WPAD inquiry

[jp26198926]

Hi Sir,

i found this opnsense by accident and i read the documentation and it looks good.

may i know if you have a step by step wpad setup in opnsense?

in pfsense i mostly rely on wpad and squidguard to filter https content w/o changing settings in the client side. i just want to know if that is still applicable in opensense?

Thanks,

[fabian]

in pfsense i mostly rely on wpad and squidguard to filter https content w/o changing settings in the client side. i just want to know if that is still applicable in opensense?

* squidguard is not supported - content is filtered using native acls of squid
* WPAD is open as a Pull Request on GitHub. You can apply the patch manually but if you don't know how it is done, you may break your proxy config so I would suggest you to wait until it is merged. As an alternative, you can configure the Proxy as a transparent proxy:
https://docs.opnsense.org/manual/how-tos/proxytransparent.html

[mimugmail]

in pfsense i mostly rely on wpad and squidguard to filter https content w/o changing settings in the client side. i just want to know if that is still applicable in opensense?

* squidguard is not supported - content is filtered using native acls of squid
* WPAD is open as a Pull Request on GitHub. You can apply the patch manually but if you don't know how it is done, you may break your proxy config so I would suggest you to wait until it is merged. As an alternative, you can configure the Proxy as a transparent proxy:
https://docs.opnsense.org/manual/how-tos/proxytransparent.html

Fabian, do you know why it's not yet merged? A client was asking yesterday about WPAD :)

[fabian]

Fabian, do you know why it's not yet merged? A client was asking yesterday about WPAD :)

Probably due to limited time of Franco. FYI This is what you need:


https://github.com/opnsense/core/pull/2018 - Proxy PAC (required component)
https://github.com/opnsense/core/pull/2088 - WPAD via DHCP (optional component -> this way Windows detects the proxy; requires DNS support)
https://github.com/opnsense/core/pull/2097 - WPAD via DNS (suggested component -> this way Firefox detects the proxy)

[jp26198926]

Hi @frabian,

Thanks for the info. it's highly appreciated.

i have 1 query on the link you provide. https://docs.opnsense.org/manual/how-tos/proxytransparent.html

what if i do not do the Step 8 - Configure OS/Browser on the client side, would the https sites still be filtered?

Thanks,

[fabian]

what if i do not do the Step 8 - Configure OS/Browser on the client side, would the https sites still be filtered?

yes but you would permanently get error messages like "This connection is untrusted", "Signed by an unknown issuer" etc.

In other words it makes the web hard to use.

[franco]

We will pick this up soon. 18.1 is in a solid state to receive new features now. :)


Cheers,
Franco