{"id":9747,"date":"2024-09-01T19:17:59","date_gmt":"2024-09-01T11:17:59","guid":{"rendered":"https:\/\/blog.pfchina.org\/?p=9747"},"modified":"2024-09-12T02:14:40","modified_gmt":"2024-09-11T18:14:40","slug":"opnsense%e9%85%8d%e7%bd%ae%e7%bc%93%e5%ad%98%e4%bb%a3%e7%90%86","status":"publish","type":"post","link":"https:\/\/blog.pfchina.org\/?p=9747","title":{"rendered":"OPNsense\u914d\u7f6e\u7f13\u5b58\u4ee3\u7406\u6559\u7a0b"},"content":{"rendered":"<p>OPNsense \u63d0\u4f9b\u529f\u80fd\u9f50\u5168\u7684\u7f13\u5b58\u4ee3\u7406\u670d\u52a1\uff0c\u5177\u6709\u5e7f\u6cdb\u7684\u8bbf\u95ee\u63a7\u5236\u5217\u8868\u3001\u57fa\u4e8e\u7c7b\u522b\u7684 Web \u8fc7\u6ee4\u4ee5\u53ca\u5728\u900f\u660e\u6a21\u5f0f\u4e0b\u8fd0\u884c\u7684\u80fd\u529b\u3002\u5b83\u652f\u6301HTTP\u3001HTTPS\u548cFTP \u670d\u52a1\u3002\u6b64\u5916\uff0c\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u4e0e\u6d41\u91cf\u6574\u5f62\u5668\u7ed3\u5408\u4f7f\u7528\uff0c\u6765\u6539\u5584\u7528\u6237\u4f53\u9a8c\u3002\u901a\u8fc7\u7f13\u5b58\u7ecf\u5e38\u8bbf\u95ee\u7684\u7f51\u7ad9\uff0c\u5b83\u53ef\u4ee5\u63d0\u9ad8\u54cd\u5e94\u65f6\u95f4\u5e76\u63d0\u9ad8\u5e26\u5bbd\u4f7f\u7528\u6548\u7387\u3002ICAP\u63a5\u53e3\u53ef\u4ee5\u4e0e\u5927\u591a\u6570\u4e13\u4e1a\u9632\u75c5\u6bd2\u89e3\u51b3\u65b9\u6848\u96c6\u6210\u3002<\/p>\n<div>\n<div>\u5728\u672c\u6559\u7a0b\u4e2d\uff0c\u5c06\u7b80\u8981\u4ecb\u7ecd\u4ee5\u4e0b\u5185\u5bb9\uff1a<\/div>\n<\/div>\n<ul>\n<li>OPNsense \u4e2d\u7684\u7f13\u5b58\u4ee3\u7406\u6709\u54ea\u4e9b\u7279\u70b9\uff1f<\/li>\n<li>\u5982\u4f55\u5728OPNsense\u7f13\u5b58\u4ee3\u7406\u4e2d\u914d\u7f6e\u81ea\u5b9a\u4e49\u9519\u8bef\u9875\u9762\uff1f<\/li>\n<li>\u5982\u4f55\u5728OPNsense\u4e2d\u8bbe\u7f6e\u57fa\u672c\u7f13\u5b58\u4ee3\u7406\uff1f<\/li>\n<li>\u5982\u4f55\u5728OPNsense\u4ee3\u7406\u4e2d\u542f\u7528Web\u8fc7\u6ee4\uff1f<\/li>\n<li>\u5982\u4f55\u5728OPNsense\u4ee3\u7406\u4e2d\u542f\u7528\u900f\u660eHTTP\u548cSSL \u6a21\u5f0f\uff1f<\/li>\n<li>\u5982\u4f55\u5c06\u5185\u90e8CA \u8bc1\u4e66\u4f5c\u4e3a\u53d7\u4fe1\u4efb\u7684\u6839CA \u5bfc\u5165Windows 10\uff1f<\/li>\n<\/ul>\n<div>\n<div>\u6ce8\u610f\uff0c\u7f13\u5b58\u4ee3\u7406\u670d\u52a1\u4e25\u91cd\u4f9d\u8d56CPU\u8d1f\u8f7d\u548c\u78c1\u76d8\u7f13\u5b58\u5199\u5165\uff0c\u5efa\u8bae\u4f7f\u7528 SSD\u786c\u76d8\u6765\u7f13\u5b58\u4ee3\u7406\u670d\u52a1\u3002<\/div>\n<\/div>\n<h1 id=\"what-are-the-features-of-the-caching-proxy-in-opnsense\">\u7f13\u5b58\u4ee3\u7406\u529f\u80fd<\/h1>\n<p>OPNsense \u7f13\u5b58\u4ee3\u7406\u670d\u52a1\u7684\u4e3b\u8981\u529f\u80fd\uff1a<\/p>\n<ol>\n<li>\u8ba4\u8bc1\uff1a\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u8eab\u4efd\u9a8c\u8bc1\u65b9\u6cd5\u5c06\u4ee3\u7406\u8bbe\u7f6e\u4e3a\u900f\u660e\u4ee3\u7406\uff1a<\/li>\n<\/ol>\n<ul>\n<li>\u65e0\u8eab\u4efd\u8ba4\u8bc1<\/li>\n<li>\u672c\u5730\u6570\u636e\u5e93<\/li>\n<li>Radius<\/li>\n<li>LDAP<\/li>\n<\/ul>\n<div>\n<div>\u5bfc\u822a\u5230Web Proxy&gt;\u00a0Administration&gt;\u00a0Forward Proxy&gt;Authentication Settings\u914d\u7f6e OPNsense \u7f13\u5b58\u4ee3\u7406\u8eab\u4efd\u9a8c\u8bc1\u9009\u9879\u3002<\/div>\n<div>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/1-928deadcf621daaa5beea99b58afe1d4.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u8bbf\u95ee OPNsense Web \u4ee3\u7406\u4e2d\u7684\u8eab\u4efd\u9a8c\u8bc1\u8bbe\u7f6e\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/1-928deadcf621daaa5beea99b58afe1d4.png\" alt=\"\u8bbf\u95ee OPNsense Web \u4ee3\u7406\u4e2d\u7684\u8eab\u4efd\u9a8c\u8bc1\u8bbe\u7f6e\" width=\"1335\" height=\"837\" \/><\/a><\/p>\n<\/div>\n<\/div>\n<ol start=\"2\">\n<li>\u8bbf\u95ee\u63a7\u5236\uff1a\u5b83\u901a\u8fc7\u4f7f\u7528\u4ee5\u4e0b\u6807\u51c6\u652f\u6301\u8bbf\u95ee\u63a7\u5236\u5217\u8868\uff1a<\/li>\n<\/ol>\n<ul>\n<li>\u5b50\u7f51<\/li>\n<li>\u7aef\u53e3<\/li>\n<li>MIME \u7c7b\u578b<\/li>\n<li>\u7981\u6b62 IP<\/li>\n<li>\u767d\u540d\u5355<\/li>\n<li>\u9ed1\u540d\u5355<\/li>\n<li>\u6d4f\u89c8\u5668\/\u7528\u6237\u4ee3\u7406<\/li>\n<li>\u652f\u6301\u9ed1\u540d\u5355<\/li>\n<\/ul>\n<div>\n<p>\u5bfc\u822a\u5230Web Proxy&gt;\u00a0Administration&gt;\u00a0Forward Proxy&gt;Access Control Lists\u914d\u7f6e OPNsense \u7f13\u5b58\u4ee3\u7406\u8bbf\u95ee\u63a7\u5236\u5217\u8868\u3002<\/p>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/2-55f1441db19cefe185b5086e0db2f5b1.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u5728 OPNsense Web \u4ee3\u7406\u4e2d\u8bbf\u95ee\u8bbf\u95ee\u63a7\u5236\u5217\u8868\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/2-55f1441db19cefe185b5086e0db2f5b1.png\" alt=\"\u5728 OPNsense Web \u4ee3\u7406\u4e2d\u8bbf\u95ee\u8bbf\u95ee\u63a7\u5236\u5217\u8868\" width=\"967\" height=\"812\" \/><\/a><\/p>\n<\/div>\n<ol start=\"3\">\n<li>\u900f\u660e\u6a21\u5f0f\uff1a\u900f\u660e\u6a21\u5f0f\u5141\u8bb8\u5c06\u6240\u6709\u8bf7\u6c42\u8def\u7531\u5230\u4ee3\u7406\uff0c\u800c\u4e0d\u9700\u8981\u5728\u5ba2\u6237\u7aef\u8fdb\u884c\u4efb\u4f55\u914d\u7f6e\u3002\u900f\u660e\u6a21\u5f0f\u9002\u7528\u4e8e\u4e0d\u5b89\u5168\u7684 HTTP \u6d41\u91cf\u3002\u4f46\u662f\u5bf9\u4e8e\u5b89\u5168 (SSL) HTTPS \u8fde\u63a5\uff0c\u4ee3\u7406\u6210\u4e3a\u4e2d\u95f4\u4eba\uff0c\u56e0\u4e3a\u5ba2\u6237\u7aef\u4e0e\u4ee3\u7406\u201c\u5bf9\u8bdd\u201d\uff0c\u5e76\u4e14\u4ee3\u7406\u4f7f\u7528\u5ba2\u6237\u7aef\u5fc5\u987b\u4fe1\u4efb\u7684\u4e3b\u5bc6\u94a5\u52a0\u5bc6\u7f51\u7edc\u6570\u636e\u5305\u3002<\/li>\n<\/ol>\n<div>\n<div>\u6ce8\u610f\uff1a\u4f7f\u7528\u900f\u660e HTTPS \u4ee3\u7406\u53ef\u80fd\u5b58\u5728\u98ce\u9669\uff0c\u53ef\u80fd\u4f1a\u4e0d\u5141\u8bb8\u7528\u4e8e\u67d0\u4e9b Web \u5e94\u7528\u7a0b\u5e8f\uff0c\u4f8b\u5982\u7535\u5b50\u5546\u52a1\u3002<\/div>\n<\/div>\n<ol start=\"4\">\n<li>Web \u8fc7\u6ee4\u5668\uff1a\u00a0OPNsense \u5305\u62ec\u57fa\u4e8e\u7c7b\u522b\u7684 Web \u8fc7\u6ee4\u652f\u6301\uff0c\u5177\u6709\u4ee5\u4e0b\u529f\u80fd\uff1a<\/li>\n<\/ol>\n<ul>\n<li>\u4ece\u8fdc\u7a0b URL \u83b7\u53d6\u6570\u636e\u3002<\/li>\n<li>\u4f7f\u7528\u5185\u7f6e\u8c03\u5ea6\u7a0b\u5e8f\u4fdd\u6301\u6700\u65b0\u3002<\/li>\n<li>\u517c\u5bb9\u6700\u5e7f\u6cdb\u4f7f\u7528\u7684\u9ed1\u540d\u5355<\/li>\n<li>\u652f\u6301\u5e73\u9762\u6587\u4ef6\u5217\u8868\u548c\u57fa\u4e8e\u7c7b\u522b\u7684\u538b\u7f29\u5217\u8868\u3002<\/li>\n<li>\u81ea\u52a8\u5c06\u57fa\u4e8e\u7c7b\u522b\u7684\u9ed1\u540d\u5355\u8f6c\u6362\u4e3a squid ACL\u3002<\/li>\n<\/ul>\n<ol start=\"5\">\n<li>\u6d41\u91cf\u7ba1\u7406\uff1a\u4ee3\u7406\u53ef\u4ee5\u4e0e\u6d41\u91cf\u6574\u5f62\u5668\u7ed3\u5408\u4f7f\u7528\uff0c\u4ee5\u5145\u5206\u5229\u7528\u5176\u6574\u5f62\u529f\u80fd\u3002\u5b83\u8fd8\u63d0\u4f9b\u4ee5\u4e0b\u9009\u9879\uff1a<\/li>\n<\/ol>\n<ul>\n<li>\u8bbe\u7f6e\u4e0b\u8f7d\/\u4e0a\u4f20\u7684\u6700\u5927\u6587\u4ef6\u5927\u5c0f<\/li>\n<li>\u9650\u5236\u6574\u4f53\u5e26\u5bbd<\/li>\n<li>\u9650\u5236\u6bcf\u53f0\u4e3b\u673a\u7684\u5e26\u5bbd<\/li>\n<\/ul>\n<div>\n<p>\u5bfc\u822a\u5230Web Proxy&gt;\u00a0Administration&gt;\u00a0General Proxy Settings&gt;Traffic Management Settings\u914d\u7f6e\u6d41\u91cf\u7ba1\u7406\u3002<\/p>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/Jietu20221102-100706.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/Jietu20221102-100706.png\" alt=\"\" width=\"1360\" height=\"461\" \/><\/a><\/p>\n<\/div>\n<ol start=\"6\">\n<li>WPAD \/ PAC\uff1a\u00a0OPNsense \u901a\u8fc7 WPAD \/ PAC \u63d0\u4f9b\u81ea\u52a8\u4ee3\u7406\u914d\u7f6e\uff0c\u7528\u4e8e\u65e0\u6cd5\u4f7f\u7528\u900f\u660e\u6a21\u5f0f\u7684\u60c5\u51b5\u3002<\/li>\n<\/ol>\n<div>\n<div>\u6ce8\u610f\uff1a\u7531\u4e8e\u901a\u8fc7 DNS \u7684WPAD\u9700\u8981Web UI \u5728\u9ed8\u8ba4 HTTP \u7aef\u53e3 (TCP\/80) \u4e0a\u8fd0\u884c\uff0c\u56e0\u6b64\u5b83\u5b58\u5728 MITM \u653b\u51fb\u6f0f\u6d1e\u3002\u5728\u8fd9\u79cd\u60c5\u51b5\u4e0b\uff0c\u5e94\u8be5\u4f7f\u7528\u4ee3\u7406\u670d\u52a1\u5668\u6216\u907f\u514d\u4ece\u4e0d\u53d7\u4fe1\u4efb\u7684\u7f51\u7edc\u914d\u7f6e\u5e94\u7528\u7a0b\u5e8f\u3002<\/div>\n<\/div>\n<ol start=\"7\">\n<li>\u81ea\u5b9a\u4e49\u9519\u8bef\u9875\u9762\uff1a OPNsense \u7f13\u5b58\u4ee3\u7406\u670d\u52a1\u53ef\u81ea\u5b9a\u4e49\u7684\u9519\u8bef\u9875\u9762\u3002<\/li>\n<li>\u591a\u63a5\u53e3\uff1a\u4ee3\u7406\u53ef\u4ee5\u540c\u65f6\u5728\u591a\u4e2a\u7f51\u7edc\u63a5\u53e3\u4e0a\u8fd0\u884c\u3002<\/li>\n<\/ol>\n<h1 id=\"how-to-configure-custom-error-pages-in-opnsense-caching-proxy\">\u914d\u7f6e\u81ea\u5b9a\u4e49\u9519\u8bef\u9875\u9762<\/h1>\n<p>\u6309\u7167\u4e0b\u5217\u6b65\u9aa4\u5728OPNsense \u7f13\u5b58\u4ee3\u7406\u670d\u52a1\u4e2d\u914d\u7f6e\u81ea\u5b9a\u4e49\u9519\u8bef\u9875\u9762\uff1a<\/p>\n<ol>\n<li>\u5bfc\u822a\u5230Services&gt;\u00a0Web Proxy&gt;\u00a0Administration&gt; \u3002General Proxy Settings<\/li>\n<li>\u627e\u5230\u7528\u6237\u9519\u8bef\u9875\u9762\uff0c\u9009Custom\u3002\u7136\u540e\uff0c\u5c06\u51fa\u73b0Error Pages\u9644\u52a0\u9009\u9879\u5361\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/4-e55f13c1f18e5253626f4c2bff5ed35a.