OPNsense Forum

English Forums => Web Proxy Filtering and Caching => Topic started by: rgza on October 15, 2020, 02:18:08 pm

Title: Correct Web Proxy configuration
Post by: rgza on October 15, 2020, 02:18:08 pm
Hello.

I have a question about the correct Web Proxy configuration.

Version of OPNsense - 20.7.3

I read the setup instructions - Documentaion/wiki

My workflow for setting up
1. Services-Web Proxy-Administration-General Proxy Settings: Enable proxy check.
2. Services-Web Proxy-Administration-Authentication settings: Authentication Method - Local Database.
3. System-Access-Groups: created a new group.
4. System-Access-Users: added two new users.
5. System-Access-Groups: added users to a new group.
6. System-Access-Tester: both users test passed.
7. Firewall-Rules-LAN: added two rules to block http/https bypass.
8. Save settings and restart services.
9. Configured the computer to use a proxy, correct ip-address and port number.

When connecting computer to the Internet via a proxy, with correct username & password - I don't pass verification & don't get access to the Internet.

Please help me. What I'm doing wrong?
Title: Re: Correct Web Proxy configuration
Post by: Amr on October 18, 2020, 07:49:02 am
hello rgza,
Does the proxy work like intended (HTTP/S) when you disable authentication?
If so I'd go to Firewall logs and search if the authentication is being blocked by the firewall and open the assosicated port.
Title: Re: Correct Web Proxy configuration
Post by: rgza on October 19, 2020, 01:52:13 pm
Thank you.
If a username with a capital letter - authentication fails.
If a username with all small letters - authentication pass.
Title: Re: Correct Web Proxy configuration
Post by: spetrillo on October 25, 2020, 06:27:45 pm
I have read way too many documents on setting up web proxy and have never gotten it to work. Is the wiki the best source, as I have also read this: https://www.tcptechs.com/opnsense-transparent-caching-filtering-proxy-with-virus-scanning/, but this was written on the v17 platform.

I wouold love to see an updated document, to get this right.