Editing PF Sense Firewall Implementation at GIPL (section)

== Configuration Of Squid and Squidguard:- ==
'''Reference - '''[https://doc.pfsense.org/index.php/SquidGuard_package https://doc.pfsense.org/index.php/SquidGuard_package]


Login to your pfsense's Web Administrator, and click on "Server -> Packages", scroll down the list and find squid and click on "+" button to install, wait for the process to finish then return to the packages section and look for squidguard and install that package as well.

[[Image:Gpil-034.jpg]]


Now go to "Services" menu and look for Proxy Server & Proxy Filter 

[[Image:Gpil-035.jpg]]

(We are setting up the proxy server as a transparent proxy)


Click on Services -> Proxy Server.

On the General Tab, you want to set the following settings, the Proxy Interface Option should be set to "LAN", to set up transparent proxy server, tick the "Transparent Proxy" check box.


[[Image:Gpil-036.jpg]]


Tick the "Enabled Logging" Checkbox, set the log store to the default location " /var/squid/logs " rotate your logs every 30 days, set your proxy port to port number 3128 We have By-passed Proxy for 203.77.192.49/28, These are the Local Servers.


Next click on the "Cache Mgmt." tab, by default the Hard Disk Cache Size is set to 100mb, we have allocated 100GB , Memory Cache Size 3072 .


[[Image:Gpil-037.jpg]]

Click on Save.

Click on the Access Control Tab next, in the allowed subnets field type in your required subnets. As we have multiple Subnets, so we are going to define all.


[[Image:Gpil-038.jpg]]

'''203.77.201.129/29'''

'''10.1.224.1/24'''

'''203.77.192.49/28'''

'''203.77.206.57/29'''

'''203.77.206.17/29'''

'''203.77.201.137/29'''

'''10.33.50.1/27'''

Click On Save 


Now that’s is the proxy server configured, next we are going to configure SquidGuard, click on the Services menu and select the Proxy Filter button, tick the following 3 check boxes "Enable", "Enable GUI Log" and "Enable Log" then click the Save button, once the page has reloaded click on apply and then confirm that the Squidguard service is running by making sure the SquidGuard status is set to STARTED.


[[Image:Gpil-039.jpg]]


Click on the Black list tab and add URL '''http://www.shallalist.de/Downloads/shallalist.tar.gz''' to the Update Address and click on Download. Wait for the process to complete.

[[Image:Gpil-040.jpg]]

[[Image:Gpil-041.jpg]]

'''Now we can set up common ACL’s'''

[[Image:Gpil-042.jpg]]

[[Image:Gpil-043.jpg]]


'''Click on Save and restart the Squid and SquidGuard from Services. '''