![\"\"](\"https:\/\/i0.wp.com\/rol801.com\/wordpress\/wp-content\/uploads\/2018\/07\/pfsense.jpg?resize=272%2C186&ssl=1\")
\u00a0 ![\"\"](\"https:\/\/i0.wp.com\/rol801.com\/wordpress\/wp-content\/uploads\/2018\/07\/Squid_Software_Logo.jpg?resize=255%2C198&ssl=1\"){kind=logo}
<\/p>\n\u00a0 <\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
\u7531Nokia IntelliSync\u5e74\u4ee3\u8a66\u73a9 OpenLDAP LC CentOS 5 \u8a66\u9a57\u6a5f\uff0c\u5230\u8b8a\u6210Squid Proxy \u5df2\u7d93\u7528\u8d85\u904e\u5341\u5e74\u3002\u57fa\u65bcCentOS 5 \u5df2\u7d93EOL\u4e00\u6bb5\u6642\u9593\u3002\u4fc2\u6642\u5019\u6e96\u5099\u65b0\u5605Proxy\u4f5c\u70bareplacment<\/p>\n
\u56e0\u70ba\u76ee\u524d\u9700\u8981\u8a66iOS Device \u7d93Proxy\uff0c \u53ea\u9700\u8981\u7528Proxy Server\u9ece\u8a66iOS\u5605Global HTTP Proxy\u3002\u6240\u4ee5\u5514\u9700\u8981\u5927\u8cbb\u5468\u7ae0\u53bb\u518d\u8d77\u65b0Linux\u3002pFSense\u5462\u5572Soft Router\u6b63\u6b63\u505a\u5230\u81ea\u5df1\u9700\u8981\u5605Test<\/p>\n
pFSense setup\u76f8\u4fe1\u5514\u9700\u8981\u8b1b\u5572\u54a9\uff0c\u56e0\u70ba\u771f\u4fc2\u597d\u7c21\u55ae\u3002Mount\u8d77ISO\uff0cBoot\u6a5f\uff0c\u5664\u5236\uff0c\u7b49\u5b8c\u6210\u5b89\u88dd\u3002
\n\u552f\u4e00\u63d0\u4fc2\u5b89\u88dd\u4fc2VirtualMachine\uff0c\u4f30\u5514\u5230 \u4fc2\u5230\u5462\u5bb6\u4ecd\u7136\u8981\u9078IDE HD\u3002\u597d\u5728\u4fc2pFSense\u53ef\u4ee5config\u884cRAM Disk\u3002<\/p>\n
\u4e0b\u9762\u5605URL\u6709\u597d\u597d\u5605Setup Procedure\u4f5c\u53c3\u8003\u3002
\n\u552f\u4e00\u5514\u540c\u4fc2\u81ea\u5df1\u5514\u4fc2\u8981Setup Transparent Proxy\u3002<\/p>\n
\u76ee\u6a19Proxy Set up\u800c\u4fc2Standard HTTP Proxy \u52a0 Proxy Pac file<\/p>\n
\u4ee5\u4e0bPAC \u4fc2\u597d\u597d\u5605Sample<\/p>\n
Sample PAC pattern<\/p>\n
\/\/ If the protocol or URL matches, send direct.
\nif (url.substring(0, 4)==”ftp:” ||
\nshExpMatch(url, “http:\/\/abcdomain.com\/folder\/*”))
\nreturn “DIRECT”;<\/p>\n
\/\/ If the requested website is hosted within the internal network, send direct.
\nif (isPlainHostName(host) ||
\nshExpMatch(host, “*.local”) ||
\nisInNet(dnsResolve(host), “10.0.0.0”, “255.0.0.0”) ||
\nisInNet(dnsResolve(host), “172.16.0.0”, “255.240.0.0”) ||
\nisInNet(dnsResolve(host), “192.168.0.0”, “255.255.0.0”) ||
\nisInNet(dnsResolve(host), “127.0.0.0”, “255.255.255.0”))
\nreturn “DIRECT”;<\/p>\n
\/\/ If the IP address of the local machine is within a defined
\n\/\/ subnet, send to a specific proxy.
\nif (isInNet(myIpAddress(), “10.10.5.0”, “255.255.255.0”))
\nreturn “PROXY 1.2.3.4:8080”;<\/p>\n
\/\/ DEFAULT RULE: All other traffic, use below proxies, in fail-over order.
\nreturn “PROXY 4.5.6.7:8080; PROXY 7.8.9.10:8080”;<\/p>\n
}<\/li>\n
\u800c Proxy PAC \u4fc2\u4eca\u6b21\u5605\u4e3b\u83dc\uff0c\u76f8\u5c0dpFSense \/ Squid \u5605 Setup\uff0c\u82b1\u4fc2PAC\u8a66\u5605\u6642\u9593\u4fc2\u66f4\u591a<\/p>\n
\u4eca\u6b21\u76ee\u7684\u4fc2iOS Device \u884cProxy\uff0c\u7d93MDM Push Global HTTP Proxy Profile\u3002\u6240\u4ee5PAC \u4fc2Set\u5230Mobile Network\u6703\u7528Proxy\uff0c\u53cd\u800c\u4fc2Internal Network\u5514\u7d93Proxy<\/p>\n
\u8ddf\u4f4f\u5605Post\u6703\u8b1b\u7d93MDM Push\u5de6Global HTTP Proxy profile\u767c\u73fe\u5605 \u53e4\u602a\u554f\u984c<\/p>\n
To be Continue…<\/p>\n
<\/p>\n
Reference URL<\/p>\n
https:\/\/www.howtoforge.com\/pfsense-squid-squidguard-traffic-shaping-tutorial<\/a><\/p>\n https:\/\/www.netgate.com\/docs\/pfsense\/cache-proxy\/setup-squid-as-a-transparent-proxy.html<\/a><\/p>\n