[pfSense Support] SNAPSHOT_04-06-2006 ??'s

2006-04-07 Thread David Strout
Everyone, Some nice additions to this rel. .. KUDOS!! A question though on port redirecting ... Here is the setup: --> pfSense boxes acting as a contractor GW w/ LAN, WAN, OPT1(DMZ) and OPT2(PROXY) --> WAN is static (business DSL w/ 8 addresses) w/ global IP. --> LAN is private 192.168.100.0/

Re: [pfSense Support] SNAPSHOT_04-06-2006 ??'s

2006-04-07 Thread Bill Marquette
I probably don't fully understand what you're trying to do, but try a Port Forward on the LAN interface and redirect all source to all dest port 80 to the proxy port on the IPCop. Ditto for HTTPS, although I'm not sure you can transparently proxy HTTPS. --Bill On 4/7/06, David Strout <[EMAIL PRO

Re: [pfSense Support] SNAPSHOT_04-06-2006 ??'s

2006-04-07 Thread David Strout
server. Hope that helps to clarify for all ... Thanks in advance ... -- David L. Strout Engineering Systems Plus, LLC - Original Message - Subject: Re: [pfSense Support] SNAPSHOT_04-06-2006 ??'s From: [EMAIL PROTECTED] To: support@pfsense.com Date: 04-07-2006 2:58 pm > I probabl

Re: [pfSense Support] SNAPSHOT_04-06-2006 ??'s

2006-04-07 Thread Scott Ullrich
t; Hope that helps to clarify for all ... > > Thanks in advance ... > > -- > David L. Strout > Engineering Systems Plus, LLC > > - Original Message - > Subject: Re: [pfSense Support] SNAPSHOT_04-06-2006 > ??'s > From: [EMAIL PROTECTED] > To: support

Re: [pfSense Support] SNAPSHOT_04-06-2006 ??'s

2006-04-07 Thread Bill Marquette
On 4/7/06, David Strout <[EMAIL PROTECTED]> wrote: > Thanks for the reply. > > Yes, I am trying to redirect all http(s) traffic > (while not interrupting any other traffic) to the > proxy server on the OPT2 network to either > transparently proxy or possibly authenticate users > for http(s) access.

Re: [pfSense Support] SNAPSHOT_04-06-2006 ??'s

2006-04-07 Thread Gary Buckmaster
A cleaner solution would be to introduce proxy settings into the user's browsers (assuming Windows you can do this with a group policy) and its fairly trivial to set up NTLM authentication with squid so that you don't have to prompt the users for authentication credentials. The same can be don