3

I've been trying to get this to work for days now and its not working. After bashing my head against the desk enough times, I've decided to man up and ask.

I'm desperately trying to set up a reverse proxy on the pfsense box itself. One because its a pretty powerful box and its not being utilized to the maximum at all and two because I don't have any spare machines to setup squid (or any other reverse proxy [capable]) server on.

So, on pfsense, everytime I set up rules (on Services>Proxy Server>General) as so:

acl surveillance dstdomain surveillance.myweb.local;
acl camera dstdomain camera.myweb.local;
http_access allow surveillance AND camera

(ad nauseum)

when I check the services, squid stops and refuses to restart until I remove them pesky acls that are supposed to make my life easier!

  1. What am I doing wrong?
  2. How can I get it to work?
  3. Is there another way/package I can use?

Thanks

2
  • What version of pfSense are you running? Is it the 1.2.x branch or the 2.x experiemental? Older? Jun 17, 2010 at 16:36
  • PFsense 1.2.3 release. Jun 18, 2010 at 9:27

2 Answers 2

1

1) strip out the semi-colons, I don't think you need them. Or, at least I don't have any in my squid.conf (not in 2.x or 3.x), and they work :-)

2) Shouldn't

http_access allow surveillance AND camera

be just

http_access allow surveillance camera

If that does not work, is there something in the Squid error log which would tell you why the acl rules fail?

0

Are you sure there should be semi-colons at the end of the acl lines? Squid 2.7 doesn't seem to use them. Ex:

acl Safe_ports port 80 443 21

1
  • Yes, its written on the page that you need to separate acls with semi-colons. Jun 18, 2010 at 9:28

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .