# Web Proxy, URL Filter & Update Accelerator

**URL:** https://community.ipfire.org/c/network/web-proxy/21.md?page=1

[Latest](https://community.ipfire.org/latest.md) · [Categories](https://community.ipfire.org/categories.md)

**Page:** 2

---

## [CommonName Usage in Certificate for URL Filtering](https://community.ipfire.org/t/commonname-usage-in-certificate-for-url-filtering/13338)

<div class="topic-metadata">

**Author:** [@florom](https://community.ipfire.org/u/florom)\
**Replies:** 5\
**Last updated:** [18 January 2025 23:04 UTC](https://community.ipfire.org/t/commonname-usage-in-certificate-for-url-filtering/13338 "2025-01-18T23:04:03Z")

</div>

Hello Devs, I heard that other Firewalls use for URL Filtering in https traffic the commonName of the certificate itself which allows Filtering without breaking the https encryption. With the commonName (CN) in the cer…

---

## [Microsoft Edge doing something weird](https://community.ipfire.org/t/microsoft-edge-doing-something-weird/13452)

<div class="topic-metadata">

**Author:** [@markadewet](https://community.ipfire.org/u/markadewet)\
**Replies:** 21\
**Last updated:** [14 January 2025 16:27 UTC](https://community.ipfire.org/t/microsoft-edge-doing-something-weird/13452 "2025-01-14T16:27:26Z")

</div>

Hi all, So I have this weird issue with Microsoft Edge and ONLY with Edge, no other browser. When I try to go to https://www.tomshardware.com I get back an error with “ERR\_TUNNEL\_CONNECTION\_FAILED”. This happens ONLY wit…

---

## [Core 190: Webproxis service did not start after reboot](https://community.ipfire.org/t/core-190-webproxis-service-did-not-start-after-reboot/13456)

<div class="topic-metadata">

**Author:** [@ritchie](https://community.ipfire.org/u/ritchie)\
**Replies:** 10\
**Last updated:** [11 January 2025 11:35 UTC](https://community.ipfire.org/t/core-190-webproxis-service-did-not-start-after-reboot/13456 "2025-01-11T11:35:27Z")

</div>

Hi, After some clients did not get access to the internet, I rebooted the firewall. Now the webproxis service did not start. I cleared the cache, restarted the service, but the service did not start. The log file is…

---

## [Squid was not started at RPI](https://community.ipfire.org/t/squid-was-not-started-at-rpi/11528)

<div class="topic-metadata">

**Author:** [@pslpsl](https://community.ipfire.org/u/pslpsl)\
**Replies:** 19\
**Last updated:** [10 January 2025 21:42 UTC](https://community.ipfire.org/t/squid-was-not-started-at-rpi/11528 "2025-01-10T21:42:23Z")

</div>

RPI with IPfire core 185. Maybe the problem was already in 184. IPfire is configured with transparent web proxy and it was working OK in the past. I found I cannot update Ubuntu PC that was connected to RPI with IPfire…

---

## [Strange question to proxy Authentication](https://community.ipfire.org/t/strange-question-to-proxy-authentication/13298)

<div class="topic-metadata">

**Author:** [@mumpitz](https://community.ipfire.org/u/mumpitz)\
**Replies:** 2\
**Last updated:** [26 December 2024 12:47 UTC](https://community.ipfire.org/t/strange-question-to-proxy-authentication/13298 "2024-12-26T12:47:07Z")

</div>

If the squid proxy is configured with local authentication, can the proxy also be used without logging in? In the proxy log, entries of URLs without usernames appear, e.g. login.live.com, which probably comes from the o…

---

## [Squid ipfire internet cache](https://community.ipfire.org/t/squid-ipfire-internet-cache/13325)

<div class="topic-metadata">

**Author:** [@mkataro](https://community.ipfire.org/u/mkataro)\
**Replies:** 2\
**Last updated:** [20 December 2024 23:25 UTC](https://community.ipfire.org/t/squid-ipfire-internet-cache/13325 "2024-12-20T23:25:32Z")

</div>

Would really like to have a bot at a specific time. Download a website. Fetching the page. 1-5 links deep. I know squid does caching but my Linux knowledge isn’t that deep. Not my idea. Microsoft has this technology sin…

---

## [Wpad.localdomain](https://community.ipfire.org/t/wpad-localdomain/13199)

<div class="topic-metadata">

**Author:** [@gw-ipfire](https://community.ipfire.org/u/gw-ipfire)\
**Replies:** 5\
**Last updated:** [19 November 2024 14:15 UTC](https://community.ipfire.org/t/wpad-localdomain/13199 "2024-11-19T14:15:30Z")

</div>

hi I’m continually having this conection in my log dns and he can disable wpad.localdomain I don’t use the proxy. ty

---

## [Adobe Acrobat freezes on "Certificate Refresh" while SQUID is on](https://community.ipfire.org/t/adobe-acrobat-freezes-on-certificate-refresh-while-squid-is-on/12195)

<div class="topic-metadata">

**Author:** [@hjkl](https://community.ipfire.org/u/hjkl)\
**Replies:** 1\
**Last updated:** [18 October 2024 05:54 UTC](https://community.ipfire.org/t/adobe-acrobat-freezes-on-certificate-refresh-while-squid-is-on/12195 "2024-10-18T05:54:32Z")

</div>

Hello, After many hours of debug I found out the reason why Adobe Acrobat Reader freezes on the routine that checks the Certificates (showing a download bar for http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50…

---

## [Problem with APT behind the proxy](https://community.ipfire.org/t/problem-with-apt-behind-the-proxy/12991)

<div class="topic-metadata">

**Author:** [@williste](https://community.ipfire.org/u/williste)\
**Replies:** 10\
**Last updated:** [9 October 2024 13:43 UTC](https://community.ipfire.org/t/problem-with-apt-behind-the-proxy/12991 "2024-10-09T13:43:24Z")

</div>

Hello to the community! I’m encountering a strange issue with the proxy server. I am using a RED + GREEN configuration with a parent proxy on RED and IPS disabled. Web traffic with authentication on the parent proxy w…

---

## [Problem with WPAD excluded url's](https://community.ipfire.org/t/problem-with-wpad-excluded-urls/12108)

<div class="topic-metadata">

**Author:** [@hjkl](https://community.ipfire.org/u/hjkl)\
**Replies:** 12\
**Last updated:** [25 September 2024 18:13 UTC](https://community.ipfire.org/t/problem-with-wpad-excluded-urls/12108 "2024-09-25T18:13:28Z")

</div>

I am posting here, I hope is ok: my squid dies because of a domain added inside section Web Proxy Auto-Discovery Protocol (WPAD) / Proxy Auto-Config (PAC), Excluded URL s (one per line): Any idea why I get an error whe…

---

## [Problem with proxy for a beginner](https://community.ipfire.org/t/problem-with-proxy-for-a-beginner/12061)

<div class="topic-metadata">

**Author:** [@williste](https://community.ipfire.org/u/williste)\
**Replies:** 3\
**Last updated:** [20 September 2024 11:35 UTC](https://community.ipfire.org/t/problem-with-proxy-for-a-beginner/12061 "2024-09-20T11:35:36Z")

</div>

Hello community! I’m a beginner on IpFire and I installed my firewall today but I’m having some problems… I have a simple green + red configuration. What works: \*ssh access and web interface from green or red \*hardw…

---

## [Allow squid transparent for SSL (blocking only)](https://community.ipfire.org/t/allow-squid-transparent-for-ssl-blocking-only/11967)

<div class="topic-metadata">

**Author:** [@nrm604](https://community.ipfire.org/u/nrm604)\
**Replies:** 21\
**Last updated:** [18 September 2024 19:27 UTC](https://community.ipfire.org/t/allow-squid-transparent-for-ssl-blocking-only/11967 "2024-09-18T19:27:52Z")

