Messages

I want allow access only to some sites, so I enabled the "Transparent HTTP proxy" and I put this in WhiteList:
   
    http://mailserver.domain.it
    https://mailserver.domain.it

If I don't put anything in BlackList all works but users can navigate everywhere; if I put "." or "^." in Black list all other site are blocked but only the http site in WL works, the https return:

    The following error was encountered while trying to retrieve the URL: https://2.xx.xxx.xx/*

    Access Denied.

    Access control configuration prevents your request from being allowed at this time. Please contact your service provider if you feel this is incorrect.

why is this happening?

Bye, Claudio.

It turned out that the problem was not with https but with white and black lists in ACL.
I want to allow only some site in the form of http://*.domain.com/* and https://*.domain.com/*, can someone help me with white and black lists in ACL. I found that ^. in black list block all site, but then also white listed sites are blocked.

Bye, Claudio.

I tried to import this way but nothing changed, hope someone have some ideas.
Thanks anyway.

Claudio.

Yes, I followed the guide and tried installing the certificate in OS (Win 10, right click then install) and in browser but nothing worked.
With an HTTPS site it propose me to acquire the certificate but then it say

>The following error was encountered while trying to retrieve the URL: https://x.xx.xxx.xx/*
>
>   Access Denied.
>
>Access control configuration prevents your request from being allowed at this time. Please contact your service >provider if you feel this is incorrect.

like it was not in whitelist, but the same site is accessed well in HTTP.

Thanks, Claudio.

Hi, I'm new to OPNsense and I'm trying to use it and its proxy to allow web access to users only to some site and the most important use HTTPS protocol.
Unfornatly it does not work, every time I receive the message that the connection is no secure (does not accept exception) or not event propose exception saying the site is using HSTS (HTTP Strict Transport Security).
I attached my configurarion, hope someone can help me.

Bye, Claudio.