sol;><&sol;figure>&NewLine;&NewLine;&NewLine;&NewLine;<p>I am finished with the Proxy Server settings&comma; I will go to Proxy Filter and I will scroll down to the end of the page to Enable Blacklist option and paste the link below then click Save to save the changes<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p><a href&equals;"http&colon;&sol;&sol;www&period;shallalist&period;de&sol;Downloads&sol;shallalist&period;tar&period;gz">http&colon;&sol;&sol;www&period;shallalist&period;de&sol;Downloads&sol;shallalist&period;tar&period;gz<&sol;a><&sol;p>&NewLine;<&excl;-- WP QUADS Content Ad Plugin v&period; 2&period;0&period;92 -->&NewLine;<div class&equals;"quads-location quads-ad2527 " id&equals;"quads-ad2527" style&equals;"float&colon;none&semi;margin&colon;0px 3px 3px 3px&semi;padding&colon;0px 0px 0px 0px&semi;" data-lazydelay&equals;"0">&NewLine;&NewLine;<&sol;div>&NewLine;&NewLine;&NewLine;&NewLine;&NewLine;<figure class&equals;"wp-block-image"><img src&equals;"https&colon;&sol;&sol;sites&period;google&period;com&sol;a&sol;moh10ly&period;com&sol;tech2&sol;&lowbar;&sol;rsrc&sol;1431547307870&sol;blog&sol;pfsense&sol;setup-squid-guard-proxy-server-on-pfsense&sol;pfsquid6&period;png" alt&equals;""&sol;><&sol;figure>&NewLine;&NewLine;&NewLine;&NewLine;<p>Go to Blacklist tab to download the black list from there then I will copy the link below and press on Download<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p><a href&equals;"http&colon;&sol;&sol;www&period;shallalist&period;de&sol;Downloads&sol;shallalist&period;tar&period;gz">http&colon;&sol;&sol;www&period;shallalist&period;de&sol;Downloads&sol;shallalist&period;tar&period;gz<&sol;a><&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<figure class&equals;"wp-block-image"><img src&equals;"https&colon;&sol;&sol;sites&period;google&period;com&sol;a&sol;moh10ly&period;com&sol;tech2&sol;&lowbar;&sol;rsrc&sol;1431547307870&sol;blog&sol;pfsense&sol;setup-squid-guard-proxy-server-on-pfsense&sol;pfsquid7&period;png" alt&equals;""&sol;><&sol;figure>&NewLine;&NewLine;&NewLine;&NewLine;<p>When I finish downloading I will go to &&num;8220&semi;<strong>Common ACL<&sol;strong>&&num;8221&semi; tab page and configure the Rules there which we have downloaded&period; As you can see below I have everything already configured but in order for you to configure it you will have to press on the > Green Start button first of all<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<figure class&equals;"wp-block-image"><img src&equals;"https&colon;&sol;&sol;sites&period;google&period;com&sol;a&sol;moh10ly&period;com&sol;tech2&sol;&lowbar;&sol;rsrc&sol;1431547307870&sol;blog&sol;pfsense&sol;setup-squid-guard-proxy-server-on-pfsense&sol;pfsquid8&period;png" alt&equals;""&sol;><&sol;figure>&NewLine;&NewLine;&NewLine;&NewLine;<p>After you press on the Green button It will show you the rules that you want to configure&period; I have already configured &lpar;<strong>Alcohol&comma; Deny&comma; Gambling&comma; Hacking&comma; Social net<&sol;strong>&rpar;…<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<figure class&equals;"wp-block-image"><img src&equals;"https&colon;&sol;&sol;sites&period;google&period;com&sol;a&sol;moh10ly&period;com&sol;tech2&sol;&lowbar;&sol;rsrc&sol;1431547307870&sol;blog&sol;pfsense&sol;setup-squid-guard-proxy-server-on-pfsense&sol;pfsquid9&period;png" alt&equals;""&sol;><&sol;figure>&NewLine;&NewLine;&NewLine;&NewLine;<figure class&equals;"wp-block-image"><img