</div>

Hello, I just started w IPFire, and it’s cool! I was hoping to selectively allow HTTPS outbound from green servers, for security reasons No caching, no MITM. I just want to block all HTTPS sites by default, and allow …

---

## [Proxy crash / Squid issue](https://community.ipfire.org/t/proxy-crash-squid-issue/11484)

<div class="topic-metadata">

**Author:** [@sergio](https://community.ipfire.org/u/sergio)\
**Replies:** 28\
**Last updated:** [23 June 2024 23:24 UTC](https://community.ipfire.org/t/proxy-crash-squid-issue/11484 "2024-06-23T23:24:18Z")

</div>

Hey IP-Fire Community, I had some problems with my Proxy but thanks to the very good documentation on the IP-Fire i had it under control. After the Upgrade to 183/184 i had some Proxy/squid Problems. Under command in …

---

## [Files upload problem](https://community.ipfire.org/t/files-upload-problem/12001)

<div class="topic-metadata">

**Author:** [@rigoleto](https://community.ipfire.org/u/rigoleto)\
**Replies:** 0\
**Last updated:** [23 August 2024 16:43 UTC](https://community.ipfire.org/t/files-upload-problem/12001 "2024-08-23T16:43:51Z")

</div>

I have set up my ip fire only web proxy for the moment, running very smooth and fast. However, I have an issue, a couple of pages that "require uploading a PDF or XML file, won’t do it. It’s the only thing so far that it…

---

## [Adblock DNSBL at router level](https://community.ipfire.org/t/adblock-dnsbl-at-router-level/11932)

<div class="topic-metadata">

**Author:** [@himurae](https://community.ipfire.org/u/himurae)\
**Replies:** 1\
**Last updated:** [4 August 2024 15:31 UTC](https://community.ipfire.org/t/adblock-dnsbl-at-router-level/11932 "2024-08-04T15:31:52Z")

</div>

Is there any option yet to achieve something like unbound blacklist (similar to opnsense/adguard/pihole). something Designed to block domains at your ipFire firewall,I dont want to set up manual proxy in every device

---

## [Anomaly detections for one client did not allow internet access](https://community.ipfire.org/t/anomaly-detections-for-one-client-did-not-allow-internet-access/11772)

<div class="topic-metadata">

**Author:** [@ritchie](https://community.ipfire.org/u/ritchie)\
**Replies:** 8\
**Last updated:** [20 June 2024 20:55 UTC](https://community.ipfire.org/t/anomaly-detections-for-one-client-did-not-allow-internet-access/11772 "2024-06-20T20:55:37Z")

</div>

Hi, suddenly one client of my network (a android handy) is dropped for the internet traffic. When i switch off the “Anomaly detections” within the Web proxy, the handy is getting access into the internet. I am runnin…

---

## [Is it possible to update a default block list on URL filter?](https://community.ipfire.org/t/is-it-possible-to-update-a-default-block-list-on-url-filter/11763)

<div class="topic-metadata">

**Author:** [@user-ip](https://community.ipfire.org/u/user-ip)\
**Replies:** 2\
**Last updated:** [18 June 2024 22:59 UTC](https://community.ipfire.org/t/is-it-possible-to-update-a-default-block-list-on-url-filter/11763 "2024-06-18T22:59:48Z")

</div>

Hello, I know that I can create a custom block-list(and I did). But I want to know if is it possible to update the default’s. I have removed the ip 192.168.1.1 that was in the file /var/ipfire/urlfilter/blacklists/por…

---

## [Show HTTP blockpage on a HTTPS petition](https://community.ipfire.org/t/show-http-blockpage-on-a-https-petition/11734)

<div class="topic-metadata">

**Author:** [@user-ip](https://community.ipfire.org/u/user-ip)\
**Replies:** 0\
**Last updated:** [10 June 2024 19:21 UTC](https://community.ipfire.org/t/show-http-blockpage-on-a-https-petition/11734 "2024-06-10T19:21:42Z")