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u5728 OPNsense Web \u4ee3\u7406\u4e2d\u8bbe\u7f6e\u7528\u6237\u9519\u8bef\u9875\u9762\u9009\u9879\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/4-e55f13c1f18e5253626f4c2bff5ed35a.png\" alt=\"\u5728 OPNsense Web \u4ee3\u7406\u4e2d\u8bbe\u7f6e\u7528\u6237\u9519\u8bef\u9875\u9762\u9009\u9879\" width=\"1104\" height=\"457\" \/><\/a><\/p>\n<ol start=\"3\">\n<li>\u5355\u51fbError Pages\u9009\u9879\u5361\u3002<\/li>\n<li>\u5355\u51fbDownload\u56fe\u6807\u83b7\u53d6\u5305\u542b\u6240\u6709\u53ef\u7528\u9519\u8bef\u9875\u9762\u548c\u7ea7\u8054\u6837\u5f0f\u8868\u6587\u4ef6\uff1aproxy_template.zip<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/5-daf2cff0418994cd215e70ac7a6e8287.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u5728 OPNsense Web \u4ee3\u7406\u4e2d\u4e0b\u8f7d\u9519\u8bef\u9875\u9762\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/5-daf2cff0418994cd215e70ac7a6e8287.png\" alt=\"\u5728 OPNsense Web \u4ee3\u7406\u4e2d\u4e0b\u8f7d\u9519\u8bef\u9875\u9762\" width=\"997\" height=\"513\" \/><\/a><\/p>\n<ol start=\"5\">\n<li>\u6839\u636e\u9700\u8981\u66f4\u6539\u76f8\u5173\u6587\u4ef6\u538b\u7f29\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/6-8cff30dc5e94a8ca67c5b4ca80bba66c.png\"><img loading=\"lazy\" decoding=\"async\" title=\"OPNsense Web \u4ee3\u7406\u6a21\u677f\u4e2d\u7684\u9519\u8bef\u9875\u9762\u6587\u4ef6\u5217\u8868\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/6-8cff30dc5e94a8ca67c5b4ca80bba66c.png\" alt=\"OPNsense Web \u4ee3\u7406\u6a21\u677f\u4e2d\u7684\u9519\u8bef\u9875\u9762\u6587\u4ef6\u5217\u8868\" width=\"735\" height=\"903\" \/><\/a><\/p>\n<ol start=\"6\">\n<li>\u5355\u51fbcustom_template.zip\u6587\u4ef6\u5939\u56fe\u6807\u4ee5\u9009\u62e9\u65b0\u521b\u5efa\u7684 zip\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/7-f3e39887d59b2774b8084904895f96e5.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u5728 OPNsense Web \u4ee3\u7406\u4e2d\u4e0a\u4f20\u81ea\u5b9a\u4e49\u9519\u8bef\u9875\u9762\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/7-f3e39887d59b2774b8084904895f96e5.png\" alt=\"\u5728 OPNsense Web \u4ee3\u7406\u4e2d\u4e0a\u4f20\u81ea\u5b9a\u4e49\u9519\u8bef\u9875\u9762\" width=\"1116\" height=\"445\" \/><\/a><\/p>\n<ol start=\"7\">\n<li>\u70b9\u51fb\u4e0a\u4f20\u6309\u94ae\u3002<\/li>\n<li>\u70b9\u51fbApply\u6309\u94ae\u3002<\/li>\n<li>\u5355\u51fbGeneral Proxy Settings\u9009\u9879\u5361\u3002<\/li>\n<li>\u5355\u51fbApply\u6309\u94ae\u6fc0\u6d3b\u9519\u8bef\u9875\u9762\u6a21\u677f\u3002<\/li>\n<\/ol>\n<div>\n<div>\n<h1>\u8bbe\u7f6e\u57fa\u672c\u7f13\u5b58\u4ee3\u7406<\/h1>\n<\/div>\n<\/div>\n<p>\u53ef\u4ee5\u6309\u7167\u4e0b\u976210 \u4e2a\u4e3b\u8981\u6b65\u9aa4\u5728OPNsense \u8bbe\u7f6e\u57fa\u672c\u7f13\u5b58\u4ee3\u7406\u670d\u52a1\uff1a<\/p>\n<ol>\n<li>\u542f\u7528\/\u7981\u7528\u4ee3\u7406\u670d\u52a1\u5668<\/li>\n<li>\u914d\u7f6e\u4ee3\u7406\u63a5\u53e3<\/li>\n<li>\u914d\u7f6e\u4ee3\u7406\u76d1\u542c\u7aef\u53e3<\/li>\n<li>\u542f\u7528\/\u7981\u7528\u7f13\u5b58<\/li>\n<li>\u914d\u7f6e\u8eab\u4efd\u9a8c\u8bc1\u65b9\u6cd5<\/li>\n<li>\u542f\u7528\/\u7981\u7528 FTP \u4ee3\u7406<\/li>\n<li>\u5b9a\u4e49\u8bbf\u95ee\u63a7\u5236\u5217\u8868<\/li>\n<li>\u5b9a\u4e49\u8fdc\u7a0b\u8bbf\u95ee\u63a7\u5236\u5217\u8868<\/li>\n<li>\u5b9a\u4e49\u9632\u706b\u5899\u89c4\u5219\u4ee5\u9632\u6b62\u5ba2\u6237\u7aef\u7ed5\u8fc7\u4ee3\u7406\u670d\u52a1\u5668<\/li>\n<li>\u914d\u7f6e\u5ba2\u6237\u7aef\u4ee3\u7406<\/li>\n<\/ol>\n<p>\u4e0b\u9762\u7b80\u8981\u4ecb\u7ecd\u8fd9\u4e9b\u6b65\u9aa4\u3002<\/p>\n<h3 id=\"1-enabledisable-proxy-server\">1.\u542f\u7528\/\u7981\u7528\u4ee3\u7406\u670d\u52a1\u5668<\/h3>\n<p>\u5728OPNsense \u9632\u706b\u5899\u4e2d\uff0c\u4ee3\u7406\u670d\u52a1\u5668\u5e26\u6709\u5408\u7406\u7684\u9ed8\u8ba4\u8bbe\u7f6e\uff0c\u53ef\u4ee5\u5feb\u901f\u8bbe\u7f6e\u3002\u8981\u5728 OPNsense \u9632\u706b\u5899\u4e2d\u542f\u7528\u4ee3\u7406\u670d\u52a1\uff0c\u53ef\u4ee5\u6309\u7167\u4ee5\u4e0b\u6b65\u9aa4\u64cd\u4f5c\uff1a<\/p>\n<ol>\n<li>\u5bfc\u822a\u5230Services\u00a0&gt;\u00a0Web Proxy\u00a0&gt;\u00a0Administration\u3002<\/li>\n<li>\u9009\u4e2dEnable proxy\u9009\u9879\u3002<\/li>\n<li>\u5355\u51fbApply\u6fc0\u6d3b\u4ee3\u7406\u670d\u52a1\u5668\u3002<\/li>\n<\/ol>\n<p>\u4ee3\u7406\u5c06\u542f\u7528\u57fa\u4e8e\u672c\u5730\u7528\u6237\u6570\u636e\u5e93\u7684\u7528\u6237\u8eab\u4efd\u9a8c\u8bc1\uff0c\u5e76\u9ed8\u8ba4\u5728 LAN \u63a5\u53e3\u7684 3128 \u7aef\u53e3\u4e0a\u8fd0\u884c\u3002<\/p>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/8-757864c718dd4ef33ff19a2b8807a1d9.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u5728 OPNsense \u4e2d\u542f\u7528\u4ee3\u7406\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/8-757864c718dd4ef33ff19a2b8807a1d9.png\" alt=\"\u5728 OPNsense \u4e2d\u542f\u7528\u4ee3\u7406\" width=\"1905\" height=\"797\" \/><\/a><\/p>\n<h4 id=\"how-to-startrestartstop-proxy-server\">\u5982\u4f55\u542f\u52a8\/\u91cd\u542f\/\u505c\u6b62\u4ee3\u7406\u670d\u52a1\u5668\uff1f<\/h4>\n<p>\u5bfc\u822a\u5230Services\u00a0&gt;\u00a0Web Proxy\u00a0&gt;\u00a0Administration\u6765\u67e5\u770b\u4ee3\u7406\u670d\u52a1\u7684\u72b6\u6001\u3002\u72b6\u6001\u548c\u64cd\u4f5c\u6309\u94ae\u4f4d\u4e8e\u7ba1\u7406\u9875\u9762\u7684\u53f3\u4e0a\u89d2\u3002<\/p>\n<p>\u4ee3\u7406\u670d\u52a1\u5668\u8fd0\u884c\u65f6\uff0c\u72b6\u6001\u6309\u94ae\u663e\u793a\u4e3a\u5e26\u6709\u767d\u8272\u53f3\u7bad\u5934\u56fe\u6807\u7684\u7eff\u8272\u77e9\u5f62\u3002<\/p>\n<p>\u5355\u51fbRestart\u6309\u94ae\u91cd\u65b0\u542f\u52a8\u4ee3\u7406\u670d\u52a1\u5668\u3002<\/p>\n<p>\u5355\u51fbStop\u6309\u94ae\u505c\u6b62\u4ee3\u7406\u670d\u52a1\u5668\u3002<\/p>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/9-d8172410f0263dc49edddd4ec7623ef3.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u5728 OPNsense \u4e2d\u91cd\u65b0\u542f\u52a8\/\u505c\u6b62\u4ee3\u7406\u670d\u52a1\u5668\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/9-d8172410f0263dc49edddd4ec7623ef3.png\" alt=\"\u5728 OPNsense \u4e2d\u91cd\u65b0\u542f\u52a8\/\u505c\u6b62\u4ee3\u7406\u670d\u52a1\u5668\" width=\"1578\" height=\"373\" \/><\/a><\/p>\n<p>\u5f53\u4ee3\u7406\u670d\u52a1\u5668\u505c\u6b62\u65f6\uff0c\u72b6\u6001\u6309\u94ae\u663e\u793a\u4e3a\u5e26\u6709\u767d\u8272\u65b9\u5f62\u56fe\u6807\u7684\u7ea2\u8272\u77e9\u5f62\u3002<\/p>\n<p>\u53ef\u4ee5\u5355\u51fbStart\u6309\u94ae\u542f\u52a8\u4ee3\u7406\u670d\u52a1\u5668\u3002<\/p>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/10-8095c2ac679a7540bfd7ac18a36ed184.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u5728 OPNsense \u4e2d\u542f\u52a8\u5df2\u505c\u6b62\u7684\u4ee3\u7406\u670d\u52a1\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/10-8095c2ac679a7540bfd7ac18a36ed184.png\" alt=\"\u5728 OPNsense \u4e2d\u542f\u52a8\u5df2\u505c\u6b62\u7684\u4ee3\u7406\u670d\u52a1\" width=\"1584\" height=\"373\" \/><\/a><\/p>\n<h3 id=\"2-configure-proxy-interfaces-and-general-forward-settings\">2.\u914d\u7f6e\u4ee3\u7406\u63a5\u53e3\u548c\u5e38\u89c4\u8f6c\u53d1\u8bbe\u7f6e<\/h3>\n<p>\u5982\u679c\u9700\u8981\u66f4\u6539\u4ee3\u7406\u5c06\u7ed1\u5b9a\u7684\u63a5\u53e3\uff08\u5b50\u7f51\uff09\uff0c\u53ef\u4ee5\u6309\u7167\u4ee5\u4e0b\u6b65\u9aa4\u64cd\u4f5c\uff1a<\/p>\n<ol>\n<li>\u5bfc\u822a\u5230Services\u00a0&gt;\u00a0Web Proxy\u00a0&gt;\u00a0Administration\u3002<\/li>\n<li>\u5355\u51fbForward Proxy\u9009\u9879\u5361\uff0c\u6253\u5f00General Forward Settings\u9875\u9762\u3002<\/li>\n<li>\u5728\u4ee3\u7406\u63a5\u53e3\u5b57\u6bb5\u4e2d\u9009\u62e9\u63a5\u53e3\u3002\u53ef\u4ee5\u6839\u636e\u9700\u8981\u6dfb\u52a0\u4efb\u610f\u6570\u91cf\u7684\u63a5\u53e3\u6216\u5220\u9664\u4e00\u4e2a\u3002<\/li>\n<li>\u5355\u51fbApply\u6fc0\u6d3b\u8bbe\u7f6e\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/11-9dd7c2580c00015d4c07e9f02b91a76b.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u5728 OPNsense \u4e2d\u9009\u62e9\u4ee3\u7406\u63a5\u53e3\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/11-9dd7c2580c00015d4c07e9f02b91a76b.png\" alt=\"\u5728 OPNsense \u4e2d\u9009\u62e9\u4ee3\u7406\u63a5\u53e3\" width=\"971\" height=\"843\" \/><\/a><\/p>\n<ol start=\"5\">\n<li>\u8fd9\u91cc\u53ef\u4ee5\u9009\u4e2d\u900f\u660e\u4ee3\u7406\u6a21\u5f0f\u7684\u542f\u7528\u900f\u660e HTTP \u4ee3\u7406\u9009\u9879\u3002<\/li>\n<li>\u53ef\u4ee5\u9009\u4e2d\u542f\u7528 SSL \u68c0\u67e5\u6765\u8bb0\u5f55 HTTPS \u6d41\u91cf\uff0c\u6216\u8ba9\u4ee3\u7406\u5145\u5f53 Internet \u548c\u60a8\u7684\u5ba2\u6237\u7aef\u4e4b\u95f4\u7684\u4e2d\u95f4\u4eba\u3002\u5728\u542f\u7528\u6b64\u9009\u9879\u4e4b\u524d\uff0c\u8bf7\u8003\u8651\u5b89\u5168\u9690\u60a3\u3002\u5982\u679c\u4f7f\u7528\u900f\u660e HTTPS \u6a21\u5f0f\uff0c\u9700\u8981\u8bbe\u7f6eNAT\u89c4\u5219\u6765\u53cd\u6620\u6d41\u91cf\u3002<\/li>\n<li>\u53ef\u4ee5\u9009\u4e2d\u4ec5\u8bb0\u5f55 SNI \u4fe1\u606f\u9009\u9879\uff0c\u8fd9\u6837\u53ea\u4f1a\u8bb0\u5f55\u8bf7\u6c42\u7684\u57df\u548c IP \u5730\u5740\uff0c\u4e0d\u89e3\u7801\u6216\u8fc7\u6ee4 SSL \u5185\u5bb9\u3002<\/li>\n<li>\u53ef\u4ee5\u66f4\u6539SSL\u4ee3\u7406\u670d\u52a1\u5c06\u4fa6\u542c\u7684SSL \u4ee3\u7406\u7aef\u53e3\u3002\u9ed8\u8ba4\u4e3a 3129\u3002<\/li>\n<li>\u53ef\u4ee5\u9009\u62e9\u8bc1\u4e66\u9881\u53d1\u673a\u6784\u7528\u4e8eSSL \u68c0\u67e5\u3002<\/li>\n<li>\u53ef\u4ee5\u5728SSL \u65e0\u78b0\u649e\u7ad9\u70b9\u5b57\u6bb5\u4e2d\u8f93\u5165\u9700\u8981\u4e0d\u88ab\u68c0\u67e5\u7684\u7ad9\u70b9\u5217\u8868\uff0c\u4f8b\u5982\u94f6\u884c\u548c\u7535\u5b50\u5546\u52a1\u7ad9\u70b9\u3002\u8981\u63a5\u53d7\u6240\u6709\u5b50\u57df\uff0c\u5728\u57df\u524d\u52a0\u4e0a.