From squid settings enable Rotate Logs and enter number of days u want to keep the logs ,
It's already configured "Log rotate is 7 days"
I have did some command and resolve the problem
df -h - check what is consuming space
rm -rf /var/squi/cache/* - clear cache log
squid -z - rebuild cache
rm -rf /var/squid/logs/* - clear old logs
[2.1.5-RELEASE][root@firewall.fairtrans.local]/root(5): df -h
Filesystem Size Used Avail Capacity Mounted on
/dev/da0s1a 30G 5.0G 23G 18% /
devfs 1.0k 1.0k 0B 100% /dev
/dev/md0 3.6M 52k 3.3M 2% /var/run
devfs 1.0k 1.0k 0B 100% /var/dhcpd/dev
how long back did you install the squid package?
Since 2014
2.1.5-RELEASE (i386)
built on Mon Aug 25 07:44:26 EDT 2014
FreeBSD 8.3-RELEASE-p16
Please advise is it possible to upgrade without missing the current settings and configuration for the server
Update available. Click Here to view update.
A new version is now available
Current version: 2.1.5-RELEASE
Built On: Mon Aug 25 07:44:26 EDT 2014
New version: 2.3-RELEASE
Update source: https://updates.pfsense.org/_updaters
I would stay away from 2.3 until its stable…
Then Yes first start blocking http not sure if cnn is http but try
idownloadblog.com its http
Remember you need to create target categories and group ACL
Ok.
I have Squid 3 & Squidguard both running. For example I have the ' porn' category denied but it blocks the site I get a page displaying 'The site can't be reached. Refused to connect. I want the block page instead of Refused to connect.
How do I do that.
Thanks
Randy
could you check on squidguard then go to logs then to filter log what does it say? does it say squidguard ready for request or squidguard stopped and db update?
Ok after more fiddling I've make it work partially.
I am now using an app called ProxyDroid.
Added NAT to forward to my proxy server.
Added the mobile ip address in the ACL, however this is where I'm stuck since it is a dynamic ip how am I properly configure it?
Secondly whenever I browsing https site it failed so is there anyway to force the server only intercept port 80 and bypass the rest?
Thx in advance!
Solved!
Instead of blacklist it I bypass it, I create an Aliases, and monitor the ips going thru my proxy under Real Time tab, then I added those ips.
Cheers!
Addendum:
There are no error messages in the cache logs. All I see are the startup and shutdown entries:
22.04.2016 09:44:50 Shutdown: Basic authentication.
22.04.2016 09:44:50 Shutdown: Digest authentication.
22.04.2016 09:44:50 Shutdown: Negotiate authentication.
22.04.2016 09:44:50 Shutdown: NTLM authentication.
22.04.2016 07:50:56 Service Name: squid
22.04.2016 07:50:56 Starting Squid Cache version 3.5.16 for amd64-portbld-freebsd10.3…
For the moment I have disabled Squid3
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.