Forward Proxy on External Interface

[hopey]

Hello together,

I'm quite new to firewall configuration and as it is quite important to make no stupid mistakes here, I would appreciate your opinion on this topic quite a lot.

I plan to have a forward proxy on an external interface of my opnsese installation (I already have a fixed ip address for vpn purposes). The reason is a quite restrictive filter proxy on my jobs pc. I have some chat applications that are blocked there. But in these applications, I can add a proxy server. As I don't want to have some service provider scanning my network traffic, I want to use my opnsense to root all chat traffic through my place at home to undermine the job proxy.

Can you please give me some hint, how I can build up such a configuration best / safest?

Thanks a lot in advance!
Matthias

[errored out]

It sounds like you will be connecting your computer at work to a VPN on your home FW.  Then using "split tunnel" for your chatting programs to use a vpn connection to your home FW, and use FW to to proxy this traffic.  Is that correct?

If so, you may not need to do that.  I know split tunneling is possible and I would normally say use the VPN only and ditch the proxy; however, I have not tried with Opnsense. 

These configurations are assuming you are using openvpn.


https://forum.opnsense.org/index.php?topic=9513.msg43228#msg43228
https://forum.opnsense.org/index.php?topic=15382.msg70081#msg70081