\u3002<\/li>\n<\/ol>\n<h3 id=\"3-configure-proxy-listening-port\">3.\u914d\u7f6e\u4ee3\u7406\u76d1\u542c\u7aef\u53e3<\/h3>\n<p>\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0c\u4ee3\u7406\u5c06\u4fa6\u542c\u7aef\u53e3 3128\u3002\u8981\u66f4\u6539\u4ee3\u7406\u4fa6\u542c\u7aef\u53e3\uff0c\u60a8\u53ef\u4ee5\u6309\u7167\u4ee5\u4e0b\u6b65\u9aa4\u64cd\u4f5c\uff1a<\/p>\n<ol>\n<li>\u5bfc\u822a\u5230Services\u00a0&gt;\u00a0Web Proxy\u00a0&gt;\u00a0Administration\u3002<\/li>\n<li>\u5355\u51fbForward Proxy\u9009\u9879\u5361\uff0c\u6253\u5f00General Forward Settings\u9875\u9762\u3002<\/li>\n<li>\u6839\u636e\u9700\u8981\u5c06\u4ee3\u7406\u7aef\u53e3\u8bbe\u7f6e\u4e3a\u9002\u5f53\u7684\u503c\uff0c\u4f8b\u5982 8080\u3002<\/li>\n<li>\u5355\u51fbApply\u6fc0\u6d3b\u8bbe\u7f6e\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/12-8b5760f1eaa8bb3d6ba8844a1f44c632.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u5728 OPNsense \u4e2d\u66f4\u6539\u4ee3\u7406\u4fa6\u542c\u7aef\u53e3\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/12-8b5760f1eaa8bb3d6ba8844a1f44c632.png\" alt=\"\u5728 OPNsense \u4e2d\u66f4\u6539\u4ee3\u7406\u4fa6\u542c\u7aef\u53e3\" width=\"967\" height=\"785\" \/><\/a><\/p>\n<h3 id=\"4-enabledisable-caching\">4.\u542f\u7528\/\u7981\u7528\u7f13\u5b58<\/h3>\n<p>\u6309\u7167\u4e0b\u9762\u7684\u6b65\u9aa4\u8fdb\u884c\u64cd\u4f5c\uff1a<\/p>\n<ol>\n<li>\u5bfc\u822a\u5230Services\u00a0&gt;\u00a0Web Proxy\u00a0&gt;\u00a0Administration\u3002<\/li>\n<li>\u5355\u51fbGeneral Proxy Settings\u67e5\u770b\u4e0b\u62c9\u83dc\u5355\u3002<\/li>\n<li>\u70b9\u51fbLocal Cache Settings\u3002<\/li>\n<li>\u9009\u4e2dEnable local cache\u9009\u9879\u3002<\/li>\n<li>\u6253\u5f00\u9876\u90e8\u7684\u9ad8\u7ea7\u6a21\u5f0f\u6309\u94ae\u3002<\/li>\n<li>Memory Cache size in Megabytes\u9009\u9879\u6839\u636e\u9700\u8981\u589e\u52a0 \uff0c\u4f8b\u59821024\u3002 \u9ed8\u8ba4\u4e3a256 MB\u3002<\/li>\n<li>Cache size in Megabytes\u9009\u9879\u6839\u636e\u9700\u8981\u589e\u52a0\uff0c\u4f8b\u59821024\u3002\u9ed8\u8ba4\u4e3a100 MB<\/li>\n<li>\u3002<\/li>\n<li>Maximum object size (MB)\u4fdd\u6301\u9ed8\u8ba4\u7559\u7a7a\uff0c\u5373 4MB\u3002<\/li>\n<li>Maximum object size in memory (KB)\u4fdd\u6301\u7559\u7a7a\u3002<\/li>\n<li>Memory cache mode\u9009\u9879\u53ef\u4ee5\u4fdd\u6301\u9ed8\u8ba4\u3002\u4e5f\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u9009\u9879\uff1a<\/li>\n<\/ol>\n<ul>\n<li>always\uff1a\u4fdd\u7559\u6700\u8fd1\u68c0\u7d22\u5230\u7684\u5bf9\u8c61\uff08\u9ed8\u8ba4\uff09<\/li>\n<li>disk\uff1a\u53ea\u6709\u78c1\u76d8\u7f13\u5b58\u547d\u4e2d\u5b58\u50a8\u5728\u5185\u5b58\u4e2d\uff0c\u56e0\u6b64\u5bf9\u8c61\u5fc5\u987b\u5148\u7f13\u5b58\u5728\u78c1\u76d8\u4e0a\uff0c\u7136\u540e\u518d\u547d\u4e2d\u7b2c\u4e8c\u6b21\uff0c\u7136\u540e\u624d\u80fd\u7f13\u5b58\u5728\u5185\u5b58\u4e2d\u3002<\/li>\n<li>network\uff1a\u53ea\u6709\u4ece\u7f51\u7edc\u68c0\u7d22\u5230\u7684\u5bf9\u8c61\u624d\u4f1a\u5b58\u50a8\u5728\u5185\u5b58\u4e2d\u3002<\/li>\n<\/ul>\n<ol start=\"11\">\n<li>Enable Linux Package Cache\u9009\u9879\uff0c\u5982\u679c\u7f51\u7edc\u4e2d\u6709\u591a\u4e2a\u670d\u52a1\u5668\u5e76\u4e14\u4e0d\u6258\u7ba1\u81ea\u5df1\u7684\u5305\u955c\u50cf\uff0c\u53ef\u4ee5\u9009\u4e2d\u4e3a Linux \u53d1\u884c\u7248\u542f\u7528\u5305\u7f13\u5b58\u7684\u9009\u9879\u3002\u53ef\u4ee5\u8282\u7701 Internet \u5e26\u5bbd\uff0c\u540c\u65f6\u589e\u52a0\u78c1\u76d8\u8bbf\u95ee\u3002<\/li>\n<li>Enable Windows Update Cache\u9009\u9879\uff0c\u5982\u679c\u6ca1\u6709 WSUS \u670d\u52a1\u5668\uff0c\u5219\u53ef\u4ee5\u9009\u4e2d\u542f\u7528\u6216\u7981\u7528 Windows \u66f4\u65b0\u7f13\u5b58\u7684\u9009\u9879\u3002<\/li>\n<li>\u5355\u51fbApply\u6fc0\u6d3b\u8bbe\u7f6e\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/13-5e668e2d97191ff6411452b7c1124ed2.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u5728 OPNsense \u4e2d\u542f\u7528\u7f13\u5b58\u4ee3\u7406\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/13-5e668e2d97191ff6411452b7c1124ed2.png\" alt=\"\u5728 OPNsense \u4e2d\u542f\u7528\u7f13\u5b58\u4ee3\u7406\" width=\"948\" height=\"827\" \/><\/a><\/p>\n<p>\u6ce8\u610f\uff1a\u56e0\u4e3a\u9ed8\u8ba4\u4e0d\u521b\u5efa\u7f13\u5b58\uff0c\u6240\u4ee5\u5fc5\u987b\u505c\u6b62\u5e76\u91cd\u65b0\u542f\u52a8\u4ee3\u7406\u670d\u52a1\uff0c\u4ee5\u786e\u4fdd\u6b63\u786e\u521b\u5efa\u7f13\u5b58\u3002<\/p>\n<h3 id=\"5-configure-authentication-method\">5.\u914d\u7f6e\u8ba4\u8bc1\u65b9\u5f0f<\/h3>\n<p>\u8981\u4fee\u6539OPNsense \u4e2d\u4ee3\u7406\u670d\u52a1\u7684\u8eab\u4efd\u9a8c\u8bc1\u65b9\u6cd5\uff0c\u53ef\u4ee5\u6309\u7167\u4ee5\u4e0b\u6b65\u9aa4\u64cd\u4f5c\uff1a<\/p>\n<ol>\n<li>\u5bfc\u822a\u5230Services\u00a0&gt;\u00a0Web Proxy\u00a0&gt;\u00a0Administration\u3002<\/li>\n<li>\u5355\u51fbForward Proxy\u67e5\u770b\u4e0b\u62c9\u83dc\u5355\u3002<\/li>\n<li>\u70b9\u51fbAuthentication Settings\u3002<\/li>\n<li>\u5728 Authentication method\u5b57\u6bb5\u4e2d\u9009\u62e9\u6240\u9700\u7684\u8eab\u4efd\u9a8c\u8bc1\u5668\u3002\u5982\u679c\u4e0d\u60f3\u4f7f\u7528\u4efb\u4f55\u8eab\u4efd\u9a8c\u8bc1\uff0c\u8bf7\u5355\u51fb\u4e0b\u9762\u7684Clear All\u6309\u94ae\u3002<\/li>\n<\/ol>\n<div>\n<div>\u63d0\u793a\uff1a\u6839\u636eSystem&gt;\u00a0Access&gt;Servers\u4e2d\u914d\u7f6e\u7684\u8eab\u4efd\u9a8c\u8bc1\u670d\u52a1\u5668\uff0c\u53ef\u4ee5\u9009\u62e9\u4ee5\u4e0b\u4e00\u4e2a\u6216\u591a\u4e2a\u9009\u9879\uff1a<\/div>\n<div>\n<ul>\n<li>\u672c\u5730\u7528\u6237\u6570\u636e\u5e93<\/li>\n<li>\u534a\u5f84<\/li>\n<li>Radius<\/li>\n<li>\u57fa\u4e8e\u65f6\u95f4\u7684\u4e00\u6b21\u6027\u5bc6\u7801<\/li>\n<li>\u4e0d\u8fdb\u884c\u8eab\u4efd\u9a8c\u8bc1\uff08\u5c06\u6b64\u5b57\u6bb5\u7559\u7a7a\uff09<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<ol start=\"5\">\n<li>\u5982\u679c\u9700\u8981\uff0c\u53ef\u4ee5\u8bbe\u7f6e\u5f3a\u5236\u672c\u5730\u7ec4\u6765\u9650\u5236\u5236\u5bf9\u9009\u5b9a\uff08\u672c\u5730\uff09\u7ec4\u4e2d\u7684\u7528\u6237\u7684\u8bbf\u95ee\u3002<\/li>\n<li>\u53ef\u4ee5\u6839\u636e\u9700\u8981\u586b\u5199\u8eab\u4efd\u9a8c\u8bc1\u63d0\u793a\u3002\u5b83\u5c06\u663e\u793a\u5728\u8eab\u4efd\u9a8c\u8bc1\u8bf7\u6c42\u7a97\u53e3\u4e2d\u3002<\/li>\n<li>\u5c06\u8eab\u4efd\u9a8c\u8bc1 TTL\uff08\u5c0f\u65f6\uff09\u8bbe\u7f6e\u4e3a8\u3002\u5c06\u6307\u5b9a\u4ee3\u7406\u670d\u52a1\u5668\u5047\u5b9a\u5916\u90e8\u9a8c\u8bc1\u7684\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ec4\u5408\u6709\u6548\u7684\u65f6\u95f4\uff08\u4ee5\u5c0f\u65f6\u4e3a\u5355\u4f4d\uff09\u3002\u5f53 TTL \u8fc7\u671f\u65f6\uff0c\u5c06\u63d0\u793a\u7528\u6237\u518d\u6b21\u8f93\u5165\u51ed\u636e\u3002<\/li>\n<li>\u53ef\u4ee5\u5c06\u8eab\u4efd\u9a8c\u8bc1\u8fdb\u7a0b\u4fdd\u7559\u4e3a\u9ed8\u8ba4\u503c\u3002\u5c06\u63a7\u5236\u8eab\u4efd\u9a8c\u8bc1\u5668\u8fdb\u7a0b\u7684\u603b\u6570\u3002<\/li>\n<li>\u5355\u51fbApply\u6fc0\u6d3b\u8bbe\u7f6e\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/14-62265f3ad11e382699acb400f3e7a631.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u5728 OPNsense \u4e2d\u8bbe\u7f6e\u4ee3\u7406\u7684\u8eab\u4efd\u9a8c\u8bc1\u65b9\u6cd5\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/14-62265f3ad11e382699acb400f3e7a631.png\" alt=\"\u5728 OPNsense \u4e2d\u8bbe\u7f6e\u4ee3\u7406\u7684\u8eab\u4efd\u9a8c\u8bc1\u65b9\u6cd5\" width=\"963\" height=\"609\" \/><\/a><\/p>\n<h3 id=\"6-enable-ftp-proxy\">6.\u542f\u7528FTP\u4ee3\u7406<\/h3>\n<p>\u5728OPNsense \u4e2d\u542f\u7528FTP \u4ee3\u7406\u670d\u52a1\uff0c\u6309\u7167\u4ee5\u4e0b\u6b65\u9aa4\u64cd\u4f5c\uff1a<\/p>\n<ol>\n<li>\u5bfc\u822a\u5230Services\u00a0&gt;\u00a0Web Proxy\u00a0&gt;\u00a0Administration\u3002<\/li>\n<li>\u5355\u51fbForward Proxy\u67e5\u770b\u4e0b\u62c9\u83dc\u5355\u3002<\/li>\n<li>\u70b9\u51fbFTP Proxy Settings\u3002<\/li>\n<li>\u5728FTP \u4ee3\u7406\u63a5\u53e3\u5b57\u6bb5\u4e2d\u9009\u62e9\u4e00\u4e2a\u6216\u591a\u4e2a\u63a5\u53e3\uff0c\u4f8b\u5982LAN\u6216GUESTNET\u3002<\/li>\n<li>\u53ef\u4ee5\u66f4\u6539\u9ed8\u8ba4\u7684FTP \u4ee3\u7406\u7aef\u53e3\uff0c\u9ed8\u8ba4\u4e3a2121.<\/li>\n<li>\u53ef\u4ee5\u52fe\u9009\u542f\u7528\u900f\u660e\u6a21\u5f0f\uff0c\u5c06\u76ee\u6807\u7aef\u53e3 21 \u7684\u6240\u6709\u8bf7\u6c42\u8f6c\u53d1\u5230\u4ee3\u7406\u670d\u52a1\u5668\uff0c\u65e0\u9700\u4efb\u4f55\u989d\u5916\u914d\u7f6e\u3002<\/li>\n<li>\u70b9\u51fbApply\u6fc0\u6d3b\u8bbe\u7f6e\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/15-91666e5a8f8d3ec559d7b348bd48d2f2.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u5728 OPNsense \u4e2d\u542f\u7528 FTP \u4ee3\u7406\u670d\u52a1\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/15-91666e5a8f8d3ec559d7b348bd48d2f2.png\" alt=\"\u5728 OPNsense \u4e2d\u542f\u7528 FTP \u4ee3\u7406\u670d\u52a1\" width=\"969\" height=\"424\" \/><\/a><\/p>\n<p>\u6ce8\u610f\uff1aFTP \u4ee3\u7406\u4ec5\u5728\u542f\u7528\u4ee3\u7406\u670d\u52a1\u5668\u7684\u60c5\u51b5\u4e0b\u624d\u80fd\u5de5\u4f5c\u3002\u6b64\u5916\uff0c\u4ee3\u7406\u4ec5\u9002\u7528\u4e8e\u672a\u52a0\u5bc6\u7684 FTP \u6d41\u91cf\u3002<\/p>\n<h3 id=\"6-enable-ftp-proxy\">7.