@paulbr do you know which version of the SPOE image you are using? The latest version 0.8 from the link above gives me the following failure:

See Logs:
1656043101.401659 [00] ModSecurity: LIBXML compiled version="2.9.12"
1656043101.401849 [00] ModSecurity: StatusEngine call: "2.9.5,nginx,1.7.0/1.7.0,8.44/8.44 2020-02-12,(null),2.9.12,d1"
1656043106.408018 [00] ModSecurity: StatusEngine call failed. Query: GIXDSLRVFRXGO2LOPAWDCLRXFYYC6MJO.G4XDALBYFY2DILZYFY2DIIBSGAZDALJQ.GIWTCMRMFBXHK3DMFEWDELRZFYYTELDE.GE.165604310

I also noticed there was no communication from haproxy to this instance which stopped my sites from loading after implementing the error options as you described above.

it is clear now, thank you both for the replies

@jim-prudhomme said in Squid re-installation fails on Netgate 1100 running 22.01:

trying to remove the 22.01 version when doing the installation, correct

Basically, yes. It does the same thing the other direction...have 21.05, install a package for 22.01, and PHP etc. might get upgraded. Hence my sig.

@follysuperscript

I got this working by adding the following to the back-end > advanced settings > "Per server pass thru"

I added:
source <CARP_VIP>

Replace <CARP_VIP> with the IP you want the health check to originate from.

@andreymoiseev said in light squid change password:

Good afternoon. I apologize for my english. Tell me how to change the default password for light squid ?

Change the password to the one you want.
Then on the page at the bottom click on Save and that's it

26941259-f3a3-4daa-8c9e-fd57f1cf5479-image.png

Still present in HaProxy-devel 0.62_10. While workaround is simple indeed (disable backend, save and enable backend, save) it’s still annoying and I don’t understand what’s exactly happening here.

Hi ,
after creating the whitelist, create a "myAllowlist" Group ACL
Within this group in the "Target Rules List" area configure your Target Categories as a "whitelist".

908e8c6f-bf69-4e8b-befd-9bea2260ae96-image.png

At the bottom under "Default access [all]" configure as "Deny".

5f58ee89-7da0-4805-9945-9ff930e81f90-image.png

Save the configuration and after saving, to make the changes operational, go to "General settings" and press the "Apply" button

This blocks all traffic except the whitelist.

I hope it is useful
Greetings and good work

@ttgest you can also try a regular expression tester online. I found a good one. I was having issues with t.co I wanted it blocked however it would block microsoft.com I had to adjust and test with the regular expression tester. Some basic examples below.

Screenshot_20220524-072731.png !

Screenshot_20220524-072641.png!