The pfSense Store

Author Topic: Guide to filtering web content (http and https) with pfsense 2.3  (Read 77322 times)

0 Members and 2 Guests are viewing this topic.

Offline vielfede

  • Jr. Member
  • **
  • Posts: 92
  • Karma: +1/-0
    • View Profile
Re: Guide to filtering web content (http and https) with pfsense 2.3
« Reply #135 on: December 05, 2017, 11:20:42 am »
sometimes splice all can show SSL errors when web browsing.
I'd say "often" a  lot of SSL errors!  ;)
In my opinion Splice All is not usable in the way it is now (without WPAD).

« Last Edit: December 15, 2017, 02:34:12 am by vielfede »

Offline originalsin

  • Newbie
  • *
  • Posts: 1
  • Karma: +0/-0
    • View Profile
Re: Guide to filtering web content (http and https) with pfsense 2.3
« Reply #136 on: December 20, 2017, 08:34:29 pm »
guess it is way too late for asking abbration.

But what does "Tic" stands for?

I can not find out the Tic in Pfsense and can not figure it out.

Plz somebody help me!!!

Offline aGeekHere

  • Sr. Member
  • ****
  • Posts: 525
  • Karma: +43/-1
    • View Profile
Re: Guide to filtering web content (http and https) with pfsense 2.3
« Reply #137 on: December 21, 2017, 05:12:04 pm »
Tick, select.
Never Fear, A Geek is Here!

Offline yaska

  • Newbie
  • *
  • Posts: 1
  • Karma: +0/-0
    • View Profile
Re: Guide to filtering web content (http and https) with pfsense 2.3
« Reply #138 on: December 21, 2017, 11:51:37 pm »
I have multiple vlans with different IP addresses 

VLAN_50 = 192.168.50.0
VLAN_60 = 192.168.60.0

How do I add all the IPs to the below section

function FindProxyForURL(url, host)
{
    if (isPlainHostName(host) ||
        shExpMatch(host, "*.local") ||
        isInNet(dnsResolve(host), "192.168.60.0",  "255.255.255.0"))
        return "DIRECT";
 
    return "PROXY 192.168.60.1:3128";
}

Offline shan52

  • Newbie
  • *
  • Posts: 6
  • Karma: +0/-0
    • View Profile
Re: Guide to filtering web content (http and https) with pfsense 2.3
« Reply #139 on: January 05, 2018, 01:43:22 pm »
Why is the difference between Squiguard and OpenDNS?

Offline vielfede

  • Jr. Member
  • **
  • Posts: 92
  • Karma: +1/-0
    • View Profile
Re: Guide to filtering web content (http and https) with pfsense 2.3
« Reply #140 on: January 08, 2018, 11:09:50 am »
Just one thing I can not get working:

Windows 7 updates, W7 detects them, but it's not able to download. I read something about here, but I do not know how to manage it.
https://wiki.squid-cache.org/SquidFaq/WindowsUpdate#Squid_with_SSL-Bump_and_Windows_Updates

Anyone with the same problem?
Solutions? Workarounds?
Thanks in advance

Offline shan52

  • Newbie
  • *
  • Posts: 6
  • Karma: +0/-0
    • View Profile
Re: Guide to filtering web content (http and https) with pfsense 2.3
« Reply #141 on: January 08, 2018, 02:13:53 pm »
We have lots of laptop and pc, is there an easier way to install the cert for all the devices?

Offline aGeekHere

  • Sr. Member
  • ****
  • Posts: 525
  • Karma: +43/-1
    • View Profile
Re: Guide to filtering web content (http and https) with pfsense 2.3
« Reply #142 on: January 08, 2018, 04:28:01 pm »
Quote
I have multiple vlans with different IP addresses 
I do not use vlans so I do not know, sorry

Quote
Why is the difference between Squiguard and OpenDNS?
Squiguard block content on rules you set on your router (totally private).
OpenDNS block content on rules you set on their servers (they see all traffic, also can be slower)

Quote
Just one thing I can not get working
Windows updates (as well as Mac and linux) should all be working, if it is not that you may have missed a step. Check that the WPAD is working and your pc is set to auto configure.
If it is still not working read though the guide again, it should work.

Quote
We have lots of laptop and pc, is there an easier way to install the cert for all the devices?
You only have to create a cert of squid when using splice all not for all devices

Hope this helps
Never Fear, A Geek is Here!

Offline DerHeldvomErdbeerfeld

  • Newbie
  • *
  • Posts: 1
  • Karma: +0/-0
    • View Profile
Hi there,

I just read this guide and also tried a little bit an the most I tried worked. Now I just have some
questions for better understanding.

1)
Guide to filtering web content (http and https) with pfsense 2.3 updated 09 June 2017

To stop users from bypassing your proxy setup a new firewall lan rule and block port 80 and 443
IPv4 TCP * * * 80 - 443 * none.
Save

If I set it up like this FROM 80 TO 443 (this is what it mean to me 80-443) didnt I block also all ports
between 80 and 443? Wouldnt it be better to set up two rules or an alias (Firewall/Aliases/Ports)
for the pot 80 and 443 or did I understood it wrong?

2)
I also want to use a dual wan configuration, is there something to take care of?



---
greets from Germany

DerHeldvomErdbeerfeld