\u5b9a\u4e49\u8bbf\u95ee\u63a7\u5236\u5217\u8868<\/h3>\n<p>\u5728OPNsense\u4e2d\u4e3a\u4ee3\u7406\u670d\u52a1\u5b9a\u4e49\u8bbf\u95ee\u63a7\u5236\u5217\u8868\uff0c\u6309\u7167\u4ee5\u4e0b\u6b65\u9aa4\u64cd\u4f5c\uff1a<\/p>\n<ol>\n<li>\u5bfc\u822a\u5230Services\u00a0&gt;\u00a0Web Proxy\u00a0&gt;\u00a0Administration\u3002<\/li>\n<li>\u5355\u51fbForward Proxy\u67e5\u770b\u4e0b\u62c9\u83dc\u5355\u3002<\/li>\n<li>\u70b9\u51fbAccess Control Lists\u3002<\/li>\n<li>\u70b9\u51fbadvanced mode toggle button.<\/li>\n<li>\u5728\u5141\u8bb8\u7684\u5b50\u7f51\u8f93\u5165\u8981\u5141\u8bb8\u8bbf\u95ee\u4ee3\u7406\u670d\u52a1\u5668\u7684\u5b50\u7f51\u3002\u9ed8\u8ba4\u60c5\u51b5\u4e0b\u5141\u8bb8\u4ee3\u7406\u63a5\u53e3\u3002<\/li>\n<li>\u6dfb\u52a0\u4e0d\u53d7\u9650\u5236\u7684 IP \u5730\u5740\u3002\u5bf9\u4e8e\u8fd9\u4e9b IP \u5730\u5740\uff0c\u4e0d\u5e94\u7528\u8eab\u4efd\u9a8c\u8bc1\u548c\u9ed1\u540d\u5355\u3002<\/li>\n<li>\u53ef\u4ee5\u5728\u7981\u6b62\u7684\u4e3b\u673a IP \u5730\u5740\u5b57\u6bb5\u4e2d\u8f93\u5165\u5165\u8981\u62d2\u7edd\u8bbf\u95ee\u4ee3\u7406\u670d\u52a1\u5668\u7684IP \u5730\u5740\u3002<\/li>\n<li>\u53ef\u4ee5\u5c06\u57df\u6dfb\u52a0\u5230\u767d\u540d\u5355\u4e2d\uff0c\u8fd9\u6837\u5b83\u4eec\u5c31\u4e0d\u4f1a\u88ab\u4ee3\u7406\u670d\u52a1\u5668\u963b\u6b62\uff0c\u4f8b\u5982unharmful.com<\/li>\n<li>\u53ef\u4ee5\u5c06\u57df\u6dfb\u52a0\u5230\u9ed1\u540d\u5355\u4e2d\uff0c\u5b83\u4eec\u5c06\u88ab\u4ee3\u7406\u670d\u52a1\u5668\u963b\u6b62\uff0c\u4f8b\u5982harmful.com.<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/16-7d0cb3f71f1e5033303155192cba9e2e.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u5728 OPNsense-1 \u4e2d\u4e3a\u4ee3\u7406\u670d\u52a1\u8bbe\u7f6e ACL\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/16-7d0cb3f71f1e5033303155192cba9e2e.png\" alt=\"\u5728 OPNsense-1 \u4e2d\u4e3a\u4ee3\u7406\u670d\u52a1\u8bbe\u7f6e ACL\" width=\"984\" height=\"606\" \/><\/a><\/p>\n<ol start=\"10\">\n<li>\u53ef\u4ee5\u8bbe\u7f6eBlock browser\/user-agents\u6765\u963b\u6b62\u7279\u5b9a\u6d4f\u89c8\u5668\u3002\u4f8b\u5982\uff0c\u201cMozilla\u201d\u5c06\u963b\u6b62\u201c\u6240\u6709\u57fa\u4e8e Mozilla \u7684\u6d4f\u89c8\u5668\u201d\uff0c\u800c &#8220;(.) Macintosh(.) Firefox\/36.0&#8221; \u5c06\u963b\u6b62\u201cMacintosh \u7248\u672c\u7684 Firefox \u4fee\u8ba2\u7248 36.0\u201d\u3002\u4e0b\u56fe\u7684\u8bbe\u7f6e\u963b\u6b62\u4e86\u5177\u6709\u4e25\u91cd\u5b89\u5168\u6f0f\u6d1e\u7684\u4ece6\u523010\u7684MS Internet Explorer\u6d4f\u89c8\u5668\u3002<\/li>\n<li>\u53ef\u4ee5\u8bbe\u7f6eBlock specific MIME type reply\u4ee5\u6839\u636e\u670d\u52a1\u5668\u7684 MIME \u7c7b\u578b\u56de\u590d\u7684\u5185\u5bb9\u6765\u963b\u6b62 HTTP \u56de\u590d\uff0c\u4f8b\u5982\u56fe\u50cf\u3001\u6587\u672c\u3001HTML\u3001flash\u3001\u97f3\u4e50\u3001MPEG \u7b49\u3002\u4f8b\u5982\uff0c\u8f93\u5165\u201cvideo\/Flv\u201d\u5c06\u963b\u6b62 Youtube flash \u89c6\u9891\u5185\u5bb9\uff0c\u5e76\u4e14\u201capplication\/x-javascript\u201d\u4f1a\u963b\u6b62\u201cjavascript\u201d\u3002<\/li>\n<li>\u53ef\u4ee5\u5728Google GSuite restricted\u00a0\u5b57\u6bb5\u4e2d\u8f93\u5165\u5141\u8bb8\u4f7f\u7528Google GSuite\u7684\u57df\u3002\u6240\u6709\u4e0d\u5c5e\u4e8e\u6b64\u57df\u7684\u5e10\u6237\u90fd\u5c06\u88ab\u7981\u6b62\u4f7f\u7528\u3002<\/li>\n<li>\u53ef\u4ee5\u5c06YouTube Filter\u00a0\u5b57\u6bb5\u8bbe\u7f6e\u4e3aModerate\u6216Strict\u4f7f\u7528 Youtube \u9650\u5236\u3002<\/li>\n<li>\u53ef\u4ee5\u6dfb\u52a0\u5141\u8bb8\u7684\u76ee\u6807 TCP \u7aef\u53e3\u3002<\/li>\n<li>\u53ef\u4ee5\u6dfb\u52a0\u5141\u8bb8\u7684 SSL \u7aef\u53e3\u3002<\/li>\n<li>\u5355\u51fbApply\u6fc0\u6d3b\u8bbe\u7f6e\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/17-0fe7621cdbf2a3d5d207049a71b9a757.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u5728 OPNsense-2 \u4e2d\u4e3a\u4ee3\u7406\u670d\u52a1\u8bbe\u7f6e ACL\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/17-0fe7621cdbf2a3d5d207049a71b9a757.png\" alt=\"\u5728 OPNsense-2 \u4e2d\u4e3a\u4ee3\u7406\u670d\u52a1\u8bbe\u7f6e ACL\" width=\"862\" height=\"663\" \/><\/a><\/p>\n<p>\u63d0\u793a\uff1a\u53ef\u4ee5\u4f7f\u7528\u6b63\u5219\u8868\u8fbe\u5f0f\u3001\u9017\u53f7\u6216\u6309 Enter \u952e\u6765\u521b\u5efa\u65b0\u9879\u76ee\u3002\u201cmydomain.com\u201d\u5339\u914d\u201c .mydomain.com\u201d\u3001\u201chttps?:\/\/( [a-zA-Z] ).mydomain\u201d\u548c\u201chttp(s):\/\/textONLY.mydomain. \u201d\uff1b<\/p>\n<div>\n<div>&#8220;.gif$&#8221; \u5339\u914d &#8221;\u00a0.gif&#8221; \u4f46\u4e0d\u5339\u914d &#8221; .giftest&#8221;\uff1b&#8221;\u00a0[0-9]\u00a0 .gif$&#8221; \u5339\u914d &#8220;123.gif&#8221; \u4f46\u4e0d\u5339\u914d &#8220;test.gif&#8221;\u3002<\/div>\n<\/div>\n<h3 id=\"8-define-remote-access-control-list\">8.\u5b9a\u4e49\u8fdc\u7a0b\u8bbf\u95ee\u63a7\u5236\u5217\u8868<\/h3>\n<p>\u5728\u4ee3\u7406\u670d\u52a1\u5668\u4e2d\u5b9a\u4e49\u8fdc\u7a0b\u8bbf\u95ee\u63a7\u5236\u5217\u8868\uff0c\u6309\u7167\u4ee5\u4e0b\u6b65\u9aa4\u64cd\u4f5c\uff1a<\/p>\n<ol>\n<li>\u5bfc\u822a\u5230Services\u00a0&gt;\u00a0Web Proxy\u00a0&gt;\u00a0Administration\u3002<\/li>\n<li>\u5355\u51fbRemote Access Control Lists\u3002<\/li>\n<li>\u70b9\u51fb\u53f3\u4e0b\u89d2\u7684 \u6309\u94ae\u6dfb\u52a0\u8fdc\u7a0b\u9ed1\u540d\u5355\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/18-8ebc385f732658aeeb5f0c4ee542e7e4.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u5728 OPNsense \u4e2d\u4e3a\u4ee3\u7406\u670d\u52a1\u6dfb\u52a0\u8fdc\u7a0b\u9ed1\u540d\u5355\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/18-8ebc385f732658aeeb5f0c4ee542e7e4.png\" alt=\"\u5728 OPNsense \u4e2d\u4e3a\u4ee3\u7406\u670d\u52a1\u6dfb\u52a0\u8fdc\u7a0b\u9ed1\u540d\u5355\" width=\"1593\" height=\"635\" \/><\/a><\/p>\n<ol start=\"5\">\n<li>\u9009\u4e2denabled\u9009\u9879\u3002<\/li>\n<li>\u8f93\u5165\u4e00\u4e2a\u552f\u4e00\u7684\u6587\u4ef6\u540d\u6765\u5b58\u50a8\u65b0\u7684\u9ed1\u540d\u5355\uff0c\u4f8b\u5982StevenBlackListPorn\u3002<\/li>\n<li>\u8f93\u5165\u8981\u4ece\u4e2d\u68c0\u7d22\u9ed1\u540d\u5355\u7684 URL\uff0c\u4f8b\u5982\uff1ahttps:\/\/raw.githubusercontent.com\/StevenBlack\/hosts\/master\/alternates\/fakenews-gambling-porn-social\/hosts\u3002<\/li>\n<li>\u8f93\u5165\u4e00\u4e2a\u63cf\u8ff0\u6765\u8bf4\u660e\u8be5\u9ed1\u540d\u5355\uff0c\u4f8b\u5982StevenBlackList for social, fake news, gambling, and porn sites\u00a0\u3002<\/li>\n<li>\u5176\u4ed6\u9009\u9879\u53ef\u4ee5\u4fdd\u7559\u4e3a\u9ed8\u8ba4\u503c\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/19-e23017634e47dfe1f60e2a2e147252ca.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u5728 OPNsense \u4e2d\u7f16\u8f91\u4ee3\u7406\u670d\u52a1\u7684\u8fdc\u7a0b\u9ed1\u540d\u5355\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/19-e23017634e47dfe1f60e2a2e147252ca.png\" alt=\"\u5728 OPNsense \u4e2d\u7f16\u8f91\u4ee3\u7406\u670d\u52a1\u7684\u8fdc\u7a0b\u9ed1\u540d\u5355\" width=\"1100\" height=\"702\" \/><\/a><\/p>\n<ol start=\"10\">\n<li>\u5355\u51fbSave\u5b58\u50a8\u8bbe\u7f6e\u3002<\/li>\n<li>\u5355\u51fbDownload ACLs &amp; Apply\u83b7\u53d6\u5e76\u6fc0\u6d3b\u4ee3\u7406\u4e2d\u65b0\u6dfb\u52a0\u7684\u8fdc\u7a0b\u9ed1\u540d\u5355\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/20-4d27dfe376cd814fbdcb6ac823e07435.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u5728 OPNsense \u4e2d\u4e3a\u4ee3\u7406\u670d\u52a1\u4e0b\u8f7d\u548c\u5e94\u7528\u8fdc\u7a0b ACL\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/20-4d27dfe376cd814fbdcb6ac823e07435.png\" alt=\"\u4e0b\u8f7d\u4e0e \u5728 OPNsense \u4e2d\u4e3a\u4ee3\u7406\u670d\u52a1\u5e94\u7528\u8fdc\u7a0b ACL\" width=\"1592\" height=\"648\" \/><\/a><\/p>\n<p>\u63d0\u793a\uff1a\u4e0b\u8f7d\u8fdc\u7a0b\u9ed1\u540d\u5355\u540e\uff0c\u53ef\u4ee5\u901a\u8fc7\u5355\u51fb\u5e26\u6709\u7b14\u56fe\u6807\u7684\u7f16\u8f91\u6309\u94ae\u6765\u7f16\u8f91\u8fdc\u7a0bACL\u3002\u53ef\u4ee5\u9009\u62e9\u8981\u4f7f\u7528\u7684\u7c7b\u522b\u3002\u5b83\u4eec\u7528\u4e8e\u57fa\u4e8e\u7c7b\u522b\u7684 Web \u8fc7\u6ee4\u3002<\/p>\n<h3 id=\"9-define-firewall-rules-to-prevent-clients-from-bypassing-proxy-server\">9.