هدف از این فیلم ارائه گام به گام در مورد نحوه پیکربندی و نصب یک پروکسی شفاف با استفاده از pFSense و بسته Squid است. این فیلم شامل نمودار شبکه ای است که نشان می دهد چیدمان محیط ، پیش بینی مشتری قبل از نصب پروکسی ، نحوه پیکربندی یک CA اصلی برای پشتیبانی از پروکسی سرور ، نحوه نصب بسته ماهی مرکب ، نحوه پیکربندی ذخیره سازی ماهی مرکب ، چگونگی تنظیم پیکربندی ماهی مرکب ، تست پس از مشتری پس از پیکربندی پایه پروکسی ، چه فایروال برای محکم کردن قوانین ، چگونه برای اضافه کردن قوانین بلوک و نمایش پیام های خطا هنگام مسدود شدن سایت ، چه پیکربندی می کند.

توجه: من به دلیل مشکلات ثبات مشخص شده در وب سایت pFSense ، پیکربندی آنتی ویروس HVAP را درج نکردم.

لینک دانلود

22 پاسخ به “نحوه پیکربندی پروکسی شفاف با استفاده از PFSense”

  1. I liked the video, but having some issues.

    After configuring proxy Play Station Vue, Netflix, Arlo Videos Cameras stopped working.
    So two questions:
    1. Is it practical to use proxy without FW rule forcing all be on LAN?
    2. How to address problems with Play Station Vue, Netflix, Arlo Videos Cameras

    Overall wonder about usefulness vs problems it creates.

  2. can you make a tutorial for it. for example deny all website but allow specific website ex. gmail and yahoo
    Install Squid & configure

    Install Squidguard & configure

    Configure WPAD

    Force users to use proxy by blocking tcp80,443

    In Squidguard, set default ACL to Deny

    In Squidguard, create Whitelist ACL group and then add your allowed domains to it.

  3. I must say that your method is by far the best and simplest one to filter even SSL traffic..brilliant…I have a request for you please…Can you make a video on how to configure squid on multiple interfaces with dhcp enabled on optional interfaces…meaning, excluding the LAN….

  4. Thanks for an amazing video.  

    I’ve just installed pFSense for the first time a few days ago thanks to your videos, and mostly have it working the way I want it to.  One thing I’d like assistance with is troubleshooting blocking issues. 

    On pFSense I have the following packages installed:
    – pfBlockerNG (set to block incoming from Asia, Russia etc)
    – Squid (including https, and antivirus)
    – ntopng 

    The issues I’m having with this config are:
    – If I have antivirus running, it blocks crahsplan
    – some https pages/ iPhone apps like google voice/ ebay do not load on initial attempt; pressing reload once or twice seems to makes them work 
    – some https pages like eBay no longer display images of auctions on safari; work well on firefox

    To trouble shoot current procedure:
    – I’ve looked at firewall logs, filtered for IP address of server 
    –  I assume that logs would show all firewall logs including pfBlockerNG, but in case it didn’t I disabled it too and reran test
    – I couldn’t find logs for Squid or AV from interface, so I disabled it and reran tests;  I thought it would disable antivirus but it didn’t

    My questions:
    1.  How do you troubleshoot?  I followed procedure above but I think I’m missing some simple steps
    2. For Crashplan. how can I add a rule to bypass virus protection for that IP address
    3. For eBay, google voice etc is it a good idea to add them domain to whitelist or is there another solution like just enabling certain apps?
    4.  Are there reports I can add to dashboard that would show things going out that are being blocked by firewall, AV, or squid?
    5. Are there any other recommended packages to install that you would recommend either to troubleshoot or better accomplish what I'm  doing  

    Thanks in advance for your time

  5. Hi ! Thanks a lot for your video.

    Maybe I did miss something, but how does your client knows it have to go through the transparent proxy ? in my environment I have to manually configure a proxy into my chrome browser.

    thanks again.

  6. Love the video – thanks. I would like to see your internal IP addresses – are you double NATing or are the gateway and the client on the same LAN segment?

  7. Well, dont want to be downer, but its just not working for me, I even went for factory reset for pfsense and setup just basics then followed the video. Every browser, every system on the network complains about insecure connection.
    Had to disable ssh filtering. Setting up a certificate and setting splicing all, setting CA to one created,… it did not do its magic

  8. I tried setting up squid as a transparent proxy in a similar topography but I got errors when going to certain sites despite not blocking any addresses or setting any acl's.

نظرات بسته شده اند.