</div>

Hi, Basically, what I want is to redirect to the same “kind” of block page as mentioned in this post. I already read the post and understood why(bc the encryption on HTTPS) this is not possible right now without SSL Bum…

---

## [Accessed on Url](https://community.ipfire.org/t/accessed-on-url/11730)

<div class="topic-metadata">

**Author:** [@camilayapuraaa](https://community.ipfire.org/u/camilayapuraaa)\
**Replies:** 0\
**Last updated:** [9 June 2024 01:13 UTC](https://community.ipfire.org/t/accessed-on-url/11730 "2024-06-09T01:13:20Z")

</div>

Hello, I would like to know if there is a way to block an entire page, that is, when searching for sections the page cannot be accessed

---

## [Content Blocking does not work ( .exe .docx )](https://community.ipfire.org/t/content-blocking-does-not-work-exe-docx/11714)

<div class="topic-metadata">

**Author:** [@kaween1](https://community.ipfire.org/u/kaween1)\
**Replies:** 5\
**Last updated:** [4 June 2024 09:44 UTC](https://community.ipfire.org/t/content-blocking-does-not-work-exe-docx/11714 "2024-06-04T09:44:26Z")

</div>

we want to block download by categories. I tick following options but did not work. File extension blocking Block executable files: Block audio/video files: Block compressed archive files:

---

## [Any updated cachemanager tuning tips?](https://community.ipfire.org/t/any-updated-cachemanager-tuning-tips/11667)

<div class="topic-metadata">

**Author:** [@bloater99](https://community.ipfire.org/u/bloater99)\
**Replies:** 2\
**Last updated:** [23 May 2024 12:27 UTC](https://community.ipfire.org/t/any-updated-cachemanager-tuning-tips/11667 "2024-05-23T12:27:47Z")

</div>

I’ve read the following pages: But a lot of the information seems old. In 2024, is a Squid Proxy Cache Manager even needed to be enabled? I was thinking even if speed improvements are minimal, it could also have som…

---

## [Poor Squid performance](https://community.ipfire.org/t/poor-squid-performance/11660)

<div class="topic-metadata">

**Author:** [@roberto](https://community.ipfire.org/u/roberto)\
**Replies:** 3\
**Last updated:** [23 May 2024 06:03 UTC](https://community.ipfire.org/t/poor-squid-performance/11660 "2024-05-23T06:03:39Z")

</div>

Hi guys!. This is my IPFire profile: https://fireinfo.ipfire.org/profile/f583b15e74e20477b02c13b05d961386153d2c35 With: Active modules:: Who Is Online? Web Proxy (non transparent proxy) Url filter DHCP Server Op…

---

## [Web proxy/url filter dont work](https://community.ipfire.org/t/web-proxy-url-filter-dont-work/11653)

<div class="topic-metadata">

**Author:** [@fernandes](https://community.ipfire.org/u/fernandes)\
**Replies:** 1\
**Last updated:** [20 May 2024 20:45 UTC](https://community.ipfire.org/t/web-proxy-url-filter-dont-work/11653 "2024-05-20T20:45:50Z")

</div>

so i am doing my final project, an my theme is ipfire. I just cant block url, i tried too many times, one time it finally worked, but after a few minutes it dont anywork more. I already installed a multiple times, and …

---

## [Automatic proxy configuration using DHCP/DNS](https://community.ipfire.org/t/automatic-proxy-configuration-using-dhcp-dns/11606)

<div class="topic-metadata">

**Author:** [@markadewet](https://community.ipfire.org/u/markadewet)\
**Replies:** 14\
**Last updated:** [11 May 2024 18:02 UTC](https://community.ipfire.org/t/automatic-proxy-configuration-using-dhcp-dns/11606 "2024-05-11T18:02:26Z")

</div>

Hi all, I have potentially a somewhat silly question, so please bear with me. I have read through this Wiki: www.ipfire.org - Web Proxy Auto-Discovery Protocol (WPAD) / Proxy Auto-Config (PAC) and I fully understand ho…