\u5b9a\u4e49\u9632\u706b\u5899\u89c4\u5219\u4ee5\u9632\u6b62\u5ba2\u6237\u7aef\u7ed5\u8fc7\u4ee3\u7406\u670d\u52a1\u5668<\/h3>\n<p>\u5fc5\u987b\u6dfb\u52a0\u9632\u706b\u5899\u89c4\u5219\u4ee5\u786e\u4fdd\u6ca1\u6709\u4eba\u53ef\u4ee5\u7ed5\u8fc7\u4ee3\u7406\u3002\u7531\u4e8e\u6240\u6709\u5ba2\u6237\u7aef\u90fd\u5fc5\u987b\u901a\u8fc7\u8fd0\u884c\u5728\u7aef\u53e3 3128 \u4e0a\u7684 OPNsense \u4ee3\u7406\u670d\u52a1\u5668\u8bbf\u95ee Internet\uff0c\uff0c\u56e0\u6b64\u5fc5\u987b\u963b\u6b62\u53d1\u9001\u5230 80\/433 \u7aef\u53e3\u7684\u6240\u6709 HTTP(S) \u8bf7\u6c42\u3002\u53ef\u4ee5\u901a\u8fc7\u4ee5\u4e0b\u56db\u4e2a\u4e3b\u8981\u6b65\u9aa4\u6765\u963b\u6b62\u7528\u6237\u7ed5\u8fc7\u4ee3\u7406\u670d\u52a1\u5668\uff1a<\/p>\n<ol>\n<li>\u6dfb\u52a0\u9632\u706b\u5899\u89c4\u5219\u963b\u6b62\u7aef\u53e3 80 \u4e0a\u7684\u51fa\u7ad9 HTTP \u6d41\u91cf\u3002<\/li>\n<li>\u6dfb\u52a0\u9632\u706b\u5899\u89c4\u5219\u963b\u6b62\u7aef\u53e3 443 \u4e0a\u7684\u51fa\u7ad9 HTTPS \u6d41\u91cf\u3002<\/li>\n<li>\u5c06\u65b0\u521b\u5efa\u7684\u89c4\u5219\u79fb\u52a8\u5230\u9632\u706b\u5899\u89c4\u5219\u5217\u8868\u7684\u9876\u90e8\u3002<\/li>\n<li>\u6fc0\u6d3b\u65b0\u7684\u9632\u706b\u5899\u89c4\u5219\u3002<\/li>\n<\/ol>\n<p id=\"1-add-a-firewall-rule-to-block-outgoing-http-traffic-on-port-80\"><strong>\uff081\uff09\u6dfb\u52a0\u9632\u706b\u5899\u89c4\u5219\uff0c\u963b\u6b6280\u7aef\u53e3<\/strong><\/p>\n<p>\u6dfb\u52a0\u9632\u706b\u5899\u89c4\u5219\u963b\u6b62\u7aef\u53e3 80 \u4e0a\u7684\u51fa\u7ad9HTTP \u6d41\u91cf\uff0c\u9632\u6b62\u5ba2\u6237\u7aef\u7ed5\u8fc7\u4ee3\u7406\u670d\u52a1\u5668\uff0c\u53ef\u4ee5\u6309\u7167\u4ee5\u4e0b\u6b65\u9aa4\u64cd\u4f5c\uff1a<\/p>\n<ol>\n<li>\u5bfc\u822a\u81f3Firewall&gt; \u3002Rules<\/li>\n<li>\u70b9\u51fb\u4ee3\u7406\u7ed1\u5b9a\u7684\u63a5\u53e3\uff0c\u5982LAN\u3002<\/li>\n<li>\u5355\u51fb \u6309\u94ae\u6dfb\u52a0\u9632\u706b\u5899\u89c4\u5219\u3002<\/li>\n<li>\u5c06\u52a8\u4f5c\u8bbe\u7f6e \u4e3aBlock\u3002<\/li>\n<li>\u5c06\u63a5\u53e3\u8bbe\u7f6e\u4e3a\u4ee3\u7406\u7ed1\u5b9a\u5230\u7684\u63a5\u53e3\uff0c\u5982LAN.<\/li>\n<li>\u5c06\u534f\u8bae\u8bbe\u7f6e \u4e3aTCP\/UDP\u3002<\/li>\n<li>\u5c06\u6e90\u8bbe\u7f6e \u4e3aLAN net<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/21-2731f14b4ce7dddbba20bb59cbbe821a.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u5728 OPNsense \u4e2d\u6dfb\u52a0\u9632\u706b\u5899\u89c4\u5219\u4ee5\u963b\u6b62\u7aef\u53e3 80 \u4e0a\u7684\u4f20\u51fa HTTP \u6d41\u91cf\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/21-2731f14b4ce7dddbba20bb59cbbe821a.png\" alt=\"\u5728 OPNsense \u4e2d\u6dfb\u52a0\u9632\u706b\u5899\u89c4\u5219\u4ee5\u963b\u6b62\u7aef\u53e3 80 \u4e0a\u7684\u4f20\u51fa HTTP \u6d41\u91cf\" width=\"839\" height=\"843\" \/><\/a><\/p>\n<ol start=\"8\">\n<li>\u5c06\u76ee\u6807\u7aef\u53e3\u8303\u56f4\u8bbe\u7f6e\u4e3aHTTP\u3002<\/li>\n<li>\u9009\u4e2d\u8bb0\u5f55\u6b64\u89c4\u5219\u5904\u7406\u7684\u6570\u636e\u5305\u9009\u9879\u6765\u542f\u7528\u65e5\u5fd7\u8bb0\u5f55\u3002<\/li>\n<li>\u8f93\u5165Block Proxy Bypass\u7c7b\u522b\u5b57\u6bb5\u3002<\/li>\n<li>\u8f93\u5165\u63cf\u8ff0\u8bf4\u660e\uff1aBlock HTTP Bypass\u3002<\/li>\n<li>\u5176\u4ed6\u8bbe\u7f6e\u4fdd\u7559\u4e3a\u9ed8\u8ba4\u8bbe\u7f6e\u3002<\/li>\n<li>\u5355\u51fbSave\u6309\u94ae\u4fdd\u5b58\u8bbe\u7f6e\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/22-93b811e4295a355665e25087a7ba0963.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u6dfb\u52a0\u9632\u706b\u5899\u89c4\u5219\u4ee5\u963b\u6b62 OPNsense-2 \u4e2d\u7aef\u53e3 80 \u4e0a\u7684\u4f20\u51fa HTTP \u6d41\u91cf\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/22-93b811e4295a355665e25087a7ba0963.png\" alt=\"\u6dfb\u52a0\u9632\u706b\u5899\u89c4\u5219\u4ee5\u963b\u6b62 OPNsense-2 \u4e2d\u7aef\u53e3 80 \u4e0a\u7684\u4f20\u51fa HTTP \u6d41\u91cf\" width=\"1186\" height=\"807\" \/><\/a><\/p>\n<p id=\"2-add-a-firewall-rule-to-block-outgoing-https-traffic-on-port-443\"><strong>\uff082\uff09\u6dfb\u52a0\u9632\u706b\u5899\u89c4\u5219\uff0c\u963b\u6b62443\u7aef\u53e3<\/strong><\/p>\n<p>\u00a0 \u00a0 \u00a0 \u00a0\u53ef\u4ee5\u6309\u7167\u4ee5\u4e0b\u6b65\u9aa4\u64cd\u4f5c\uff1a<\/p>\n<ol>\n<li>\u5728\u89c4\u5219\u5217\u8868\u9875\u9762\uff0c\u5728\u524d\u9762\u521b\u5efa\u7684\u963b\u6b6280\u7aef\u53e3\u51fa\u7ad9\u7684\u89c4\u5219\u7684\u53f3\u4fa7\uff0c\u5355\u51fbClone\u6309\u94ae\uff0c\u6253\u5f00\u4e00\u4e2a\u65b0\u7684\u9632\u706b\u5899\u89c4\u5219\u7f16\u8f91\u9875\u9762\u3002<\/li>\n<li>\u5c06\u76ee\u6807\u7aef\u53e3\u8303\u56f4\u8bbe\u7f6e\u4e3aHTTPS\u3002<\/li>\n<li>\u5c06\u63cf\u8ff0\u5b57\u6bb5\u66f4\u6539\u4e3aBlock HTTPS Bypass\u3002<\/li>\n<li>\u5176\u4ed6\u8bbe\u7f6e\u4fdd\u7559\u4e3a\u9ed8\u8ba4\u8bbe\u7f6e\u3002<\/li>\n<li>\u5355\u51fbSave\u6309\u94ae\u4fdd\u5b58\u8bbe\u7f6e\u3002<\/li>\n<\/ol>\n<h4 id=\"3-move-the-newly-created-rules-to-the-top-of-the-firewall-rule-lists\"><strong>\uff083\uff09<\/strong>\u5c06\u65b0\u5efa\u7684\u89c4\u5219\u79fb\u81f3\u9632\u706b\u5899\u89c4\u5219\u5217\u8868\u9876\u90e8<\/h4>\n<p>\u5fc5\u987b\u5c06\u521b\u5efa\u7684\u4e24\u4e2a\u9632\u706b\u5899\u89c4\u5219\u79fb\u5230\u5217\u8868\u9876\u90e8\uff0c\u4ee5\u4fbf\u5ba2\u6237\u7aef\u7684 HTTP(S) \u8bf7\u6c42\u4e0e\u5b83\u4eec\u5339\u914d\u5e76\u88ab\u963b\u6b62\u3002<\/p>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/23-7e784047b6144befd114738156143180.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u79fb\u52a8\u9632\u706b\u5899\u89c4\u5219\u4ee5\u9632\u6b62\u5ba2\u6237\u7aef\u7ed5\u8fc7 OPNsense \u4e2d\u7684\u4ee3\u7406\u670d\u52a1\u5668\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/23-7e784047b6144befd114738156143180.png\" alt=\"\u79fb\u52a8\u9632\u706b\u5899\u89c4\u5219\u4ee5\u9632\u6b62\u5ba2\u6237\u7aef\u7ed5\u8fc7 OPNsense \u4e2d\u7684\u4ee3\u7406\u670d\u52a1\u5668\" width=\"1575\" height=\"824\" \/><\/a><\/p>\n<h4 id=\"4-activate-the-new-firewall-rules\"><strong>\uff084\uff09<\/strong>\u6fc0\u6d3b\u65b0\u7684\u9632\u706b\u5899\u89c4\u5219<\/h4>\n<p>\u70b9\u51fb\u9875\u9762\u53f3\u4e0a\u89d2\u7684Apply Changes \u6309\u94ae\u3002<\/p>\n<h3 id=\"10-configure-proxy-in-your-windows-client-or-browser\">10.\u914d\u7f6eWindows\u5ba2\u6237\u7aef\u6216\u6d4f\u89c8\u5668<\/h3>\n<p>\u6309\u7167\u4ee5\u4e0b\u6b65\u9aa4\u8bbe\u7f6e Windows \u5ba2\u6237\u7aef\u4e2d\u7684\u4ee3\u7406\uff0c\u8ba9\u5ba2\u6237\u7aef\u901a\u8fc7\u4ee3\u7406\u670d\u52a1\u5668\u8bbf\u95ee\u7f51\u7edc\uff1a<\/p>\n<ol>\n<li>\u53f3\u952e\u5355\u51fb Windows 10 PC \u4efb\u52a1\u680f\u4e0a\u7684\u7f51\u7edc\u56fe\u6807\uff0c\u6253\u5f00\u7f51\u7edc\u548c Internet \u8bbe\u7f6e\u3002\u6216\u6253\u5f00chrome\u6d4f\u89c8\u5668\uff0c\u627e\u5230Settings&gt;\u00a0Advanced&gt;\u00a0System&gt;\u00a0Open your computer&#8217;s proxy settings\u9009\u9879\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/24-993b80e78de640b8c4d6777c1213eaf8.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u5728 Chrome \u6d4f\u89c8\u5668\u4e2d\u8bbf\u95ee\u4ee3\u7406\u670d\u52a1\u5668\u8bbe\u7f6e\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/24-993b80e78de640b8c4d6777c1213eaf8.png\" alt=\"\u5728 Chrome \u6d4f\u89c8\u5668\u4e2d\u8bbf\u95ee\u4ee3\u7406\u670d\u52a1\u5668\u8bbe\u7f6e\" width=\"1556\" height=\"932\" \/><\/a><\/p>\n<p>\u56fe 24.\u00a0\u5728 Chrome \u6d4f\u89c8\u5668\u4e2d\u8bbf\u95ee\u4ee3\u7406\u670d\u52a1\u5668\u8bbe\u7f6e<\/p>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/25-fd2e825bb6064121ef5d327faa439fde.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/25-fd2e825bb6064121ef5d327faa439fde.png\" alt=\"\u5728 Windows 10 \u5ba2\u6237\u7aef\u4e2d\u8bbf\u95ee\u4ee3\u7406\u670d\u52a1\u5668\u8bbe\u7f6e\" width=\"795\" height=\"592\" \/><\/a><\/p>\n<ol start=\"2\">\n<li>\u70b9\u51fb\u4ee3\u7406\u3002<\/li>\n<li>\u5728\u4f7f\u7528\u4ee3\u7406\u670d\u52a1\u5668\u9009\u9879\uff0c\u624b\u52a8\u8f93\u5165\u4ee3\u7406\u5730\u5740\u548c\u7aef\u53e3\u3002<\/li>\n<li>\u5728\u5730\u5740\u5b57\u6bb5\u4e2d\u8f93\u5165\u4ee3\u7406\u670d\u52a1\u5668 IP \u5730\u5740\uff0c\u598210.10.10.1.<\/li>\n<li>\u5728\u7aef\u53e3\u5b57\u6bb5\u4e2d\u8f93\u5165\u5728\u4e0a\u4e00\u8282\u4e2d\u8bbe\u7f6e\u7684\u4ee3\u7406\u670d\u52a1\u5668\u7aef\u53e3\u53f7\uff0c\u59823128\u3002<\/li>\n<li>\u5355\u51fbSave\u6fc0\u6d3b\u8bbe\u7f6e\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/26-ff8b890b68c676d3bc143c0a7743bf31-1.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/26-ff8b890b68c676d3bc143c0a7743bf31-1.png\" alt=\"\" width=\"793\" height=\"598\" \/><\/a><\/p>\n<p>\u4ee3\u7406\u670d\u52a1\u5668\u548c\u5ba2\u6237\u7aef\u914d\u7f6e\u5df2\u5b8c\u6210\u3002\u73b0\u5728\uff0c\u53ef\u4ee5\u6d4b\u8bd5\u8bbe\u7f6e\u3002<\/p>\n<h3 id=\"testing-proxy-configuration\">11.\u6d4b\u8bd5\u4ee3\u7406\u914d\u7f6e<\/h3>\n<p>\u6309\u7167\u4ee5\u4e0b\u6b65\u9aa4\u6d4b\u8bd5\u4ee3\u7406\u914d\u7f6e\uff1a<\/p>\n<ol>\n<li>\u5728\u5ba2\u6237\u7684 PC \u4e0a\u6253\u5f00\u6d4f\u89c8\u5668\u3002\u5982\u679c\u5728\u4ee3\u7406\u8bbe\u7f6e\u4e2d\u542f\u7528\u4e86\u8eab\u4efd\u9a8c\u8bc1\uff0c\u8fd9\u5c06\u5f39\u51fa\u4e00\u4e2a\u7c7b\u4f3c\u4e8e\u56fe 27 \u7684\u7528\u6237\u8eab\u4efd\u9a8c\u8bc1\u5bf9\u8bdd\u6846\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/86386827.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/86386827.png\" alt=\"\" width=\"643\" height=\"367\" \/><\/a><\/p>\n<ol start=\"2\">\n<li>\u5c1d\u8bd5\u901a\u8fc7\u6d4f\u89c8\u5668\u8fde\u63a5\u6253\u5f00http:\/\/wizhumpgyros.com\/\u3002\u7531\u4e8e\u8be5 URL \u5b58\u5728\u4e8e\u8fdc\u7a0b ACL \u6dfb\u52a0\u5230\u4ee3\u7406\u670d\u52a1\u5668\u7684StevenBlack \u5217\u8868\u4e2d\uff0c\u56e0\u6b64\u4f1a\u88ab\u963b\u6b62\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/28-e576c614b748e16e8b37f1d28093aeb1.png\"><img loading=\"lazy\" decoding=\"async\" title=\"OPNsense \u4ee3\u7406\u963b\u6b62\u8bbf\u95ee\u8fdc\u7a0b\u9ed1\u540d\u5355\u7ad9\u70b9\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/28-e576c614b748e16e8b37f1d28093aeb1.png\" alt=\"OPNsense \u4ee3\u7406\u963b\u6b62\u8bbf\u95ee\u8fdc\u7a0b\u9ed1\u540d\u5355\u7ad9\u70b9\" width=\"1357\" height=\"495\" \/><\/a><\/p>\n<ol start=\"3\">\n<li>\u5bfc\u822a\u5230Service&gt;Web Proxy &gt;Access Log\uff0c\u5c06\u4f1a\u770b\u5230\u8bbf\u95ee\u88ab\u963b\u6b62\u7684\u4fe1\u606f\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/29-5f1d412fcef69ad72deeed9061238b74.