Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I've been trying to get this to work for days now and its not working. After bashing my head against the desk enough times, I've decided to man up and ask.

I'm desperately trying to set up a reverse proxy on the pfsense box itself. One because its a pretty powerful box and its not being utilized to the maximum at all and two because I don't have any spare machines to setup squid (or any other reverse proxy [capable]) server on.

So, on pfsense, everytime I set up rules (on Services>Proxy Server>General) as so:

acl surveillance dstdomain surveillance.myweb.local;
acl camera dstdomain camera.myweb.local;
http_access allow surveillance AND camera

(ad nauseum)

when I check the services, squid stops and refuses to restart until I remove them pesky acls that are supposed to make my life easier!

  1. What am I doing wrong?
  2. How can I get it to work?
  3. Is there another way/package I can use?

Thanks

share|improve this question
    
What version of pfSense are you running? Is it the 1.2.x branch or the 2.x experiemental? Older? –  TrueDuality Jun 17 '10 at 16:36
    
PFsense 1.2.3 release. –  Mustafa Ismail Mustafa Jun 18 '10 at 9:27

2 Answers 2

1) strip out the semi-colons, I don't think you need them. Or, at least I don't have any in my squid.conf (not in 2.x or 3.x), and they work :-)

2) Shouldn't

http_access allow surveillance AND camera

be just

http_access allow surveillance camera

If that does not work, is there something in the Squid error log which would tell you why the acl rules fail?

share|improve this answer

Are you sure there should be semi-colons at the end of the acl lines? Squid 2.7 doesn't seem to use them. Ex:

acl Safe_ports port 80 443 21

share|improve this answer
    
Yes, its written on the page that you need to separate acls with semi-colons. –  Mustafa Ismail Mustafa Jun 18 '10 at 9:28

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.