<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Hi dev ,<div class=""><br class=""></div><div class="">when i use socks5 client on my pc to connect to squid proxy on centos , i can tunnel RDP traffic using squid .</div><div class=""><br class=""></div><div class="">recently when i changed to pfsense , </div><div class="">I’m unable to use RDP using proxy .</div><div class=""><br class=""></div><div class="">MY CACHE PEER proxy is 10.12.0.32 , if i use it directly i can use RDP.</div><div class=""><br class=""></div><div class="">but RDP from pfsense always forbidden and i already allowed rdp port in the ports in pfsense squid config .!</div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">i will paste my squid config below and the error i face when i try .</div><div class=""><br class=""></div><div class="">===============</div><div class=""><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(203, 203, 203); background-color: rgb(0, 0, 0);"><span class="" style="color: rgb(175, 173, 36);">[</span>2.2.2-RELEASE<span class="" style="color: rgb(175, 173, 36);">][</span><a href="mailto:admin@pfsense.mpwh.ps" class="">admin</a><span class="" style="color: rgb(195, 55, 32);"><a href="mailto:admin@pfsense.mpwh.ps" class="">@</a></span><a href="mailto:admin@pfsense.mpwh.ps" class="">pfSense</a><span class="" style="color: rgb(175, 173, 36);">]</span><span class="" style="color: rgb(41, 249, 20);">/root</span><span class="" style="color: rgb(195, 55, 32);">:</span><span class="" style="color: rgb(41, 249, 20);"> squid -k parse</span></div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Startup: Initializing Authentication Schemes ...</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Startup: Initialized Authentication Scheme 'basic'</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Startup: Initialized Authentication Scheme 'digest'</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Startup: Initialized Authentication Scheme 'negotiate'</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Startup: Initialized Authentication Scheme 'ntlm'</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Startup: Initialized Authentication.</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing Configuration File: /usr/local/etc/squid/squid.conf (depth 0)</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: http_port 10.12.140.254:8080</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: http_port 127.0.0.1:8080</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: icp_port 0</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: dns_v4_first off</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: pid_filename /var/run/squid/squid.pid</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: cache_effective_user proxy</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: cache_effective_group proxy</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: error_default_language en</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: icon_directory /usr/pbi/squid-amd64/local/etc/squid/icons</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: visible_hostname mpwh</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: cache_mgr admin@localhost</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: access_log /var/squid/logs/access.log</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: cache_log /var/squid/logs/cache.log</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: cache_store_log none</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: netdb_filename /var/squid/logs/netdb.state</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: pinger_enable on</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: pinger_program /usr/pbi/squid-amd64/local/libexec/squid/pinger</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: logfile_rotate 0</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: debug_options rotate=0</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: shutdown_lifetime 3 seconds</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: acl localnet src 10.12.140.0/24 127.0.0.0/8</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: forwarded_for on</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: uri_whitespace strip</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: acl dynamic urlpath_regex cgi-bin \?</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: cache deny dynamic</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: cache_mem 64 MB</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: maximum_object_size_in_memory 256 KB</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: memory_replacement_policy heap GDSF</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: cache_replacement_policy heap LFUDA</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: minimum_object_size 0 KB</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: maximum_object_size 4 MB</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: cache_dir ufs /var/squid/cache 100 16 256</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: offline_mode off</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: cache_swap_low 90</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: cache_swap_high 95</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: cache allow all</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: refresh_pattern ^ftp: 1440 20% 10080</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: refresh_pattern ^gopher: 1440 0% 1440</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: refresh_pattern -i (/cgi-bin/|\?) 0 0% 0</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: refresh_pattern . 0 20% 4320</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: acl allsrc src all</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: acl safeports port 3389 21 70 80 210 280 443 488 563 591 631 777 901 8080 3129 1025-65535</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: acl sslports port 443 563</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: acl safeports port 3389 12345</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: acl purge method PURGE</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: acl connect method CONNECT</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: acl HTTP proto HTTP</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: acl HTTPS proto HTTPS</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: http_access allow manager localhost</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: http_access deny manager</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: http_access allow purge localhost</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: http_access deny purge</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: http_access deny !safeports</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: http_access deny CONNECT !sslports</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: request_body_max_size 0 KB</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: delay_pools 1</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: delay_class 1 2</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: delay_parameters 1 -1/-1 -1/-1</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: delay_initial_bucket_level 100</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: delay_access 1 allow allsrc</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: acl rdp dat XXXX.XX.70.0/24</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: http_access allow rdp</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: dns_nameservers 8.8.8.8 10.12.0.33</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: never_direct allow all</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: cache_peer 10.12.0.32 parent 80 0 no-query no-digest default</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: http_access allow localnet</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Processing: http_access deny allsrc</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">2016/04/11 09:25:53| Initializing https proxy context</div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(203, 203, 203); background-color: rgb(0, 0, 0);"><span class="" style="color: rgb(175, 173, 36);">[</span>2.2.2-RELEASE<span class="" style="color: rgb(175, 173, 36);">][</span><a href="mailto:admin@pfsense.mpwh.ps" class="">admin</a><span class="" style="color: rgb(195, 55, 32);"><a href="mailto:admin@pfsense.mpwh.ps" class="">@</a></span><a href="mailto:admin@pfsense.mpwh.ps" class="">pfSense.</a><span class="" style="color: rgb(41, 249, 20);">/root</span><span class="" style="color: rgb(195, 55, 32);">:</span><span class="" style="color: rgb(41, 249, 20);"> </span></div></div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(203, 203, 203); background-color: rgb(0, 0, 0);"><span class="" style="color: rgb(41, 249, 20);"><br class=""></span></div><div class="" style="margin: 0px; line-height: normal; font-family: 'Andale Mono'; color: rgb(203, 203, 203); background-color: rgb(0, 0, 0);"><span class="" style="color: rgb(41, 249, 20);"><br class=""></span></div><div class=""><span class="" style="color: rgb(41, 249, 20);"><br class=""></span></div><div class=""><span class="" style="color: rgb(41, 249, 20);"><br class=""></span></div><div class=""><span class="" style="color: rgb(41, 249, 20);"><br class=""></span></div><div class=""><br class=""></div><div class="">and here is the error when i try to connect RDP :</div><div class=""><span class="" style="color: rgb(41, 249, 20); font-family: 'Andale Mono'; background-color: rgb(0, 0, 0);">1460356516.600 0 10.12.140.114 TCP_DENIED/403 3450 CONNECT XX/XX.XX.26:3389 - HIER_NONE/- text/html</span></div></body></html>