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u5728 OPNsense \u4ee3\u7406\u4e2d\u67e5\u770b\u8bbf\u95ee\u65e5\u5fd7\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/29-5f1d412fcef69ad72deeed9061238b74.png\" alt=\"\u5728 OPNsense \u4ee3\u7406\u4e2d\u67e5\u770b\u8bbf\u95ee\u65e5\u5fd7\" width=\"1564\" height=\"560\" \/><\/a><\/p>\n<h1 id=\"how-to-enable-web-filtering-in-opnsense-proxy\">\u542f\u7528Web\u8fc7\u6ee4<\/h1>\n<p>OPNsense \u901a\u8fc7\u5229\u7528\u5185\u7f6e\u4ee3\u7406\u548c\u514d\u8d39\u6216\u5546\u4e1a\u9ed1\u540d\u5355\u4e4b\u4e00\u6267\u884c\u57fa\u4e8e\u7c7b\u522b\u7684 Web \u8fc7\u6ee4\u3002\u5728\u672c\u8282\u4e2d\uff0c\u6211\u4eec\u5c06\u4f7f\u7528 Shalla \u7684\u9ed1\u540d\u5355\uff0c\u5b83\u662f\u6309\u7c7b\u522b\u7ec4\u7ec7\u7684 URL \u5217\u8868\u7684\u96c6\u5408\uff0c\u65e8\u5728\u4e0e SquidGuard \u6216 Dansguardian \u7b49 URL \u8fc7\u6ee4\u5668\u4e00\u8d77\u4f7f\u7528\u3002\u5b83\u4eec\u53ef\u4ee5\u514d\u8d39\u7528\u4e8e\u4e2a\u4eba\u548c\u5546\u4e1a\u76ee\u7684\u3002<\/p>\n<div>\n<div>\u63d0\u793a\uff1a\u4e5f\u53ef\u4ee5\u4f7f\u7528\u56fe\u5362\u5179\u5927\u5b66\u7684 Fabrice Prigent \u7684 UT1\u201c\u7f51\u7edc\u5206\u7c7b\u5217\u8868\u201d\u3002\u5728\u77e5\u8bc6\u5171\u4eab\u8bb8\u53ef\u4e0b\u53ef\u4ee5\u514d\u8d39\u4f7f\u7528\u3002<\/div>\n<div>\n<p>\u5176\u4ed6\u6d41\u884c\u7684\u7f51\u7edc\u8fc7\u6ee4\u5217\u8868\u53ef\u4ee5\u5728 https:\/\/github.com\/maravento\/blackweb\u627e\u5230\u3002<\/p>\n<\/div>\n<\/div>\n<p>\u53ef\u4ee5\u901a\u8fc7\u4ee5\u4e0b\u4e24\u4e2a\u4e3b\u8981\u6b65\u9aa4\u5728OPNsense \u4ee3\u7406\u670d\u52a1\u4e2d\u542f\u7528 Web \u8fc7\u6ee4\uff1a<\/p>\n<ol>\n<li>\u914d\u7f6e\u8fdc\u7a0b\u8bbf\u95ee\u63a7\u5236\u5217\u8868<\/li>\n<li>\u914d\u7f6e Web \u7c7b\u522b<\/li>\n<\/ol>\n<div>\n<div>\u63d0\u793a\uff1a\u5047\u8bbe\u5df2\u7ecf\u6309\u7167\u4e0a\u4e00\u8282\u4e2d\u7684\u8bf4\u660e\u5728 OPNsense \u4e2d\u914d\u7f6e\u4e86\u57fa\u672c\u7f13\u5b58\u4ee3\u7406\u3002<\/div>\n<\/div>\n<h3 id=\"1-configure-remote-access-control-list\"><strong>\u914d\u7f6e\u8fdc\u7a0b\u8bbf\u95ee\u63a7\u5236\u5217\u8868<\/strong><\/h3>\n<p>\u8981\u5728\u4ee3\u7406\u670d\u52a1\u5668\u4e2d\u5b9a\u4e49\u8fdc\u7a0b\u8bbf\u95ee\u63a7\u5236\u5217\u8868\uff0c\u53ef\u4ee5\u6309\u7167\u4ee5\u4e0b\u6b65\u9aa4\u64cd\u4f5c\uff1a<\/p>\n<ol>\n<li>\u5bfc\u822a\u5230Services\u00a0&gt;\u00a0Web Proxy\u00a0&gt;\u00a0Administration\u3002<\/li>\n<li>\u5355\u51fbRemote Access Control Lists\u9009\u9879\u5361\u3002<\/li>\n<li>\u70b9\u51fb\u53f3\u4e0b\u89d2\u7684 \u56fe\u6807\u6309\u94ae\u6dfb\u52a0\u8fdc\u7a0b\u9ed1\u540d\u5355\u3002<\/li>\n<li>\u9009\u4e2denabled\u9009\u9879\u3002<\/li>\n<li>\u8f93\u5165\u4e00\u4e2a\u552f\u4e00\u7684\u6587\u4ef6\u540d\u6765\u5b58\u50a8\u65b0\u7684\u9ed1\u540d\u5355\uff0c\u4f8b\u5982ShallaBlackList.<\/li>\n<li>\u8f93\u5165\u8981\u4ece\u4e2d\u68c0\u7d22\u9ed1\u540d\u5355\u7684 URL\uff0c\u4f8b\u5982\uff1ahttp:\/\/www.shallalist.de\/Downloads\/shallalist.tar.gz.<\/li>\n<li>\u8f93\u5165\u63cf\u8ff0\u8bf4\u660e\uff0c\u5982ShallaBlackList for category-based web filtering\u3002<\/li>\n<li>\u5176\u4ed6\u9009\u9879\u4fdd\u7559\u4e3a\u9ed8\u8ba4\u503c\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/30-c2aa47f8e6a54f4c5f8cc33655579ec6.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u5728 OPNsense \u4ee3\u7406\u670d\u52a1\u4e2d\u4e3a\u57fa\u4e8e\u7c7b\u522b\u7684 Web \u8fc7\u6ee4\u6dfb\u52a0 Shalla \u7684\u9ed1\u540d\u5355\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/30-c2aa47f8e6a54f4c5f8cc33655579ec6.png\" alt=\"\u5728 OPNsense \u4ee3\u7406\u670d\u52a1\u4e2d\u4e3a\u57fa\u4e8e\u7c7b\u522b\u7684 Web \u8fc7\u6ee4\u6dfb\u52a0 Shalla \u7684\u9ed1\u540d\u5355\" width=\"1275\" height=\"752\" \/><\/a><\/p>\n<p>9.\u5355\u51fbSave\u5b58\u50a8\u8bbe\u7f6e\u3002<\/p>\n<p>10.\u5355\u51fbDownload ACLs &amp; Apply\uff0c\u83b7\u53d6\u5e76\u6fc0\u6d3b\u4ee3\u7406\u4e2d\u65b0\u6dfb\u52a0\u7684\u8fdc\u7a0b\u9ed1\u540d\u5355\u3002<\/p>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/31-113a08152bde32d30c775ad73c8d2a33.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u4e0b\u8f7d\u548c\u5e94\u7528\u8fdc\u7a0b ACL \u4ee5\u5728 OPNsense \u4ee3\u7406\u670d\u52a1\u4e2d\u8fdb\u884c\u57fa\u4e8e\u7c7b\u522b\u7684 Web \u8fc7\u6ee4\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/31-113a08152bde32d30c775ad73c8d2a33.png\" alt=\"\u4e0b\u8f7d\u4e0e \u5728 OPNsense \u4ee3\u7406\u670d\u52a1\u4e2d\u4e3a\u57fa\u4e8e\u7c7b\u522b\u7684 Web \u8fc7\u6ee4\u5e94\u7528\u8fdc\u7a0b ACL\" width=\"1582\" height=\"681\" \/><\/a><\/p>\n<h3 id=\"2-configure-web-categories\"><strong>\u914d\u7f6e\u7f51\u9875\u5206\u7c7b<\/strong><\/h3>\n<p>\u4e0b\u8f7d\u8fdc\u7a0b\u9ed1\u540d\u5355\u540e\uff0c\u53ef\u4ee5\u6309\u7167\u4ee5\u4e0b\u6b65\u9aa4\u9009\u62e9\u8981\u4f7f\u7528\u7684\u7f51\u9875\u7c7b\u522b\uff1a<\/p>\n<ol>\n<li>\u5355\u51fb\u8fdc\u7a0b\u8bbf\u95ee\u63a7\u5236\u5217\u8868\u9875\u9762\u4e2d\u65b0\u6dfb\u52a0\u7684\u9ed1\u540d\u5355\u65c1\u8fb9\u5e26\u6709\u7b14\u56fe\u6807\u7684\u7f16\u8f91\u6309\u94ae\u3002<\/li>\n<li>\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0c\u5728\u7c7b\u522b\u5b57\u6bb5\u4e2d\u9009\u62e9\u6240\u6709 Web \u7c7b\u522b\u8fdb\u884c\u8fc7\u6ee4\u3002\u53ef\u4ee5\u53d6\u6d88\u9009\u4e2d\u4efb\u4f55\u7c7b\u522b\u6765\u5141\u8bb8\u7528\u6237\u6839\u636e\u9700\u8981\u8bbf\u95ee\u5b83\u4eec\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/32-fb7541f66f6504a77000f3a3a7dddfb1.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u9009\u62e9\u8981\u5728 OPNsense \u4ee3\u7406\u4e2d\u963b\u6b62\u7684 Web \u7c7b\u522b\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/32-fb7541f66f6504a77000f3a3a7dddfb1.png\" alt=\"\u9009\u62e9\u8981\u5728 OPNsense \u4ee3\u7406\u4e2d\u963b\u6b62\u7684 Web \u7c7b\u522b\" width=\"1132\" height=\"719\" \/><\/a><\/p>\n<p>\u56fe 32.\u00a0\u9009\u62e9\u8981\u5728 OPNsense \u4ee3\u7406\u4e2d\u963b\u6b62\u7684 Web \u7c7b\u522b<\/p>\n<ol start=\"3\">\n<li>\u5355\u51fbSave\u4ee5\u5b58\u50a8\u65b0\u8bbe\u7f6e\u3002<\/li>\n<li>\u518d\u6b21\u5355\u51fbDownload ACLs\uff0c\u4e0b\u8f7d\u5e76\u91cd\u5efa\u4ec5\u5305\u542b\u6240\u9009\u7c7b\u522b\u7684\u5217\u8868\u3002<\/li>\n<\/ol>\n<h3 id=\"testing-web-filtering-configuration\"><strong>\u6d4b\u8bd5\u914d\u7f6e<\/strong><\/h3>\n<p>\u6211\u4eec\u5047\u8bbe\u5728\u4e0a\u4e00\u6b65\u4e2d\u9009\u62e9\u4e86\u8981\u963b\u6b62\u7684\u5e7f\u544a\u7c7b\u522b\u3002\u73b0\u5728\u53ef\u4ee5\u6309\u7167\u4ee5\u4e0b\u6b65\u9aa4\u6d4b\u8bd5\u4ee3\u7406\u914d\u7f6e\uff1a<\/p>\n<ol>\n<li>\u5728\u5ba2\u6237\u7684 PC \u4e0a\u6253\u5f00\u6d4f\u89c8\u5668\u3002<\/li>\n<li>\u5c1d\u8bd5\u901a\u8fc7\u6d4f\u89c8\u5668\u6253\u5f00trafficcenter.com\uff0c\u7531\u4e8e\u8be5 URL \u5728\u8fdc\u7a0b ACL Stalla \u7684\u9ed1\u540d\u5355\u4e2d\uff0c\u56e0\u6b64\u4f1a\u88ab\u963b\u6b62\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/33-ec418f590d42ff6388adf1e2d14d783c.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u5728 OPNsense \u4ee3\u7406\u4e2d\u8bbf\u95ee Adv \u7c7b\u522b\u88ab\u963b\u6b62\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/33-ec418f590d42ff6388adf1e2d14d783c.png\" alt=\"\u5728 OPNsense \u4ee3\u7406\u4e2d\u8bbf\u95ee Adv \u7c7b\u522b\u88ab\u963b\u6b62\" width=\"1362\" height=\"455\" \/><\/a><\/p>\n<ol start=\"4\">\n<li>\u5bfc\u822a\u5230Service&gt;Web Proxy &gt;Access Log\uff0c\u5c06\u4f1a\u770b\u5230\u8bbf\u95ee\u88ab\u963b\u6b62\u7684\u4fe1\u606f\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/34-346064afe05abac16b2e12fde0e90056.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u5728 OPNsense \u4ee3\u7406\u4e2d\u67e5\u770b\u8bbf\u95ee\u65e5\u5fd7\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/34-346064afe05abac16b2e12fde0e90056.png\" alt=\"\u5728 OPNsense \u4ee3\u7406\u4e2d\u67e5\u770b\u8bbf\u95ee\u65e5\u5fd7\" width=\"1553\" height=\"353\" \/><\/a><\/p>\n<p>\u56fe 34.