Home Linux & Systems Cybersecurity Cloud & DevOps Networks & Infrastructure SIEM & Monitoring DFIR & Threat Intel Development & Other All categories Projects About Tools

How to install and configure Squid Transparent Proxy in pfSense

Leer en espanol
How to install and configure Squid Transparent Proxy in pfSense

Table of contents

Typically, proxies use port 3128 and therefore it must be configured on each client so that it can access the Internet through the proxy. Instead ===

Why configure Transparent Proxy?

Typically, proxies use port 3128 and therefore it must be configured on each client so that it can access the Internet through the proxy. On the other hand, in a transparent proxy it is not necessary to make any type of configuration on the client, all traffic is redirected to port 80, therefore, as its name indicates, it is transparent to the client.

First of all we are going to install the Squid package, to do this we have to go: System > Package Manager 

captura-de-pantalla-de-2016-12-04-193857

We press on Available Packages, In it we get a list of all the packages available to install, we look for squid and we click Install

captura-de-pantalla-de-2016-12-04-193945

We confirm the installation.

captura-de-pantalla-de-2016-12-04-193950

We wait for the installation to finish.

captura-de-pantalla-de-2016-12-04-194025

Once the installation is finished we will: Services > Squid Server Proxy

captura-de-pantalla-de-2016-12-04-194146

We click on Local Cache

captura-de-pantalla-de-2016-12-04-194311

We modify Hard Disk Cache Size

captura-de-pantalla-de-2016-12-04-194340

We modify Memory Cache Size, this option will depend on the RAM memory you have, no more than 50% of the memory should be configured. Once configured we save the changes.

captura-de-pantalla-de-2016-12-04-194419

Once configured, we go to the General tab and we must activate the following options:

Check to enable the Squid Proxy.
If checked, the settings, logs, cache AV defs and other data will be preserved across package reinstalls.
Transparent HTTP Proxy.

captura-de-pantalla-de-2016-12-04-194844 captura-de-pantalla-de-2016-12-04-194932

We verify that the service is started: Status > Services

captura-de-pantalla-de-2016-12-04-195914

Next we are going to configure Squid Proxy HTTPS, to do this we first have to generate a certificate: System > Cert Manager

captura-de-pantalla-de-2016-12-04-195433

Add

captura-de-pantalla-de-2016-12-04-195501

We configure the certificate, in my case:

captura-de-pantalla-de-2016-12-04-195622

Once the certificate is created we must activate it in:  Services > Squid Server Proxy > General and we activate: Enable SSL Filtering

captura-de-pantalla-de-2016-12-04-200037

Finally we activate the antivirus, to do this we go to the Antivirus window and select:

Enable Squid Antivirus check using ClamAV
This option disable antivirus scanning of streamed video and audio

captura-de-pantalla-de-2016-12-04-200127 captura-de-pantalla-de-2016-12-04-200159

Once everything is installed and configured, we can monitor the logs in real time in: Services > Squid Proxy Server > Real Time

captura-de-pantalla-de-2016-12-04-195402

All the best.

:wq!

Comments