I think the NONE_ABORTED is because it can't retrieve the images from the cache.

Can you set the hard disk cache size back to what it was previously?

Thank you, i will try doing it

Hello,

I have selected OPT1 in Services - Squid Proxy Server - General - Squid General Settings - Proxy Interface(s)

i don't understand where is the problem . what could I forget please ?

Thank you

Ah now i can generate this :

Squid Object Cache: Version 3.5.27 Build Info: Service Name: squid Start Time:    Mon, 21 May 2018 11:18:58 GMT Current Time:  Tue, 22 May 2018 10:58:14 GMT Connection information for squid:         Number of clients accessing cache:      208         Number of HTTP requests received:      463691         Number of ICP messages received:        0         Number of ICP messages sent:    0         Number of queued ICP replies:  0         Number of HTCP messages received:      0         Number of HTCP messages sent:  0         Request failure ratio:  0.00         Average HTTP requests per minute since start:  326.7         Average ICP messages per minute since start:    0.0         Select loop called: 27805416 times, 3.063 ms avg Cache information for squid:         Hits as % of all requests:      5min: 0.0%, 60min: 0.0%         Hits as % of bytes sent:        5min: 0.5%, 60min: 1.2%         Memory hits as % of hit requests:      5min: 0.0%, 60min: 100.0%         Disk hits as % of hit requests: 5min: 0.0%, 60min: 0.0%         Storage Swap size:      0 KB         Storage Swap capacity:  0.0% used,  0.0% free         Storage Mem size:      360 KB         Storage Mem capacity:    0.0% used, 100.0% free         Mean Object Size:      0.00 KB         Requests given to unlinkd:      0 Median Service Times (seconds)  5 min    60 min:         HTTP Requests (All):  0.18699  3.11263         Cache Misses:          0.46965  0.27332         Cache Hits:            0.00000  0.00000         Near Hits:            0.00000  0.00000         Not-Modified Replies:  0.00000  0.00000         DNS Lookups:          0.00278  0.01269         ICP Queries:          0.00000  0.00000 Resource usage for squid:         UP Time:        85155.572 seconds         CPU Time:      691.461 seconds         CPU Usage:      0.81%         CPU Usage, 5 minute avg:        0.50%         CPU Usage, 60 minute avg:      0.43%         Maximum Resident Size: 1444736 KB         Page faults with physical i/o: 0 Memory accounted for:         Total accounted:        7096 KB         memPoolAlloc calls: 132887173         memPoolFree calls:  135763872 File descriptor usage for squid:         Maximum number of file descriptors:  293616         Largest file desc currently in use:  1426         Number of file desc currently in use:  239         Files queued for open:                  0         Available number of file descriptors: 293377         Reserved number of file descriptors:  100         Store Disk files open:                  0 Internal Data Structures:             54 StoreEntries             54 StoreEntries with MemObjects             51 Hot Object Cache Items             0 on-disk objects

Looks nothing wrong, or am i missing something maybe?

I do not understand, you put how much value in the field ssl children? Because I have the same problem too.

You could add acl's that check for the proper domainname and reject requests otherwise. Or add strict-sni to the ssl options so that the requested domain must match your certificate.

Normal LAN firewall rules are ignored for traffic that is passed to the proxy and for good reason.Tthe NAT redirect that is in place for the transparent proxy forces the traffic to the proxy by rewriting the destination address:port pair in the packets to 127.0.0.1:3128 (the usual set up) before they hit the LAN filter rules. This is why the modified traffic won't match your LAN filter rules.

Make sure you're not proxying too much with a too "wide" NAT rule, NAT only the traffic you want to be controlled by the proxy.

Hi, i probe re-intalling all pfsense and install squid and squidguard by default all right but when i active safe search in squidguard re-appear me the same problem but i uninstall all and appearme the same message in youtube, anybody can tell me why this?

official pfsense talk on the topic: https://www.youtube.com/watch?v=xm_wEezrWf4

sorry Linux guy here … corrected above  8).

actually i do.  like for example, normal group type and deny by ip.

if im going to read deny by ip, its only deny by ip but does it include normal url filtering? it doesnt say but your option is to try while if it says deny by ip + normal filtering that would be faster and easier to decide and chose.

another thing, if i select the icap amd av options, would that enable antivirus and where would i see that.  unlike squid, there is tickbox to enable so that would be more meaningful  but  i guess i can complain since  i am mere user.

but i think you dont get it, if your description would be more descriptive and informative there not much to ask.

but i ask since this is pfsense forum and i have no knowledge aside from the docs. but still if there is a book, there would still be questions.

Squidguard requires squid to be installed first, I believe, since it modifies squid's configuration.  It's also not really a service.  It's a helper application that gets spawned by squid in realtime for every URL being processed.