OPNsense Forum

English Forums => 24.7, 24.10 Legacy Series => Topic started by: rookysteed on November 12, 2024, 09:51:48 AM

Title: Captive portal + SQuid together (web proxy) is it possible ?
Post by: rookysteed on November 12, 2024, 09:51:48 AM
hello,
we are testing Captive portal + squid.
They re working each other but not together.
Is there a good tutorial for this deployement ?
Title: Re: Captive portal + SQuid together (web proxy) is it possible ?
Post by: Monviech (Cedrik) on November 12, 2024, 09:59:23 AM
https://github.com/opnsense/core/issues/7557
Title: Re: Captive portal + SQuid together (web proxy) is it possible ?
Post by: rookysteed on November 12, 2024, 11:37:37 AM
Hello Cedrik, thank you for your answer.

So the answer is , they cannot work together, if i'm understanding ?

If we decide to only use captive portal : is Captive portal is logging web access site (for identified users)?

Or perhaps it's better to user squid with an authent page etc ?
Title: Re: Captive portal + SQuid together (web proxy) is it possible ?
Post by: Monviech (Cedrik) on November 12, 2024, 12:58:04 PM
Yes they can not work together.

The Captive Portal is just for authentication of users, not for logging which web sites are visited.

You could force all users to use Unbound and enable verbose logging so you can log all dns requests.

Title: Re: Captive portal + SQuid together (web proxy) is it possible ?
Post by: rookysteed on November 12, 2024, 03:23:15 PM
ok , thank you, i will do that.
Title: Re: Captive portal + SQuid together (web proxy) is it possible ?
Post by: rookysteed on November 20, 2024, 03:19:27 PM
few questions :

- Does captive portal auth log is stored somewhere ? (are they rsylog  compliant) ?
- Captive portal is not the same as pfsense one , why ? (there is more options)
- Captive portal as no HSTS option : this cause a big issue under Chrome (firefox end edge are ok)

thank you.