How to use squid web proxy without CA?

[Agg2u38]

Hi everyone. can someone help us on how to use squid without the needs to install CA. Also if it's possible to block vpn in opnsense?

[Monviech (Cedrik)]

- It is not possible to use TLS MITM without installing a CA certificate on all clients.
- You can block vpn in OPNsense, just block the well known ports these VPNs use. If the VPN should be blocked with DPI, you might need Zenarmor, though I don't know if it supports that (probably does though with application detection).

[Agg2u38]

In that case. Is there's any plugins that we can use beside on squid webproxy that also has the ACLs like in squid? We tried the quad9 but the blacklists there is limited unlike the ACL blacklist in squid.

[Monviech (Cedrik)]

You might want to ask in the Zenarmor section of this forum. They have the technologies you need. (especially if its something you want to use comercially)

If it's just some basic DNS blocking for private use, you can also consider the adguard plugin. The plugin is hosted by a community member and not in the standard repo:
https://www.routerperformance.net/opnsense-repo/

[Agg2u38]

Ok thank you so much