> On Oct 11, 2017, at 1:05 PM, Adam Cage <adamcag...@gmail.com> wrote: > > Dear Chris, I need the Squid proxy to filter traffic working with > Squidguard. The guest cell phones will be authenticated to my WiFi, and > after that they can go to HTTP/HTTPS web sites with zero configuration > because I can't tell my guests to setup a CA certificate, a proxy IP and > port in their phone's browsers or whatever at all. So I need a transparent > proxy. > > Squid also let me have web traffic statistics with its logs. > > Thanks again.
You can do it with SSL Peek/Splice but you cannot get a standard “site blocked” page you just get broken SSL negotiations for blocked sites. The best thing to do, if you have pfSense Gold, is to watch the hangout from January 2017 "Squid, SquidGuard, and Lightsquid” This is all covered. > > 2017-10-11 16:56 GMT-03:00 Chris L <c...@viptalk.net>: > >> >>> On Oct 11, 2017, at 12:54 PM, Adam Cage <adamcag...@gmail.com> wrote: >>> >>> Dear people, I have pfSense 2.3 with Squid and Squidguard installed. >>> >>> I need a transparent proxy in order to let every cell phone that uses the >>> WiFi service, go to the web without any extra configuration...just go to >>> the web in a 100% transparent way. >>> >>> I've read that this is impossible because for HTTPS traffic I have to >>> intercept it, also create a CA certificate and installing it in every >> cell >>> phone client....but this is not what I want because it implies a >>> certificate installation task (I repeat I want 100% transparent mode). >>> >>> Is there any manner to setup a transparent HTTP/HTTPS proxy without >> setting >>> up the CA certificate in the cell phone guests clients from my WiFi ??? >> My >>> scenario is that a person comes to my company, uses the WiFi with zero >>> configuration accessing to HTTP/HTTPS web sites, and finally leaves. >>> >>> Special thanks. >>> >>> ADAM >> >> What are you looking to accomplish with the proxy in the first place? >> >> >> _______________________________________________ >> pfSense mailing list >> https://lists.pfsense.org/mailman/listinfo/list >> Support the project with Gold! https://pfsense.org/gold >> > _______________________________________________ > pfSense mailing list > https://lists.pfsense.org/mailman/listinfo/list > Support the project with Gold! https://pfsense.org/gold _______________________________________________ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