src&equals;"https&colon;&sol;&sol;sites&period;google&period;com&sol;a&sol;moh10ly&period;com&sol;tech2&sol;&lowbar;&sol;rsrc&sol;1431547307869&sol;blog&sol;pfsense&sol;setup-squid-guard-proxy-server-on-pfsense&sol;pfsquid10&period;png" alt&equals;""&sol;><&sol;figure>&NewLine;&NewLine;&NewLine;&NewLine;<p>Then next I will configure the Redirect mode and type my own customized message that will appear to the clients behind Pfsense and use safeSearch&period;<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<figure class&equals;"wp-block-image"><img src&equals;"https&colon;&sol;&sol;sites&period;google&period;com&sol;a&sol;moh10ly&period;com&sol;tech2&sol;&lowbar;&sol;rsrc&sol;1431547307869&sol;blog&sol;pfsense&sol;setup-squid-guard-proxy-server-on-pfsense&sol;pfsquid11&period;png" alt&equals;""&sol;><&sol;figure>&NewLine;&NewLine;&NewLine;&NewLine;<p>When done I will save this page and go to the General tab page and will click on Apply all changes and save the page&period;<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<figure class&equals;"wp-block-image"><img src&equals;"https&colon;&sol;&sol;sites&period;google&period;com&sol;a&sol;moh10ly&period;com&sol;tech2&sol;&lowbar;&sol;rsrc&sol;1431547307869&sol;blog&sol;pfsense&sol;setup-squid-guard-proxy-server-on-pfsense&sol;pfsquid12&period;png" alt&equals;""&sol;><&sol;figure>&NewLine;&NewLine;&NewLine;&NewLine;<p>Note&colon;<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p>you should see that SafeGuard service state &&num;8220&semi;Started&&num;8221&semi; in order for it to work&period; If for any reason the service is not started try to navigate to >Status > System logs  and check your logs here if there&&num;8217&semi;s anything related to SafeGaurd or Squid&period;<br><&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<figure class&equals;"wp-block-image"><img src&equals;"https&colon;&sol;&sol;sites&period;google&period;com&sol;a&sol;moh10ly&period;com&sol;tech2&sol;&lowbar;&sol;rsrc&sol;1431547307869&sol;blog&sol;pfsense&sol;setup-squid-guard-proxy-server-on-pfsense&sol;pfsquid13&period;png" alt&equals;""&sol;><&sol;figure>&NewLine;&NewLine;&NewLine;&NewLine;<p>Now I will go to the Client and check if my client with &&num;8220&semi;Pfsense as their default gateway&&num;8221&semi; will respond to the Safe Guard rules or not&period;<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p>I tried opening Facebook or Twitter but both are not working and they gave me the same message which I have customized in Pfsense&period;  <&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<figure class&equals;"wp-block-image"><img src&equals;"https&colon;&sol;&sol;sites&period;google&period;com&sol;a&sol;moh10ly&period;com&sol;tech2&sol;&lowbar;&sol;rsrc&sol;1431547307869&sol;blog&sol;pfsense&sol;setup-squid-guard-proxy-server-on-pfsense&sol;pfsquid14&period;png" alt&equals;""&sol;><&sol;figure>&NewLine;&NewLine;&NewLine;&NewLine;<p>Over all this had been easy setup and everything works perfectly<&sol;p>&NewLine;<&excl;-- WP QUADS Content Ad Plugin v&period; 2&period;0&period;92 -->&NewLine;<div class&equals;"quads-location quads-ad2531 " id&equals;"quads-ad2531" style&equals;"float&colon;none&semi;margin&colon;0px 3px 3px 3px&semi;padding&colon;0px 0px 0px 0px&semi;" data-lazydelay&equals;"0">&NewLine;&NewLine;<&sol;div>&NewLine;&NewLine;&NewLine;&NewLine;&NewLine;<p>Hope this would be useful to you all&period;<&sol;p>&NewLine;&NewLine;<&excl;-- WP QUADS Content Ad Plugin v&period; 2&period;0&period;92 -->&NewLine;<div class&equals;"quads-location quads-ad2525 " id&equals;"quads-ad2525" style&equals;"float&colon;none&semi;margin&colon;0px 3px 3px 3px&semi;padding&colon;0px 0px 0px 0px&semi;" data-lazydelay&equals;"0">&NewLine;&NewLine;<&sol;div>&NewLine;&NewLine;

