OPNsense Forum

Archive => 17.1 Legacy Series => Topic started by: terence@realvision.co.za on April 12, 2017, 02:58:22 pm

Title: Web Proxy and https
Post by: terence@realvision.co.za on April 12, 2017, 02:58:22 pm

Hi

I was hoping someone could help.

Is there a way to block https like https:\\facebook.com using the webproxy?

the web proxy is attractive as it will also allow exemptions for certain Local IP's

Title: Re: Web Proxy and https
Post by: fabian on April 12, 2017, 03:45:20 pm

You need to enable the HTTPS proxy. For domain only you can set the appropriate flag so the connections are not bumped (users will not recognise that the proxy is filtering HTTPS when the page is not blocked).

Title: Re: Web Proxy and https
Post by: terence@realvision.co.za on April 12, 2017, 04:22:12 pm

How does one enable the https proxy

Title: Re: Web Proxy and https
Post by: fabian on April 12, 2017, 06:03:40 pm

a NAT rule and checking two boxes in the forward proxy settings.

Title: Re: Web Proxy and https
Post by: terence@realvision.co.za on April 12, 2017, 06:20:50 pm

Thanks. Could you please elaborate. Noobie

Title: Re: Web Proxy and https
Post by: fabian on April 12, 2017, 06:49:37 pm

forward 443 to your HTTPS proxy port (usually localhost:3129) in the firewall under port forwards and enable it before in the proxy settings - this are two check boxes.

Title: Re: Web Proxy and https
Post by: terence@realvision.co.za on April 13, 2017, 06:25:14 am

Thanks so I assume I am looking for

Enable ssl inspection
And
Enable transparent http proxy

Title: Re: Web Proxy and https
Post by: terence@realvision.co.za on April 13, 2017, 09:48:47 am

Hi

Followed a how to and got everything up and running, but Facebook would not load, am I missing something?

Regards