\u00a0\u5728 OPNsense \u4ee3\u7406\u4e2d\u67e5\u770b\u8bbf\u95ee\u65e5\u5fd7<\/p>\n<h1 id=\"how-to-enable-transparent-ssl-mode-in-opnsense-proxy\">\u542f\u7528\u900f\u660eSSL\u6a21\u5f0f<\/h1>\n<p>\u53ef\u4ee5\u5c06 OPNsense\u4ee3\u7406\u670d\u52a1\u5668\u914d\u7f6e\u4e3a\u4ee5\u900f\u660e\u6a21\u5f0f\u8fd0\u884c\u3002\u8fd9\u6837\u5ba2\u6237\u7aef\u6d4f\u89c8\u5668\u5c31\u4e0d\u9700\u8981\u4e3a\u7f51\u7edc\u4ee3\u7406\u8fdb\u884c\u4efb\u4f55\u914d\u7f6e\u3002\u6240\u6709\u7f51\u7edc\u6d41\u91cf\u90fd\u901a\u8fc7\u7f51\u7edc\u5730\u5740\u8f6c\u6362\u81ea\u52a8\u8def\u7531\u5230\u4ee3\u7406\u3002<\/p>\n<p>\u5728\u672c\u8282\u4e2d\uff0c\u6211\u4eec\u5c06\u4ecb\u7ecd\u5982\u4f55\u5728 OPNsense \u9632\u706b\u5899\u4e2d\u914d\u7f6e HTTP \u548c HTTPS\uff08SSL \u78b0\u649e\uff09\u900f\u660e\u4ee3\u7406\u6a21\u5f0f\u3002<\/p>\n<p>\u6ce8\u610f\uff1a\u4f7f\u7528\u900f\u660e HTTPS \u4ee3\u7406\u53ef\u80fd\u5f88\u5371\u9669\uff0c\u5e76\u4e14\u53ef\u80fd\u4f1a\u8ba9\u4f60\u6240\u4f7f\u7528\u7684\u670d\u52a1\u7684\u9650\u5236\uff0c\u4f8b\u5982\u7535\u5b50\u5546\u52a1\uff0c\u56e0\u4e3a\u900f\u660e SSL\/HTTPS \u4ee3\u7406\u6a21\u5f0f\u5229\u7528\u4e86\u4e00\u79cd\u79f0\u4e3a\u4e2d\u95f4\u4eba\u7684\u65b9\u6cd5\u3002\u5982\u679c\u5bf9\u81ea\u5df1\u7684\u80fd\u529b\u6709\u4fe1\u5fc3\uff0c\u8bf7\u4ec5\u914d\u7f6e\u548c\u4f7f\u7528\u900f\u660e\u6a21\u5f0f\u3002\u5982\u679c\u914d\u7f6e\u9519\u8bef\uff0c\u9632\u706b\u5899\u7684\u5b89\u5168\u9632\u5fa1\u53ef\u80fd\u4f1a\u88ab\u4e25\u91cd\u524a\u5f31\u800c\u4e0d\u662f\u52a0\u5f3a\u3002<\/p>\n<p>\u901a\u8fc7\u4ee5\u4e0b 5 \u4e2a\u4e3b\u8981\u6b65\u9aa4\u5728OPNsense\u4ee3\u7406\u670d\u52a1\u4e2d\u542f\u7528\u900f\u660e SSL \u6a21\u5f0f\uff1a<\/p>\n<ol>\n<li>\u4e3a\u900f\u660e SSL\u521b\u5efa\u8bc1\u4e66\u9881\u53d1\u673a\u6784<\/li>\n<li>\u7981\u7528\u4ee3\u7406\u670d\u52a1\u5668\u7684\u8eab\u4efd\u9a8c\u8bc1<\/li>\n<li>\u542f\u7528\u900f\u660e HTTP\u548c SSL \u6a21\u5f0f<\/li>\n<li>\u914d\u7f6e\u975eSSL \u78b0\u649e<\/li>\n<li>\u4e3a HTTP(S) \u6dfb\u52a0 NAT \u9632\u706b\u5899\u89c4\u5219<\/li>\n<li>\u914d\u7f6e\u4ee3\u7406\u5ba2\u6237\u7aef<\/li>\n<\/ol>\n<div>\n<div>\u63d0\u793a\uff1a\u5047\u8bbe\u5df2\u7ecf\u6309\u7167\u7b2c\u4e00\u90e8\u5206\u4e2d\u7684\u8bf4\u660e\u5728 OPNsense \u4e2d\u914d\u7f6e\u4e86\u57fa\u672c\u7f13\u5b58\u4ee3\u7406\u3002<\/div>\n<\/div>\n<p>\u4e0b\u9762\u7b80\u8981\u8bf4\u660e\u5728OPNsense\u4ee3\u7406\u4e2d\u542f\u7528\u900f\u660e SSL \u6a21\u5f0f\u7684\u6bcf\u4e2a\u4e3b\u8981\u6b65\u9aa4\u3002<\/p>\n<h3 id=\"1-create-a-certificate-authority-for-transparent-ssl\">\u521b\u5efa\u8bc1\u4e66\u9881\u53d1\u673a\u6784<\/h3>\n<p>\u5728\u4ee3\u7406\u670d\u52a1\u5668\u4e2d\u542f\u7528\u900f\u660e SSL \u6a21\u5f0f\u4e4b\u524d\uff0c\u5982\u679c\u6ca1\u6709\u5185\u90e8\u8bc1\u4e66\u9881\u53d1\u673a\u6784\uff0c\u5219\u9700\u8981\u521b\u5efa\u4e00\u4e2a\u5185\u90e8\u8bc1\u4e66\u9881\u53d1\u673a\u6784\u3002<\/p>\n<h3 id=\"2-disable-authentication-for-proxy-server\"><strong>\u7981\u7528\u4ee3\u7406\u8ba4\u8bc1<\/strong><\/h3>\n<p>\u5728\u900f\u660e\u6a21\u5f0f\u4e0b\u64cd\u4f5c\u65f6\uff0c\u65e0\u6cd5\u4f7f\u7528\u4ee3\u7406\u8eab\u4efd\u9a8c\u8bc1\u3002\u7531\u4e8e\u6d4f\u89c8\u5668\u4e0d\u77e5\u9053\u6b63\u5728\u4f7f\u7528\u4ee3\u7406\uff0c\u56e0\u6b64\u65e0\u6cd5\u54cd\u5e94\u4ee3\u7406\u8eab\u4efd\u9a8c\u8bc1\u8bf7\u6c42\u3002\u8981\u66f4\u6539 OPNsense \u4e2d\u4ee3\u7406\u670d\u52a1\u7684\u8eab\u4efd\u9a8c\u8bc1\u65b9\u6cd5\uff0c\u53ef\u4ee5\u6309\u7167\u4ee5\u4e0b\u6b65\u9aa4\u64cd\u4f5c\uff1a<\/p>\n<ol>\n<li>\u5bfc\u822a\u5230Services\u00a0&gt;\u00a0Web Proxy\u00a0&gt;\u00a0Administration\u3002<\/li>\n<li>\u5355\u51fbForward Proxy\u67e5\u770b\u4e0b\u62c9\u83dc\u5355\u3002<\/li>\n<li>\u70b9\u51fbAuthentication Settings\u3002<\/li>\n<li>\u5355\u51fb\u8eab\u4efd\u9a8c\u8bc1\u65b9\u6cd5\u5b57\u6bb5\u4e2d\u7684Clear All\u94fe\u63a5\u6e05\u9664\u4f55\u8eab\u4efd\u9a8c\u8bc1\u65b9\u6cd5\u3002<\/li>\n<\/ol>\n<h3 id=\"3-enable-transparent-http-and-ssl-mode\">\u542f\u7528\u900f\u660eHTTP\u548cSSL\u6a21\u5f0f<\/h3>\n<p>\u6309\u7167\u4e0b\u9762\u7684\u540e\u7eed\u6b65\u9aa4\u542f\u7528\u900f\u660e HTTP \u6a21\u5f0f\uff1a<\/p>\n<ol>\n<li>\u5bfc\u822a\u5230Services\u00a0&gt;\u00a0Web Proxy\u00a0&gt;\u00a0Administration\u3002<\/li>\n<li>\u5355\u51fbForward Proxy\u9009\u9879\u5361\uff0c\u627e\u5230General Forward Settings\u3002<\/li>\n<li>\u9009\u4e2d\u542f\u7528\u900f\u660e HTTP \u4ee3\u7406\u9009\u9879\u3002<\/li>\n<li>\u9009\u4e2d\u542f\u7528 SSL \u68c0\u67e5\u9009\u9879\u3002<\/li>\n<li>\u5355\u51fbApply\u6309\u94ae\u5e94\u7528\u8bbe\u7f6e\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/35-42e16634d1ee0f8c07df728aac0f66e4.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u5728 OPNsense \u4ee3\u7406\u4e2d\u542f\u7528\u900f\u660e HTTP \u548c SSL \u6a21\u5f0f\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/35-42e16634d1ee0f8c07df728aac0f66e4.png\" alt=\"\u5728 OPNsense \u4ee3\u7406\u4e2d\u542f\u7528\u900f\u660e HTTP \u548c SSL \u6a21\u5f0f\" width=\"948\" height=\"828\" \/><\/a>\u00a0\u56fe 35.\u00a0\u5728 OPNsense \u4ee3\u7406\u4e2d\u542f\u7528\u900f\u660e HTTP \u548c SSL \u6a21\u5f0f<\/p>\n<h3>\u914d\u7f6e\u975eSSL\u78b0\u649e<\/h3>\n<p>\u4e3a\u786e\u4fdd\u5df2\u77e5\u7ad9\u70b9\u4e0d\u4f1a\u88ab\u78b0\u649e\u5e76\u4fdd\u7559\u5176\u539f\u59cb\u5b89\u5168\u5c42\uff0c\u9700\u8981\u6309\u7167\u4ee5\u4e0b\u6b65\u9aa4\u5c06\u5b83\u4eec\u6dfb\u52a0\u5230 SSL \u975e\u78b0\u649e\u7ad9\u70b9\u5b57\u6bb5\uff0c\u5305\u62ec\u6240\u6709\u5b50\u57df\uff1a<\/p>\n<ol>\n<li>\u5bfc\u822a\u5230Services\u00a0&gt;\u00a0Web Proxy\u00a0&gt;\u00a0Administration\u3002<\/li>\n<li>\u5355\u51fbForward Proxy\u9009\u9879\u5361\uff0c\u627e\u5230General Forward Settings<\/li>\n<li>\u5c06\u57df\u8f93\u5165SSL\u975e\u78b0\u649e\u7ad9\u70b9\uff0c\u7136\u540e\u6309 Enter\u3002<\/li>\n<\/ol>\n<div>\n<div>\u63d0\u793a\uff1a\u8981\u5305\u542b\u6240\u6709\u5b50\u57df\uff0c\u5fc5\u987b\u4ee5.\u5f00\u5934\uff0c\u4f8b\u5982\uff1a.paypal.com,\u00a0.google.com,\u00a0.amazon.com,\u00a0.hsbc.com\u3002<\/div>\n<\/div>\n<div>\n<div>\u6ce8\u610f\uff1a\u786e\u4fdd\u5728\u6b64\u5b57\u6bb5\u4e2d\u5305\u542b\u63d0\u4f9b\u4e2a\u4eba\u6216\u767b\u5f55\u4fe1\u606f\u7684\u6240\u6709\u94f6\u884c\u7f51\u7ad9\u548c\u7f51\u7ad9\u3002<\/div>\n<\/div>\n<h3>\u4e3a HTTP(S) \u6dfb\u52a0 NAT \u9632\u706b\u5899\u89c4\u5219<\/h3>\n<p>\u6309\u7167\u4ee5\u4e0b\u6b65\u9aa4\u4e3a HTTP(S) \u6dfb\u52a0 NAT \u9632\u706b\u5899\u89c4\u5219\uff1a<\/p>\n<ol>\n<li>\u5bfc\u822a\u5230Services\u00a0&gt;\u00a0Web Proxy\u00a0&gt;\u00a0Administration\u3002<\/li>\n<li>\u5355\u51fbForward Proxy\u9009\u9879\u5361\uff0c\u627e\u5230General Forward Settings\u3002<\/li>\n<li>\u5355\u51fb\u542f\u7528\u900f\u660e HTTP \u4ee3\u7406\u9009\u9879\u5de6\u4fa7\u7684 (i) \u56fe\u6807\u3002<\/li>\n<li>\u5355\u51fb\u6dfb\u52a0\u65b0\u9632\u706b\u5899\u89c4\u5219\u94fe\u63a5\uff0c\u4f1a\u8f6c\u5230Firewall&gt;\u00a0NAT&gt;Port Forward\u8bbe\u7f6e\u9875\u9762\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/36-fc140567748a1ee803382f9a55d66169.png\"><img loading=\"lazy\" decoding=\"async\" title=\"OPNsense proxy-1 \u4e2d\u900f\u660e HTTP \u6a21\u5f0f\u7684 NAT \u9632\u706b\u5899\u89c4\u5219\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/36-fc140567748a1ee803382f9a55d66169.png\" alt=\"OPNsense proxy-1 \u4e2d\u900f\u660e HTTP \u6a21\u5f0f\u7684 NAT \u9632\u706b\u5899\u89c4\u5219\" width=\"1174\" height=\"807\" \/><\/a><\/p>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/37-d7c0346675d4ba1016f6a70a89048ab7.png\"><img loading=\"lazy\" decoding=\"async\" title=\"OPNsense proxy-2 \u4e2d\u900f\u660e HTTP \u6a21\u5f0f\u7684 NAT \u9632\u706b\u5899\u89c4\u5219\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/37-d7c0346675d4ba1016f6a70a89048ab7.png\" alt=\"OPNsense proxy-2 \u4e2d\u900f\u660e HTTP \u6a21\u5f0f\u7684 NAT \u9632\u706b\u5899\u89c4\u5219\" width=\"786\" height=\"856\" \/><\/a><\/p>\n<ol start=\"5\">\n<li>\u5355\u51fbSave\u6309\u94ae\u3002<\/li>\n<li>\u5bfc\u822a\u5230Services\u00a0&gt;\u00a0Web Proxy\u00a0&gt;\u00a0Administration\u3002<\/li>\n<li>\u5355\u51fbForward Proxy\u9009\u9879\u5361\uff0c\u627e\u5230General Forward Settings\u3002<\/li>\n<li>\u5355\u51fb\u542f\u7528 SSL \u68c0\u67e5\u9009\u9879\u5de6\u4fa7\u7684 (i) \u56fe\u6807\u3002<\/li>\n<li>\u5355\u51fb\u6dfb\u52a0\u65b0\u9632\u706b\u5899\u89c4\u5219\u94fe\u63a5\uff0c\u4f1a\u8f6c\u5230Firewall&gt;\u00a0NAT&gt;Port Forward\u8bbe\u7f6e\u9875\u9762\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/38-d568a904a743730b17fa10003cf83732.png\"><img loading=\"lazy\" decoding=\"async\" title=\"OPNsense proxy-1 \u4e2d\u900f\u660e SSL \u6a21\u5f0f\u7684 NAT \u9632\u706b\u5899\u89c4\u5219\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/38-d568a904a743730b17fa10003cf83732.png\" alt=\"OPNsense proxy-1 \u4e2d\u900f\u660e SSL \u6a21\u5f0f\u7684 NAT \u9632\u706b\u5899\u89c4\u5219\" width=\"1151\" height=\"797\" \/><\/a><\/p>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/39-6525e0571569d012b2928d689241bb21.png\"><img loading=\"lazy\" decoding=\"async\" title=\"OPNsense proxy-2 \u4e2d\u900f\u660e SSL \u6a21\u5f0f\u7684 NAT \u9632\u706b\u5899\u89c4\u5219\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/39-6525e0571569d012b2928d689241bb21.png\" alt=\"OPNsense proxy-2 \u4e2d\u900f\u660e SSL \u6a21\u5f0f\u7684 NAT \u9632\u706b\u5899\u89c4\u5219\" width=\"797\" height=\"858\" \/><\/a><\/p>\n<ol start=\"10\">\n<li>\u5355\u51fbSave\u6309\u94ae\u3002<\/li>\n<li>\u5355\u51fbApply Changes\u6fc0\u6d3b\u8bbe\u7f6e\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/40-ea9627042647bbd7d718d3bd6de94a68.png\"><img loading=\"lazy\" decoding=\"async\" title=\"OPNsense \u4ee3\u7406\u4e2d\u900f\u660e HTTP\/SSL \u6a21\u5f0f\u7684 NAT \u9632\u706b\u5899\u89c4\u5219\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/40-ea9627042647bbd7d718d3bd6de94a68.png\" alt=\"OPNsense \u4ee3\u7406\u4e2d\u900f\u660e HTTP\/SSL \u6a21\u5f0f\u7684 NAT \u9632\u706b\u5899\u89c4\u5219\" width=\"1578\" height=\"791\" \/><\/a><\/p>\n<h3 id=\"6-configure-proxy-client\">\u914d\u7f6e\u4ee3\u7406\u5ba2\u6237\u7aef<\/h3>\n<p>\u7531\u4e8e\u6d4f\u89c8\u5668\u4e0d\u4fe1\u4efb\u9632\u706b\u5899\u7684\u5185\u90e8 CA\uff0c\u8bbf\u95ee\u7684\u6bcf\u4e2a SSL \u7ad9\u70b9\uff0c\u90fd\u4f1a\u6536\u5230\u4e00\u6761\u8b66\u544a\u6d88\u606f\uff0c\u4f8b\u5982Your connection isn&#8217;t private. Attackers might be trying to steal your information NET::ERR_CERT_AUTHORITY_INVALID\u3002<\/p>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/\u4e0b\u8f7d.