Editing PFSense Firewall Configuration at Design Atiliers

[[category:Design Ateliers]]


<center><u>'''Pfsense Firewall Configuration'''</u></center>

[[Image:Design-1.png]]


== '''Installing Squid:-''' ==


'''Click on''' '''System -> Packages''' '''-> available packages->squid'''

'''Click '''&nbsp;'''on "+" button to&nbsp;install.'''

'''Installing SquidGuard:-'''

'''Click on''' '''System -> Packages''' '''-> available packages->squidGuard'''

'''Click '''&nbsp;'''on "+" button to&nbsp;install.'''

[[Image:Design-2.png]]



== '''User Rights ''' ==




{| style="border-spacing:0;"
| style="border:none;padding:0.049cm;"| '''Group'''
| style="border:none;padding:0.049cm;"| '''Members'''
| style="border:none;padding:0.049cm;"| '''IP'''
| style="border:none;padding:0.049cm;"| '''Rights'''

|-
| style="border:none;padding:0.049cm;"| '''Admin'''
| style="border:none;padding:0.049cm;"| Vishal
| style="border:none;padding:0.049cm;"| 192.168.0.140
| style="border:none;padding:0.049cm;"| Railways

|-
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| RA
| style="border:none;padding:0.049cm;"| 192.168.0.171
| style="border:none;padding:0.049cm;"| Airlines

|-
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| Dvat

|-
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| Service Tax

|-
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| Income tax

|-
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| Gmail

|-
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| Bank Sites

|-
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| Finance sites

|-
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| Computax updates

|-
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| Tally updates

|-
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| Form 26as/form 16/form 16a

|-
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| Wct TDS deposites/certificates

|-
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 

|-
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 

|-
| style="border:none;padding:0.049cm;"| '''Principal'''
| style="border:none;padding:0.049cm;"| Ashish Karode
| style="border:none;padding:0.049cm;"| 192.168.0.151
| style="border:none;padding:0.049cm;"| Full 

|-
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| Sushil Ji
| style="border:none;padding:0.049cm;"| 192.168.0.123
| style="border:none;padding:0.049cm;"| Full 

|-
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 

|-
| style="border:none;padding:0.049cm;"| '''Special User'''
| style="border:none;padding:0.049cm;"| Abdul
| style="border:none;padding:0.049cm;"| 192.168.0.163
| style="border:none;padding:0.049cm;"| Adove Update

|-
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| Chetanya
| style="border:none;padding:0.049cm;"| 192.168.0.241
| style="border:none;padding:0.049cm;"| Adove Update

|-
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 

|-
| style="border:none;padding:0.049cm;"| '''All'''
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| Google Images

|-
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| [http://www.bibliocad.com/ www.bibliocad.com]

|-
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| [http://www.revitcity.com/ www.revitcity.com]

|-
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| [http://www.augi.com/ www.augi.com]

|-
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| concert/sms

|-
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| autodesk.com

|-
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| fonts.com

|-
| style="border:none;padding:0.049cm;"| '''Blocked Sites'''
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| Adult Content

|-
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| Music

|-
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| Downloading

|-
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| Social Media

|-
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| 
| style="border:none;padding:0.049cm;"| Movies

|}

== '''Configuring Squid Proxy:-''' ==


'''Click on''' '''Services -> Proxy Server->'''


[[Image:Design-3.png]]

[[Image:Design-4.png]]


== '''Define Network and Whitelisting:-''' ==


[[Image:Design-5.png]]

[[Image:Design-6.png]]



== '''Configuring SquidGuard:-''' ==


'''Click on''' '''Services ->SquidGuard Proxy->'''

[[Image:Design-7.png]]

[[Image:Design-8.png]]

'''Now Click on Blacklist Tab:-'''

[[Image:Design-9.png]]

'''Click on Download. It will configure automatic.'''

'''Next click on Common ACL:-'''

[[Image:Design-10.png]]

'''Now Click on Target categories:-'''

'''Create New Category “local “ to allow everyone—'''

[[Image:Design-11.png]]

'''Create Category “google_images” to allow google images-'''

[[Image:Design-12.png]]

'''Create Target “adobe_update”- to allow Adobe update-'''

[[Image:Design-13.png]]

'''Create Target “Tally_update” – to update tally-'''

[[Image:Design-14.png]]


'''Now Click on Groups Acl tab- to define Groups:-'''

'''Create New Group “Full_Access”- To Define Full Access:-'''

[[Image:Design-15.png]]

[[Image:Design-16.png]]

'''Create Group “Admin” –'''

[[Image:Design-17.png]]

[[Image:Design-18.png]]


'''Create Group “Super_User” –'''

[[Image:Design-19.png]]

[[Image:Design-20.png]]

'''Now Click on General Settings Under SquidGuard:-'''

'''Check Mark Enable and click on Apply:-'''

[[Image:Design-21.png]]


'''Finally Check All services should be running:-'''

[[Image:Design-22.png]]


'''Thanks:-'''