Issues with Squid

Although Squid is an extremely popular and useful package, there are some issues you should consider. First, Squid ACLs take precedence over any rules defined on the interfaces to which Squid binds. For example, assume that we have a rule for LAN to block access to a certain website. We subsequently install Squid and configure it to bind to LAN without configuring any of the ACLs (including the blacklist). Access to the site is not blocked by Squid. Once Squid is enabled, access to the blocked website will be possible, even though there is a firewall rule blocking the site.

The solution, of course, is to navigate to Services | Squid Proxy Server, then click on the ACL tab, and add the website to the Blacklist list box. The ...

Get Mastering pfSense now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.