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/\u4e0b\u8f7d.png\" alt=\"\" width=\"655\" height=\"367\" \/><\/a><\/p>\n<p>\u8981\u89e3\u51b3\u6b64\u95ee\u9898\uff0c\u5fc5\u987b\u5728\u5ba2\u6237\u7aef\u64cd\u4f5c\u7cfb\u7edf\u4e2d\u6dfb\u52a0 CA \u8bc1\u4e66\u4f5c\u4e3a\u53d7\u4fe1\u4efb\u7684\u6839 CA \u8bc1\u4e66\u3002\u53ef\u4ee5\u6309\u4ee5\u4e0b\u6b65\u9aa4\u5c06\u5176\u5bfc\u5165 Windows 10 PC \u5e76\u5c06\u5176\u8bbe\u7f6e\u4e3a\u53d7\u4fe1\u4efb\u7684\u6839 CA \u8bc1\u4e66\uff1a<\/p>\n<ol>\n<li>OPNsense Web UI \u4e2d\u5bfc\u822a\u81f3System&gt;\u00a0Trust&gt; \u3002Authorities<\/li>\n<li>\u5355\u51fb\u4e0b\u8f7d\u56fe\u6807\u5bfc\u51fa CA \u8bc1\u4e66\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/42-75413c5b3be90d1d63b7e9d07fa973fa.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u5728 OPNsense UI \u4e2d\u5bfc\u51fa CA \u8bc1\u4e66\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/42-75413c5b3be90d1d63b7e9d07fa973fa.png\" alt=\"\u5728 OPNsense UI \u4e2d\u5bfc\u51fa CA \u8bc1\u4e66\" width=\"1901\" height=\"494\" \/><\/a><\/p>\n<ol start=\"3\">\n<li>\u5c06 CA \u8bc1\u4e66\u590d\u5236\u5230\u5ba2\u6237\u7aef PC\uff0c\u672c\u793a\u4f8b\u4e3a Windows 10 PC\u3002<\/li>\n<li>\u53ef\u4ee5\u4f7f\u7528 Windows 10 PC \u4e2d\u7684 MMC \u5de5\u5177\u5c06 CA \u8bc1\u4e66\u5bfc\u5165\u4e3a\u53d7\u4fe1\u4efb\u7684\u6839 CA \u8bc1\u4e66\u3002\u5728\u641c\u7d22\u680f\u4e2d\u952e\u5165mmc\u5e76\u6309 Enter \u952e\u8fd0\u884c Microsoft Management Control\u3002<\/li>\n<li>\u5355\u51fbFile\u83dc\u5355\u94fe\u63a5\u5e76\u9009\u62e9Add\/Remove Snap-in\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/\u4e0b\u8f7d-1.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/\u4e0b\u8f7d-1.png\" alt=\"\" width=\"279\" height=\"260\" \/><\/a><\/p>\n<p>\u56fe 43.\u00a0\u6dfb\u52a0\/\u5220\u9664\u7ba1\u7406\u5355\u5143 Microsoft \u7ba1\u7406\u63a7\u5236<\/p>\n<ol start=\"6\">\n<li>\u73b0\u5728\u5728\u53ef\u7528\u7684\u7ba1\u7406\u5355\u5143\u4e0b\uff0c\u5355\u51fb\u8bc1\u4e66\uff0c\u7136\u540e\u5355\u51fb\u6dfb\u52a0\u3002\u8bc1\u4e66\u7ba1\u7406\u5355\u5143\u5141\u8bb8\u4e3a\u81ea\u5df1\u3001\u670d\u52a1\u6216\u8ba1\u7b97\u673a\u6d4f\u89c8\u8bc1\u4e66\u5b58\u50a8\u7684\u5185\u5bb9\u3002<\/li>\n<li>\u5355\u51fb\u786e\u5b9a\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/44-0d0bacf16af2647306d2bc45cce2eeb8.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u6dfb\u52a0\u8bc1\u4e66\u7ba1\u7406\u5355\u5143 Microsoft \u7ba1\u7406\u63a7\u5236\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/44-0d0bacf16af2647306d2bc45cce2eeb8.png\" alt=\"\u6dfb\u52a0\u8bc1\u4e66\u7ba1\u7406\u5355\u5143 Microsoft \u7ba1\u7406\u63a7\u5236\" width=\"673\" height=\"477\" \/><\/a><\/p>\n<ol start=\"8\">\n<li>\u5728\u4e0b\u4e00\u4e2a\u5bf9\u8bdd\u6846\u4e2d\uff0c\u9009\u62e9\u8ba1\u7b97\u673a\u5e10\u6237\uff0c\u7136\u540e\u5355\u51fb\u4e0b\u4e00\u6b65\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/tyutyu.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/tyutyu.png\" alt=\"\" width=\"529\" height=\"401\" \/><\/a><\/p>\n<ol start=\"9\">\n<li>\u9009\u62e9\u672c\u5730\u8ba1\u7b97\u673a\u5e76\u5355\u51fb\u5b8c\u6210\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/8686896.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/8686896.png\" alt=\"\" width=\"524\" height=\"394\" \/><\/a><\/p>\n<ol start=\"10\">\n<li>\u73b0\u5728\uff0c\u56de\u5230 MMC\uff0c\u5728\u63a7\u5236\u53f0\u6811\u4e2d\uff0c\u53cc\u51fb Certificates\uff0c\u7136\u540e\u53f3\u952e\u5355\u51fb Trusted Root Certification Authorities Store\u3002\u5728\u6240\u6709\u4efb\u52a1\u4e0b\uff0c\u9009\u62e9\u5bfc\u5165\u3002\u8fd9\u5c06\u6253\u5f00\u8bc1\u4e66\u5bfc\u5165\u5411\u5bfc\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/47-5355d9469d8a117300117aac4e4099e4.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u5c06\u8bc1\u4e66\u5bfc\u5165\u4e3a\u53d7\u4fe1\u4efb\u7684\u6839 CA\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/47-5355d9469d8a117300117aac4e4099e4.png\" alt=\"\u5c06\u8bc1\u4e66\u5bfc\u5165\u4e3a\u53d7\u4fe1\u4efb\u7684\u6839 CA\" width=\"608\" height=\"396\" \/><\/a><\/p>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/86896111.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/86896111.png\" alt=\"\" width=\"533\" height=\"524\" \/><\/a><\/p>\n<ol start=\"11\">\n<li>\u5355\u51fbNext\u6309\u94ae\u3002<\/li>\n<li>\u6d4f\u89c8\u5e76\u9009\u62e9\u8981\u5bfc\u5165\u7684 CA \u8bc1\u4e66\uff0c\u7136\u540e\u5355\u51fbNext\u6309\u94ae\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/1212.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/1212.png\" alt=\"\" width=\"527\" height=\"518\" \/><\/a><\/p>\n<ol start=\"13\">\n<li>\u70b9\u51fb\u4e0b\u4e00\u6b65\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/1313.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/1313.png\" alt=\"\" width=\"530\" height=\"523\" \/><\/a><\/p>\n<ol start=\"14\">\n<li>\u5355\u51fbFinish\u6309\u94ae\u5b8c\u6210\u8bc1\u4e66\u5bfc\u5165\u3002\u5bfc\u5165\u64cd\u4f5c\u6210\u529f\u5b8c\u6210\u540e\uff0c\u4f1a\u51fa\u73b0\u4e00\u4e2a\u5bf9\u8bdd\u6846\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/1414.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/1414.png\" alt=\"\" width=\"535\" height=\"522\" \/><\/a><\/p>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/1515.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/1515.png\" alt=\"\" width=\"220\" height=\"145\" \/><\/a><\/p>\n<ol start=\"15\">\n<li>\u5355\u51fb\u786e\u5b9a\u3002<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/53-bb685b5c808e02cef4a5015ecbaaae11.png\"><img loading=\"lazy\" decoding=\"async\" title=\"\u5728 Windows 10 \u5ba2\u6237\u7aef\u4e2d\u4f5c\u4e3a\u53d7\u4fe1\u4efb\u7684\u6839 CA \u8bc1\u4e66\u5bfc\u5165\u7684\u5185\u90e8 OPNsense CA \u8bc1\u4e66\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2022\/11\/53-bb685b5c808e02cef4a5015ecbaaae11.png\" alt=\"\u5728 Windows 10 \u5ba2\u6237\u7aef\u4e2d\u4f5c\u4e3a\u53d7\u4fe1\u4efb\u7684\u6839 CA \u8bc1\u4e66\u5bfc\u5165\u7684\u5185\u90e8 OPNsense CA \u8bc1\u4e66\" width=\"1418\" height=\"728\" \/><\/a><\/p>\n<p>\u81f3\u6b64\uff0c\u914d\u7f6e\u5168\u90e8\u5b8c\u6210\u3002<\/p>\n<p><span style=\"color: #0000ff;\"><a style=\"color: #0000ff;\" href=\"https:\/\/www.sunnyvalley.io\/docs\/network-security-tutorials\/how-to-set-up-caching-proxy-in-opnsense\">\u539f\u6587\u5730\u5740\u3002<\/a><\/span><\/p>\n<p>\u76f8\u5173\u6587\u7ae0<\/p>\n<p><span style=\"color: #0000ff;\"><a style=\"color: #0000ff;\" href=\"https:\/\/blog.pfchina.org\/?p=13536\">OPNsense\u914d\u7f6eClamAV\u9632\u75c5\u6bd2\u5f15\u64ce \u00a0<\/a><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>OPNsense \u63d0\u4f9b\u529f\u80fd\u9f50\u5168\u7684\u7f13\u5b58\u4ee3\u7406\u670d\u52a1\uff0c\u5177\u6709\u5e7f\u6cdb\u7684\u8bbf\u95ee\u63a7\u5236\u5217\u8868\u3001\u57fa\u4e8e\u7c7b\u522b\u7684 &hellip; <a href=\"https:\/\/blog.pfchina.org\/?p=9747\">\u7ee7\u7eed\u9605\u8bfb <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[220,449],"class_list":["post-9747","post","type-post","status-publish","format-standard","hentry","category-opnsense","tag-squid","tag-449"],"_links":{"self":[{"href":"https:\/\/blog.pfchina.org\/index.php?rest_route=\/wp\/v2\/posts\/9747","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.pfchina.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.pfchina.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.pfchina.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.pfchina.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=9747"}],"version-history":[{"count":12,"href":"https:\/\/blog.pfchina.org\/index.php?rest_route=\/wp\/v2\/posts\/9747\/revisions"}],"predecessor-version":[{"id":13620,"href":"https:\/\/blog.pfchina.org\/index.php?rest_route=\/wp\/v2\/posts\/9747\/revisions\/13620"}],"wp:attachment":[{"href":"https:\/\/blog.pfchina.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=9747"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.pfchina.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=9747"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.pfchina.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=9747"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}