+ 
How to filter web browsing with squid+squidguard
If you like to watch the video version of this tutorial, just click here.
1. Install Squid and SquidGuard
1.1 On your pfSense WEBGui.. go to System >> Packages
1.2 On Available Packages, scroll down and look for SQUID
1.3 click the + (install squid package) button at the right side to install Squid
1.4 Click Confirm. pfsense will download and install squid package
1.5 Repeat the steps , do the same for SquidGuard
1.5 Repeat the steps , do the same for SquidGuard
2. Configure Squid
2.1 Go to Services >> ProxyServer
2.2 Select LAN >> Uncheck/disable "AllowUsersOnInterface"
2.3 Enable/Check TransparentProxy and EnableLogging
2.4 Save
3. Configure SquidGuard
3.1 Go to Services >> ProxyFilter
3.2 On GeneralSettings Tab >> Enable GUIlog >> Enable Log >> Check/Enable BlackList
3.3 Copy and paste the link on BlackList URL
http://www.shallalist.de/Downloads/shallalist.tar.gz
3.4 SAVE
3.5 Go to BlackList Tab >> Click DOWNLOAD
4. Configure the BlackList on CommonACL
4.1 Go to CommonACL Tab
4.2 You should see TargetRulesList click here
4.3 Click on the "PLAY icon" in green color to bring down the rules or TargetCategories
4.4 Scroll down, look for "Default access [all]" then make the Access = ALLOW
4.5 Now select any category that you want to deny access ... let's block porn sites as example
4.6 select " [blk_BL_porn]" then Access=DENY (note: this will deny access to pornsites, are you sure?? hehe :D )
4.7 Enable LOG >> Enable "Do not allow IP-Addresses in URL"
4.8 Save
5. Activate/Enable SquidGuard
5.1 Go back to GeneralSettings Tab of ProxyFilter
5.2 Check ENABLE
5.3 Click APPY
6. Go to Services >> ProxyServer >> General Tab
6.1 Check/Enable "Allow users on interface"
6.2 Save
2.1 Go to Services >> ProxyServer
2.2 Select LAN >> Uncheck/disable "AllowUsersOnInterface"
2.3 Enable/Check TransparentProxy and EnableLogging
2.4 Save
3. Configure SquidGuard
3.1 Go to Services >> ProxyFilter
3.2 On GeneralSettings Tab >> Enable GUIlog >> Enable Log >> Check/Enable BlackList
3.3 Copy and paste the link on BlackList URL
http://www.shallalist.de/Downloads/shallalist.tar.gz
3.4 SAVE
3.5 Go to BlackList Tab >> Click DOWNLOAD
4. Configure the BlackList on CommonACL
4.1 Go to CommonACL Tab
4.2 You should see TargetRulesList click here
4.3 Click on the "PLAY icon" in green color to bring down the rules or TargetCategories
4.4 Scroll down, look for "Default access [all]" then make the Access = ALLOW
4.5 Now select any category that you want to deny access ... let's block porn sites as example
4.6 select " [blk_BL_porn]" then Access=DENY (note: this will deny access to pornsites, are you sure?? hehe :D )
4.7 Enable LOG >> Enable "Do not allow IP-Addresses in URL"
4.8 Save
5. Activate/Enable SquidGuard
5.1 Go back to GeneralSettings Tab of ProxyFilter
5.2 Check ENABLE
5.3 Click APPY
6. Go to Services >> ProxyServer >> General Tab
6.1 Check/Enable "Allow users on interface"
6.2 Save
DONE!
NOTE: Don't forget to click SAVE then APPLY SETTINGS everytime you make changes..
"After changing configuration squidGuard you must apply all changes"
If you like to watch the video version of this tutorial, just click here.Thanks!
more video tutorials here.
NOTE: Don't forget to click SAVE then APPLY SETTINGS everytime you make changes..
"After changing configuration squidGuard you must apply all changes"
If you like to watch the video version of this tutorial, just click here.Thanks!
more video tutorials here.