moh10ly

Share
Published by
moh10ly

Recent Posts

Reset passwords for Active Directory Users

Reset and manage your Active Directory users' Passwords Active Directory is one of the most…

3 years ago

Finding Exchange Database hidden mailboxes. ​

Finding Exchange Database hidden mailboxes. Story:Maybe you have been in this situation before, trying to…

3 years ago

Setting up ADConnect and PTA (Password auth through) servers agents behind proxy

If you're using a Proxy server in your firewall or in your network and have…

3 years ago

Get Report of Active Directory Locked Accounts and Machine they logged in from

Story:I got some clients  that have reported some of their users being locked out and…

3 years ago

Checking and Providing Full and SendAs delegate access on O365 Exchange Online

Delegate Permissions This is a code that I have wrote recently to check if an…

3 years ago

Retrieving attachments from Exchange mailbox using python

Story: I got a request from a client who constantly gets CVs and have to…

4 years ago

Warning: Undefined array key "adsense_ad_type" in /www/wwwroot/www.moh10ly.com/wp-content/plugins/quick-adsense-reloaded/includes/amp-condition-display.php on line 298

Warning: Undefined array key "adsense_ad_type" in /www/wwwroot/www.moh10ly.com/wp-content/plugins/quick-adsense-reloaded/includes/amp-condition-display.php on line 298

Warning: Undefined array key "adsense_ad_type" in /www/wwwroot/www.moh10ly.com/wp-content/plugins/quick-adsense-reloaded/includes/amp-condition-display.php on line 298

Warning: Undefined array key "adsense_ad_type" in /www/wwwroot/www.moh10ly.com/wp-content/plugins/quick-adsense-reloaded/includes/amp-condition-display.php on line 298

Warning: Undefined array key "adsense_ad_type" in /www/wwwroot/www.moh10ly.com/wp-content/plugins/quick-adsense-reloaded/includes/amp-condition-display.php on line 298

Warning: Undefined array key "adsense_ad_type" in /www/wwwroot/www.moh10ly.com/wp-content/plugins/quick-adsense-reloaded/includes/amp-condition-display.php on line 298

Warning: Undefined array key "adsense_ad_type" in /www/wwwroot/www.moh10ly.com/wp-content/plugins/quick-adsense-reloaded/includes/amp-condition-display.php on line 298

Warning: Undefined array key "adsense_ad_type" in /www/wwwroot/www.moh10ly.com/wp-content/plugins/quick-adsense-reloaded/includes/amp-condition-display.php on line 298

Warning: Undefined array key "adsense_ad_type" in /www/wwwroot/www.moh10ly.com/wp-content/plugins/quick-adsense-reloaded/includes/amp-condition-display.php on line 298

Warning: Undefined array key "adsense_ad_type" in /www/wwwroot/www.moh10ly.com/wp-content/plugins/quick-adsense-reloaded/includes/amp-condition-display.php on line 298

Warning: Undefined array key "adsense_ad_type" in /www/wwwroot/www.moh10ly.com/wp-content/plugins/quick-adsense-reloaded/includes/amp-condition-display.php on line 298

Warning: Undefined array key "adsense_ad_type" in /www/wwwroot/www.moh10ly.com/wp-content/plugins/quick-adsense-reloaded/includes/amp-condition-display.php on line 298

Warning: Undefined array key "adsense_ad_type" in /www/wwwroot/www.moh10ly.com/wp-content/plugins/quick-adsense-reloaded/includes/amp-condition-display.php on line 298

Warning: Undefined array key "adsense_ad_type" in /www/wwwroot/www.moh10ly.com/wp-content/plugins/quick-adsense-reloaded/includes/amp-condition-display.php on line 298

Warning: Undefined array key "adsense_ad_type" in /www/wwwroot/www.moh10ly.com/wp-content/plugins/quick-adsense-reloaded/includes/amp-condition-display.php on line 298

Warning: Undefined array key "adsense_ad_type" in /www/wwwroot/www.moh10ly.com/wp-content/plugins/quick-adsense-reloaded/includes/amp-condition-display.php on line 298

Warning: Undefined array key "adsense_ad_type" in /www/wwwroot/www.moh10ly.com/wp-content/plugins/quick-adsense-reloaded/includes/amp-condition-display.php on line 298

Warning: Undefined array key "adsense_ad_type" in /www/wwwroot/www.moh10ly.com/wp-content/plugins/quick-adsense-reloaded/includes/amp-condition-display.php on line 298