hi,
I have a configuration where traffic is forwarded to the proxy
server (default gateway). Currently I have squid on centos where I haven't
configured the WPAD and where both http and https sites are working fine.
is WPAD is necessary for the https sites to work? because I am able to
access http sites.
On Tue, Nov 11, 2014 at 11:30 PM, <[email protected]> wrote:
> Send List mailing list submissions to
> [email protected]
>
> To subscribe or unsubscribe via the World Wide Web, visit
> https://lists.pfsense.org/mailman/listinfo/list
> or, via email, send a message with subject or body 'help' to
> [email protected]
>
> You can reach the person managing the list at
> [email protected]
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of List digest..."
>
>
> Today's Topics:
>
> 1. Restart of pfsense loses Squid's transparent proxy redirect
> rule (Chris Murray)
> 2. Not able to access https sites (Rupesh Gujrathi)
> 3. Re: Not able to access https sites (Toni Garcia)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Tue, 11 Nov 2014 11:55:56 -0000
> From: "Chris Murray" <[email protected]>
> To: <[email protected]>
> Subject: [pfSense] Restart of pfsense loses Squid's transparent proxy
> redirect rule
> Message-ID:
> <[email protected]>
> Content-Type: text/plain; charset="us-ascii"
>
> Hello all,
>
> I've experienced this issue before but never got round to asking for
> help...
>
> Now on a fresh install of 2.1.5 64-bit, installed the squid package, set
> up transparent proxy, restarted, yet there is no firewall rule?
>
> : pfctl -sa | grep 3128
>
> Nothing ...
>
> Restart the service, still nothing. Change the port number in the Proxy
> config to 8080, and now there's a rule:
>
> : pfctl -sa | grep 8080
> rdr on em0 inet proto tcp from any to ! (em0) port = http -> 127.0.0.1
> port 8080
> pass in quick on em0 proto tcp from any to ! (em0) port = 8080 flags
> S/SA keep state
>
> Change the port back to 3128 and now there's a rule for that but not one
> for 8080, just as you'd expect:
>
> : pfctl -sa | grep 3128
> rdr on em0 inet proto tcp from any to ! (em0) port = http -> 127.0.0.1
> port 3128
> pass in quick on em0 proto tcp from any to ! (em0) port = 3128 flags
> S/SA keep state
>
> Restart the squid service and the 3128 rule remains.
> Restart the server and it's gone again.
>
> This machine is currently routing between the main network and a subnet
> until it is 'promoted' to become the WAN router, so there's plenty
> opportunity to troubleshoot. What might be causing this? I guess some
> dependency during the startup process, but then why would a restart of
> the squid service not affect things? I did find the following bug,
> however it is marked 'resolved'.
>
> https://redmine.pfsense.org/issues/224
>
> Thanks in advance,
> Chris
>
>
> ------------------------------
>
> Message: 2
> Date: Tue, 11 Nov 2014 17:54:37 +0530
> From: Rupesh Gujrathi <[email protected]>
> To: [email protected], [email protected]
> Subject: [pfSense] Not able to access https sites
> Message-ID:
> <
> cahkgn7hwghqjglcdqk8llenvgraqbghj_92dh2bnyc6ukgi...@mail.gmail.com>
> Content-Type: text/plain; charset="utf-8"
>
> Hi,
> Is there any other way to do the same, if no how I can configure WPAD
> on pfsense.
>
>
> >
> > Message: 1
> > Date: Sat, 8 Nov 2014 19:44:15 -0200
> > From: Jonatas Baldin <[email protected]>
> > To: pfSense support and discussion <[email protected]>
> > Subject: Re: [pfSense] Not able to access https sites
> > Message-ID:
> > <CAJonpg85+7p7un1xf49vC23GtDuUg5KjjXmpGH4L=
> > [email protected]>
> > Content-Type: text/plain; charset="utf-8"
> >
> > Try implementing WPAD.
> > Em 08/11/2014 13:21, "Rupesh Gujrathi" <[email protected]>
> > escreveu:
> >
> > > Hi, friends
> > > I have configured pfsesnse ver 2.1.5 with squid3 for transparent proxy.
> > > All the sites are working fine but I am not able to access the https
> > sites.
> > > Is there any configuration that I may be missing?
> > >
> > > _______________________________________________
> > > List mailing list
> > > [email protected]
> > > https://lists.pfsense.org/mailman/listinfo/list
> > >
> > -------------- next part --------------
> > An HTML attachment was scrubbed...
