OPNsense Forum

Archive => 16.7 Legacy Series => Topic started by: rafaelpessoa on January 02, 2017, 11:46:36 AM

Title: Proxy access rules per group
Post by: rafaelpessoa on January 02, 2017, 11:46:36 AM
Hello everyone,

Does anyone know how I configure the proxy so I can have different rules per user group? I've done several searches but I have not found a way for the proxy to have different rules for each user group.

Where we work we have different rules for users, managers and directors.

How can I solve this?
Title: Re: Proxy access rules per group
Post by: monstermania on January 02, 2017, 02:31:45 PM
Hi,
right now the OPNSense proxy don't support any kind of ruleset by groups.  :'( I'm missing this feature too!
Maybee it is possible to add this feature by edit the proxy config files by shell!?
AFAIK pfsense supports proxy ruleset by groups into the ui.

regards
Dirk
Title: Re: Proxy access rules per group
Post by: fabian on January 02, 2017, 02:39:04 PM
Quote from: monstermania on January 02, 2017, 02:31:45 PM
Maybee it is possible to add this feature by edit the proxy config files by shell!?

At the moment It is possible to add a configuration file, which will be included when you save the proxy settings in the GUI. You can create this file and allow / reject connections based on this settings.

Keep in mind that this can possibly break the proxy configuration or something does not work as expected because you forgot something.
Title: Re: Proxy access rules per group
Post by: dataseg on April 07, 2017, 05:55:03 PM
Hi!
I'm also interested in this feature, and I still haven't found a way to set rules per group of users via GUI.
@fabian & @monstermania: Could you, please, tell us which are the proxy config files? Please, excuse me if this is an obvious "rtfm" question... Or just tell us the folder(s)...

With regards,
Daniel Tase Guerra
Title: Re: Proxy access rules per group
Post by: fabian on April 07, 2017, 07:53:43 PM
Just search for the includes:
https://github.com/opnsense/core/blob/master/src/opnsense/service/templates/OPNsense/Proxy/squid.conf#L279