OPNsense Forum

English Forums => Web Proxy Filtering and Caching => Topic started by: bamf on March 11, 2025, 09:58:10 AM

Title: Disable Authentication for Squid
Post by: bamf on March 11, 2025, 09:58:10 AM
Hi,

I enabled the Squid web proxy, but it is refusing connections.

Under "Authentication method" the only options are "Local Database" or "Nothing selected". How can I disable the authentication?
Title: Re: Disable Authentication for Squid
Post by: bamf on March 13, 2025, 10:05:36 AM
Still struggling here. The documentation (https://docs.opnsense.org/manual/proxy.html) says:

QuoteAuthenticators�

User authentication can be done using OPNsense standard and built-in authenticators. Currently these include:

    LDAP (incl. Microsoft Active Directory)

    Radius

    Local user manager

    No authentication

These options can be found in the Web Proxy -> Administration -> Forward Proxy -> Authentication Settings section.

Here, it's called Squid Web Proxy and the only option is Local database What am I doing wrong?
Title: Re: Disable Authentication for Squid
Post by: Patrick M. Hausen on March 13, 2025, 10:26:09 AM
Did you add the client networks? I am not using Squid on OPNsense but from some projects decades ago I vaguely remember that you must configure the clients permitted to use Squid. Should be easy enough to find in the UI.
Title: Re: Disable Authentication for Squid
Post by: bamf on March 14, 2025, 10:17:33 AM
Yes, I have configured my whole 192.168.100.0/24 as well as the complete ULA range fd00::/7 and my ULA range fda6::/64.

No matter if I use the IPv4 address of the router or the ULA address, my browser says:

The proxy server is refusing connections
Title: Re: Disable Authentication for Squid
Post by: Patrick M. Hausen on March 14, 2025, 10:53:12 AM
Refusing connections means it is not listening on the IP address and/or port your browser tries to use. Either the listen settings for Squid are "wrong" in some way or you do not have a firewall rule permitting the connection.
Title: Re: Disable Authentication for Squid
Post by: bamf on March 20, 2025, 11:27:29 AM
Seems squid is not listening on port 3129.

root@OPNsense:~ # sockstat -l | grep 312
squid    squid       6485 27  tcp4   192.168.100.1:3128    *:*
squid    squid       6485 28  tcp6   2003:a:XXXX:XXXX::XXXX:3128 *:*
squid    squid       6485 29  tcp6   fda6::1:3128          *:*

But SSL port 3129 is configured in the WebUI. What am I doing wrong?