---

## [Expression list option query](https://community.ipfire.org/t/expression-list-option-query/11618)

<div class="topic-metadata">

**Author:** [@markadewet](https://community.ipfire.org/u/markadewet)\
**Replies:** 0\
**Last updated:** [8 May 2024 12:47 UTC](https://community.ipfire.org/t/expression-list-option-query/11618 "2024-05-08T12:47:31Z")

</div>

Hi all, OK, new question, what exactly does the option “enable expression lists” do, in the advanced settings of URL Filter? I have looked in the Wiki, but no description of this option is there. Also, what is the diffe…

---

## [Intercepting downloads with ipfire](https://community.ipfire.org/t/intercepting-downloads-with-ipfire/11452)

<div class="topic-metadata">

**Author:** [@sariel\_hacks](https://community.ipfire.org/u/sariel_hacks)\
**Replies:** 12\
**Last updated:** [16 April 2024 08:30 UTC](https://community.ipfire.org/t/intercepting-downloads-with-ipfire/11452 "2024-04-16T08:30:19Z")

</div>

I’m new to this vibrant community and I’m excited to be here! I’m reaching out to all of you wonderful folks because I’m eager to learn more about configuring an IP Fire server to intercept downloads. I’ve been explorin…

---

## [Can't Use Cache Manager](https://community.ipfire.org/t/cant-use-cache-manager/4936)

<div class="topic-metadata">

**Author:** [@anon45931963](https://community.ipfire.org/u/anon45931963)\
**Replies:** 16\
**Last updated:** [29 March 2024 19:37 UTC](https://community.ipfire.org/t/cant-use-cache-manager/4936 "2024-03-29T19:37:49Z")

</div>

Hello, I enabled the cache manager and gave it a password as per the wiki. However when I try and log in to the cache manager it gives me: Access to the requested page has been denied URL: cache\_object://192.168.2.1/ …

---

## [Problem with squid proxy and "https://connector.myqnapcloud.com"](https://community.ipfire.org/t/problem-with-squid-proxy-and-https-connector-myqnapcloud-com/11312)

<div class="topic-metadata">

**Author:** [@roberto](https://community.ipfire.org/u/roberto)\
**Replies:** 3\
**Last updated:** [18 March 2024 07:45 UTC](https://community.ipfire.org/t/problem-with-squid-proxy-and-https-connector-myqnapcloud-com/11312 "2024-03-18T07:45:55Z")

</div>

Hi. Due to “Anomaly detections based on Autonomous Systems information”, there is an error when accessing the QNap website “https://connector.myqnapcloud.com” with the following error: Adding the following to “firew…

---

## [Upgrade to Core 183 Proxy Issue](https://community.ipfire.org/t/upgrade-to-core-183-proxy-issue/11165)

<div class="topic-metadata">

**Author:** [@fireman](https://community.ipfire.org/u/fireman)\
**Replies:** 9\
**Last updated:** [21 February 2024 21:19 UTC](https://community.ipfire.org/t/upgrade-to-core-183-proxy-issue/11165 "2024-02-21T21:19:20Z")

</div>

Hi all, after Updating to Core 183 my Proxy Service is running, but not working. I’m not able to open a Website trough proxy. If I disable the proxy in the network settings on client everything works fine. No Problem …

---

## [Feature Request Update Accelerator](https://community.ipfire.org/t/feature-request-update-accelerator/7477)

<div class="topic-metadata">

**Author:** [@adminpg](https://community.ipfire.org/u/adminpg)\
**Replies:** 6\
**Last updated:** [21 February 2024 08:45 UTC](https://community.ipfire.org/t/feature-request-update-accelerator/7477 "2024-02-21T08:45:07Z")

</div>

It would be nice if the accelerator would include the following sources out of the box: IOS, MACOS,… Updates Samsung Smartphone, Tablets,… Updates Google Phones / Tablets Updates

[Previous page](https://community.ipfire.org/c/network/web-proxy/21.md)

[Next page](https://community.ipfire.org/c/network/web-proxy/21.md?page=2)
