You can trace the squid  ACL actions in cache.log with. Choose your poison from below and 'squid -k reconfigure', then check your cache.log.

#debug_options ALL,1 28,9
#debug_options ALL,2

On 20 May 2016 at 11:01, Emmanuel Sekyewa via skunkworks <skunkworks@lists.my.co.ke> wrote:
Hi Kennedy, Listers,

Thanks for the pointer. It was/is squid proxy. The site loads
successfully when I enable it for proxy by pass. This is in spite of
the fact that this site is not in any of the black lists.
Why would a site be unable to load through a proxy server?

Regards

On 19/05/2016, Emmanuel Sekyewa <esekyewa@gmail.com> wrote:
> There's squid, firewall, and DNS.
>
> Will cross check the configs. Thanks!
>
> Though if its a service blocking, would it block just that one site? Mind
> you no one else has accessed that box in a while.
>
> Regards
> On 19 May 2016 21:21, "Kennedy Aseda" <samskid5@gmail.com> wrote:
>
>> Which services have you enabled on the pfsense box? That might determine
>> whether the site IP is blacklisted, or snort is blocking, etc.
>>
>> There's also a trick of disabling hardware checksum offloading...try it
>> out...had an issue with it and a colleague pointed me that way.
>>
>> Cheers,
>> Kennedy
>> On 19 May 2016 20:35, "Emmanuel Sekyewa via skunkworks" <
>> skunkworks@lists.my.co.ke> wrote:
>>
>>> Hi All,
>>>
>>> I need some pointers, I am unable to access just one site on a network
>>> behind a pfsense firewall, and an 1800 series router.
>>>
>>> I get the error "Access Denied. You're attempting to access a
>>> forbidden site. Contact your system administrator for details"
>>>
>>> A trace to the site off a different provider (or from another
>>> location) from which the site is accessible is successful, however,
>>> the same does not apply from the affected site, and it times out after
>>> the third hop immediately after the provider's end of the last mile
>>> connection.
>>>
>>> The provider insists that the problem is on my end, and indeed the
>>> site is accessible when I connect directly to their ONU.
>>>
>>> Any point will be greatly appreciated.
>>>
>>> Thanks
>>>
>>> Emm
>>>
>>> _______________________________________________
>>> skunkworks mailing list
>>> skunkworks@lists.my.co.ke
>>> ------------
>>> List info, subscribe/unsubscribe
>>> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
>>> ------------
>>>
>>> Skunkworks Rules
>>> http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
>>> ------------
>>> Other services @ http://my.co.ke
>>>
>>
>


--
Emmanuel C. Sekyewa

+256 782 199 202

_______________________________________________
skunkworks mailing list
skunkworks@lists.my.co.ke
------------
List info, subscribe/unsubscribe
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
------------

Skunkworks Rules
http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
------------
Other services @ http://my.co.ke



--
Best regards,
Odhiambo WASHINGTON,
Nairobi,KE
+254 7 3200 0004/+254 7 2274 3223
"Oh, the cruft."