Posts
Create your own Nameserver using TinyDns on Pfsense
If you ever thought of hosting your own Public DNS for your own domain then this article is going to be of help for you as I will go through the process of hosting my own Public DNS for my freely acquired domain www.moh10ly.cf These free domain providers have poor Public DNS capabilities and usually lack of many DNS records e.g. (SRV, TXT, PTR) and that what made me personally want to go on and host my own public DNS for this domain. I'm going to use Pfsense 2.1.5 for this demonstration but I guess 2.2 also works as well but haven't tried TinyDns on it yet. Ok so t o configure your own nameserver, first you must have a public domain (domain.com) .. In this example I will register a free domain from this registrar: www.freenom.com The process for registration is pretty simple, you will have to follow the wizard and validate your email then sign in to your portal to edit or configure your free domain. I have already added a new domain ...
Setup Squid Guard (Proxy Server) on Pfsense
In order to setup Squid Guard you should have two packages installed on your Pfsense for it to work properly. First package should be Squid 3 (In case you're publishing Exchange web services with it) or Squid if not. Second Package would be Squid Guard-Squid3 for Squid 3 or in case you don't have Squid 3 you can use the normal "Stable" Squid-Guard version for Squid. In my case I am using Squid 3 because I use its reverse proxy to publish Exchange web services so I will install SquidGaurd-Squid 3 to configure its proxy server. I already downloaded and installed it but If you didn't do so then you will have to navigate to >System > Packages >Available Packages and there you can find it and install it. From the Services Menu drop down you will find those 3 below (Proxy Filter, Proxy Server and Reverse Proxy) First I will go to Proxy Server tick which Interfaces I want to enable the proxy on ( LAN, DMZ ) and Enable " Tra...
Block Facebook on Pfsense using WPAD Autodiscover feature
How to Block Facebook on HTTPS on Squid proxy server without importing IPS/CIDR or configure Clients browsers for the Proxy settings using the WPAD Autodiscover for Squid feature Note: Before you begin reading this article, you must have the proxy filter configured to deny SocialNet in the blacklist in Service / Proxy Filter / Common ACL In order to block Facebook or any other website on HTTPs protocol on pfsense (SQUID) without finding all the CIDR or IPs to block facebook or any other website's IPs we will have to use the Squid proxy's Autodiscover feature which uses Wpad file .. Let's say similar to how Exchange uses Autodiscover's XML file. Prerequisites In order to block sites on HTTPS you will need to have SQUID Guard proxy installed and configured on Pfsense. If you don't know how you can look it up here . In order to use this feature you will have to disable the transparent mode on Squid server, To do so navigate to proxy server un...