Hi,
I enabled the Squid web proxy, but it is refusing connections.
Under "Authentication method" the only options are "Local Database" or "Nothing selected". How can I disable the authentication?
Still struggling here. The documentation (https://docs.opnsense.org/manual/proxy.html) says:
QuoteAuthenticators�
User authentication can be done using OPNsense standard and built-in authenticators. Currently these include:
LDAP (incl. Microsoft Active Directory)
Radius
Local user manager
No authentication
These options can be found in the Web Proxy -> Administration -> Forward Proxy -> Authentication Settings section.
Here, it's called
Squid Web Proxy
and the only option is
Local database
What am I doing wrong?
Did you add the client networks? I am not using Squid on OPNsense but from some projects decades ago I vaguely remember that you must configure the clients permitted to use Squid. Should be easy enough to find in the UI.
Yes, I have configured my whole 192.168.100.0/24 as well as the complete ULA range fd00::/7 and my ULA range fda6::/64.
No matter if I use the IPv4 address of the router or the ULA address, my browser says:
The proxy server is refusing connections
Refusing connections means it is not listening on the IP address and/or port your browser tries to use. Either the listen settings for Squid are "wrong" in some way or you do not have a firewall rule permitting the connection.
Seems squid is not listening on port 3129.
root@OPNsense:~ # sockstat -l | grep 312
squid squid 6485 27 tcp4 192.168.100.1:3128 *:*
squid squid 6485 28 tcp6 2003:a:XXXX:XXXX::XXXX:3128 *:*
squid squid 6485 29 tcp6 fda6::1:3128 *:*
But SSL port 3129 is configured in the WebUI. What am I doing wrong?