> > URL: <
> >
> http://lists.pfsense.org/pipermail/list/attachments/20141108/41b11866/attachment-0001.html
> > >
> >
> > ------------------------------
> >
> > Subject: Digest Footer
> >
> > _______________________________________________
> > List mailing list
> > [email protected]
> > https://lists.pfsense.org/mailman/listinfo/list
> >
> > ------------------------------
> >
> > End of List Digest, Vol 216, Issue 1
> > ************************************
> >
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <
> http://lists.pfsense.org/pipermail/list/attachments/20141111/7d737422/attachment-0001.html
> >
>
> ------------------------------
>
> Message: 3
> Date: Tue, 11 Nov 2014 13:39:01 +0100 (CET)
> From: Toni Garcia <[email protected]>
> To: pfSense Support and Discussion Mailing List
> <[email protected]>
> Subject: Re: [pfSense] Not able to access https sites
> Message-ID:
> <[email protected]>
> Content-Type: text/plain; charset="utf-8"
>
> Hi,
>
> I didn't test it before, but in the docs there is a guideto WPAD
>
> https://doc.pfsense.org/index.php/WPAD_Autoconfigure_for_Squid
>
> Regards
>
>
> De: "Rupesh Gujrathi" <[email protected]>
> Para: [email protected], "jonatas baldin" <[email protected]>
> Enviados: Martes, 11 de Noviembre 2014 13:24:37
> Asunto: [pfSense] Not able to access https sites
>
> Hi,
> Is there any other way to do the same, if no how I can configure WPAD on
> pfsense.
>
>
>
>
>
> Message: 1
> Date: Sat, 8 Nov 2014 19:44:15 -0200
> From: Jonatas Baldin < [email protected] >
> To: pfSense support and discussion < [email protected] >
> Subject: Re: [pfSense] Not able to access https sites
> Message-ID:
> <CAJonpg85+7p7un1xf49vC23GtDuUg5KjjXmpGH4L= [email protected] >
> Content-Type: text/plain; charset="utf-8"
>
> Try implementing WPAD.
> Em 08/11/2014 13:21, "Rupesh Gujrathi" < [email protected] >
> escreveu:
>
> > Hi, friends
> > I have configured pfsesnse ver 2.1.5 with squid3 for transparent proxy.
> > All the sites are working fine but I am not able to access the https
> sites.
> > Is there any configuration that I may be missing?
> >
> > _______________________________________________
> > List mailing list
> > [email protected]
> > https://lists.pfsense.org/mailman/listinfo/list
> >
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <
> http://lists.pfsense.org/pipermail/list/attachments/20141108/41b11866/attachment-0001.html
> >
>
> ------------------------------
>
> Subject: Digest Footer
>
> _______________________________________________
> List mailing list
> [email protected]
> https://lists.pfsense.org/mailman/listinfo/list
>
> ------------------------------
>
> End of List Digest, Vol 216, Issue 1
> ************************************
>
>
>
>
>
> _______________________________________________
> List mailing list
> [email protected]
> https://lists.pfsense.org/mailman/listinfo/list
>
> --
> Toni Garcia
> T?cnico de Sistemas
>
> Oracle Linux 6 Certified Implementation Specialist
> Oracle Certified Professional Solaris 10 System Administrator
> Oracle Certified Associate Solaris 11 System Administrator
>
> SISTEL
>
> Servicios Inform?ticos de Software
> y Telecomunicaciones
> Avd. Los Jarales, 4 (03010) ALICANTE
>
>
>
> TLF 965930080 - FAX 901021558
> www.sistel.es
>
>
>
>
>
> Por favor recuerda tu responsabilidad medioambiental antes de imprimir
> este e-mail. / Please consider your environmental responsibility before
> printing this e-mail.
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <
> http://lists.pfsense.org/pipermail/list/attachments/20141111/d76a16e4/attachment-0001.html
> >
>
> ------------------------------
>
> Subject: Digest Footer
>
> _______________________________________________
> List mailing list
> [email protected]
> https://lists.pfsense.org/mailman/listinfo/list
>
> ------------------------------
>
> End of List Digest, Vol 218, Issue 1
> ************************************
>
_______________________________________________
List mailing list
[email protected]
https://lists.pfsense.org/mailman/listinfo/list
