Web Proxy and Url Filtering on IPFire

Web Proxy and Url Filtering on IPFire

Web proxy is a topic that has been discussed thoroughly on topnetworkguide.com website. This is because most of the threats that you will come across during your career, will come through internet activities, most from your clients who innocently surf and download contents from the web.

If you would like to get up to date on web proxy and url filtering using other open source products, then you can visit https://topnetworkguide.com/web-proxy-and-filtering-on-vyos-router/


You may also want to know how to manage and monitor your proxies. Use this guide:



For this guide, Web Proxy and Url Filtering on IPFire, we are going to look at how IPfire implements url filtering and web proxy. If you are ready, then lets jump right in.

Web Proxy and Url Filtering on IPFire

First Click on ipfire tab and then click on pakfire. I do this to install the clamav package for scanning what enters the network. Although clamav does very little good, it will not harm having it scan somethings.

Next, search and select the squidclamav package from the addon package list. Click the + button to add the package.

The next page ask if you will want to install the package. Install the package and you should see it in the list of installed packages as shown below.


Now click on Network=> Web Proxy, you should see your squidclamav listed alongside url filter and update accelerator.

Do not forget to tick the box, enable on Green to enable the web proxy for the LAN interface. Also if you are not going to input the web proxy ip address on individual clients, you could use the transparent mode feature. For me, I simply use the non transparent mode and use the IPFire script to automatically distribute proxy settings to clients, or i simply use my domain controller and group policy to push the proxy settings to my clients.

Tick to enable squidclamav, url filtering, and update accelerator and then click on save and restart.


To start using your url filter for your corporate or home environment, make some updates to the blacklist using the shalla secure services.

Tick the box to enable automatic update, select a schedule of ,say, monthly and select the shalla secure service.

Next click , save update settings and then click on update now.

The result will be a whole lot of list to filter using your url filter.

Now let us try to block some things like games, gambling, ads and so on.

We just noticed tha t we can block pages using http but cannot block pages using https. This is because we used the transparent web proxy.  To block all sites, whether it be http or https, then we will implement the non-transparent proxy feature.

Please visit my guide on how to distribute proxy settings automatically using an ipfire script.

Did You Enjoy What You Read? Sign Up To Our News Letter
I agree to have my personal information transfered to MailChimp ( more information )
Join over 1.000 visitors who are receiving our newsletter and learn how to design networks that work using open source technology and commercial offerings. Also learn how to proactively defend against security threats.
We hate spam. Your email address will not be sold or shared with anyone else.
Share This.