In November 2023 , Netgate , the developer of pfSense software , announced the deprecation of the Squid package , a widely used proxy for web caching and filtering , due to unresolved security vulnerabilities . This decision impacts users of and Plus software who relied on Squid for traffic control and DNS filtering . In this article, we explore the reasons for this change, its effects on cybersecurity in 2024 , and how Lumiun DNS emerges as an efficient and secure alternative for DNS filtering in pfSense software. Check it out!
Why is Netgate abandoning Squid?
Squid , an open-source proxy , has been a popular tool in pfSense software for content caching and web access filtering . However, as pointed out in the Netgate blog , recent reports have identified several critical vulnerabilities in Squid that have not been patched upstream. This includes flaws that compromise network security , such as exposure to denial- of-service and bypassing of controls .
Netgate prioritizes the security of its users and, given the lack of ongoing support for Squid, has decided to mark it as "deprecated" in versions 23.09 of the pfSense Plus software and 2.7.1 of CE , with complete removal planned for future major updates (such as 2.8.0 ). The recommendation is clear: uninstall Squid and seek more secure alternatives for functions such as DNS filtering and access control .
Impact in 2024 : With the rise in cyber threats , such as ransomware attacks seen in cases like Change Healthcare and MediSecure , relying on outdated tools like Squid has become risky. It is known that over 95% of attacks occur due to human error . Therefore, not only technical tools been in focus, but also training and educational materials , increasing users' threat detection capabilities
What does this mean for pfSense software users?
For those who used Squid as a DNS proxy or for content filtering , its deprecation necessitates an urgent transition . Without Squid, functions such as blocking malicious websites , user access control , and traffic caching lose native support in the pfSense software . Although Netgate suggests options like pfBlockerNG for DNS-based filtering, many users are looking for external alternatives that offer ease of use , constant updates , and robust protection .
That's where Lumiun DNS , a solution that combines simplicity and efficiency to replace Squid in DNS filtering , especially in environments protected by pfSense software . With native integration , it allows for real-time reporting with IP request identification , as well as custom filters and a configuration that takes less than seven minutes.
Lumiun DNS: a viable alternative to Squid in pfSense software
Lumiun Lumiun DNS is a DNS filtering service that blocks access to malicious websites, phishing , and unwanted content in real time . Unlike Squid, which relies on complex configurations and is vulnerable to security flaws, Lumiun Lumiun DNS offers a modern, cloud-based approach pfSense software users who need hassle-free protection.
Advantages of Lumiun DNS
- Updated Security : Lumiun DNS maintains a constantly updated threat list, protecting against the risks that led to the deprecation of Squid.
- Easy Integration : Simply configure Lumiun DNS as a DNS server in the pfSense software (under System > General Setup ) to start filtering network traffic.
- Granular Control : allows you to block specific categories (such as social networks or adult websites) and customize policies by device or user, something that Squid did, but with more complexity.
- No Local Maintenance Required : Unlike Squid, which requires manual updates and local fixes, Lumiun DNS operates in the cloud, reducing administrative burden.
- Real-time protection : ideal for preventing attacks like those in 2024, including phishing and ransomware, which exploit vulnerabilities in outdated systems.
How to configure Luminous Lumiun DNS in pfSense software.
- Access the pfSense software control panel and go to System > General Setup .
- DNS Servers field , enter the addresses provided by Lumiun DNS (available when creating an account on the official website).
- Uncheck the option "Allow DNS server list to be overridden by DHCP/PPP on WAN" to ensure that only Lumiun DNS is used.
- Save and apply the changes.
- In the Lumiun DNSpanel, link your public IP address or DDNS and configure filtering policies as needed – for example, blocking phishing sites or specific categories.
This simple configuration replaces Squid's DNS filtering functionality with a more secure and practical solution.
Comparing Lumiun DNS with other alternatives
Although pfBlockerNG is a native option in pfSense software for DNS filtering, it requires advanced configuration and maintenance of blocklists, which can be challenging for less experienced users. Other solutions, such as Pi-hole or AdGuard , require additional hardware or dedicated servers. Lumiun DNS , on the other hand, offers:
- Quick Implementation : no need to install extra packages in the pfSense software.
- Professional Support : Unlike open-source projects like Squid, Lumiun DNS has a dedicated team for updates and support.
- Scalability : Works for both home and corporate networks.
Why choose Lumiun DNS in 2025?
With Squid being phased out of pfSense software , cybersecurity in 2025 demands tools that keep pace with modern threats. Lumiun DNS not only fills the gap left by Squid but also improves protection by offering a lightweight, secure , and easy-to-manage . While Squid was useful in the past, its deprecation reflects the need for evolution – and Lumiun DNS is ready to meet that demand.
Conclusion
decision to abandon Squid in its pfSense software serves as a warning about the importance of adopting secure and up-to-date . For users who need efficient DNS filtering , Lumiun DNS is a viable alternative, offering robust protection without the complexity or risks of Squid.
