Cache/Proxy

• G

  How to SKIP squid for a specific IP/url
  • goodspeed_11

  1
  0
  Votes
  1
  Posts
  615
  Views

  No one has replied

• G

  Pfsense 2.2.1(amd64)+squid3+Lightsquid have error in proxy report->proxy state
  • guorenguo

  1
  0
  Votes
  1
  Posts
  778
  Views

  No one has replied

• S

  2.2 i386 (upgrade) - appears squid 2.7.9 package is broken
  • Sn3ak

  19
  0
  Votes
  19
  Posts
  6854
  Views

  M

  Perfecto, gracias!!!
• D

  Squidguard blacklists not working
  • dspaan

  9
  0
  Votes
  9
  Posts
  2746
  Views

  

  Thanks for all your replies. It's a shame you can't filter https with squid You can filter HTTPS with Squid but you have to configure it (and perhaps your clients) to use it properly. WPAD Proxy Auto-Configure with squid
• L

  Squid3 Reverse Proxy not working
  • laoistom

  5
  0
  Votes
  5
  Posts
  2668
  Views

  P

  Can anypost pics of there config I cant seem to get it working. I've tired just about everything
• P

  Squid3 breaks port forwarding?
  • pfsense-tester

  1
  0
  Votes
  1
  Posts
  571
  Views

  No one has replied

• S

  Pfsens problem
  • salehpf

  1
  0
  Votes
  1
  Posts
  523
  Views

  No one has replied

• S

  CLAM AV doesnt start Squid3
  • Supermule

  4
  0
  Votes
  4
  Posts
  597
  Views

  W

  Don't know why package maintainer don't set correct default values. It seems there's a check when "proxy.domain.com" is in there you get a warning. If you set "www.domain.com" there's no error :P
• C

  Need help setting up Squid on Pfsense.
  • Colezy

  2
  0
  Votes
  2
  Posts
  519
  Views

  T

  You can download the squid3 it has an option to cache updates such as windows updates and free anti-virus updates.  The older version needs a bit of tuning.  Here is the tut https://doc.pfsense.org/index.php/Squid_Package_Tuning
• T

  Cache of youtube, vimeo etc.
  • trasher mx

  1
  0
  Votes
  1
  Posts
  602
  Views

  No one has replied

• S

  Firewall
  • saikrishna

  3
  0
  Votes
  3
  Posts
  764
  Views

  S

  But while we bypass proxy for some particular IP's the same site is opening for bypassed IP's but remaining IP's are blocked as above Mod-Security.
• N

  Upgrade from 2.0 to 2.2.1 breaks squidGuard
  • NetVicious

  1
  0
  Votes
  1
  Posts
  749
  Views

  No one has replied

• G

  [HAProxy-1_5] SNI ACL don't work
  • gparisse

  12
  0
  Votes
  12
  Posts
  2822
  Views

  P

  Should be fixed in pkg v0.22, pullrequest send. https://github.com/pfsense/pfsense-packages/pull/834 will probably be committed and be on the package repository in a day or so.
• M

  Squid: Critical bug
  • mir

  5
  0
  Votes
  5
  Posts
  660
  Views

  M

  I think you have misunderstood me. I did not just stop filter that hostname. It simply stopped filtering anything.
• L

  Squid Crashing On Log Rotation
  • LostInIgnorance

  3
  0
  Votes
  3
  Posts
  1878
  Views

  S

  2.2-RELEASE (i386) built on Thu Jan 22 14:04:25 CST 2015 FreeBSD 10.1-RELEASE-p4 Intel(R) Core(TM)2 Duo CPU E4500 @ 2.20GHz 2 CPUs: 1 package(s) x 2 core(s) Install pkgs: squid3 (Transparent HTTP proxy enable, c-icap&clamd disable), corn, sarg log: Mar 16 00:00:13 squid[88317]: Squid Parent: (squid-1) process 92076 started Mar 16 00:00:12 php: swapstate_check.php: Squid cache and/or swap.state exceeded size limits. Removing and rotating. File was 3891776 bytes, 0% of total disk space. Mar 16 00:00:12 squid[86533]: Squid Parent: (squid-1) process 86945 exited with status 0 Mar 16 00:00:10 squid[88317]: Squid Parent: (squid-1) process 87786 exited with status 1 Mar 16 00:00:10 (squid-1): Failed to verify one of the swap directories, Check cache.log for details. Run 'squid -z' to create swap directories if needed, or if running Squid for the first time. Mar 16 00:00:10 squid[88317]: Squid Parent: (squid-1) process 87786 started Mar 16 00:00:07 squid[88317]: Squid Parent: (squid-1) process 87478 exited with status 1 Mar 16 00:00:07 (squid-1): Failed to verify one of the swap directories, Check cache.log for details. Run 'squid -z' to create swap directories if needed, or if running Squid for the first time. Mar 16 00:00:06 squid[88317]: Squid Parent: (squid-1) process 87478 started Mar 16 00:00:05 squid[86533]: Squid Parent: (squid-1) process 86945 started Mar 16 00:00:05 squid[86533]: Squid Parent: will start 1 kids Mar 16 00:00:05 php: swapstate_check.php: The command '/usr/pbi/squid-i386/sbin/squid -k kill -f /usr/pbi/squid-i386/local/etc/squid/squid.conf' returned exit code '1', the output was 'squid: ERROR: Could not send signal 9 to process 13758: (3) No such process' Mar 16 00:00:03 squid[88317]: Squid Parent: (squid-1) process 80899 exited with status 1 Mar 16 00:00:03 (squid-1): Failed to verify one of the swap directories, Check cache.log for details. Run 'squid -z' to create swap directories if needed, or if running Squid for the first time. Mar 16 00:00:03 squid[88317]: Squid Parent: (squid-1) process 80899 started Mar 16 00:00:00 kernel: pid 13758 (squid), uid 62: exited on signal 6 Mar 16 00:00:00 php: swapstate_check.php: Creating squid cache subdirs in /var/squid/cache Mar 16 00:00:00 php: sarg.php: Sarg: force refresh now with -d date +%d/%m/%Y-date +%d/%m/%Y args, compress(on) and none action after sarg finish. Mar 16 00:00:00 php: swapstate_check.php: Creating Squid cache dir /var/squid/cache Mar 16 00:00:00 php: sarg.php: Sarg: force refresh now with -d date +%d/%m/%Y-date +%d/%m/%Y args, compress(on) and none action after sarg finish. Mar 15 23:00:00 php: sarg.php: Sarg: force refresh now with -d date +%d/%m/%Y-date +%d/%m/%Y args, compress(on) and none action after sarg finish. Mar 15 22:00:00 php: sarg.php: Sarg: force refresh now with -d date +%d/%m/%Y-date +%d/%m/%Y args, compress(on) and none action after sarg finish. Mar 15 21:00:00 php: sarg.php: Sarg: force refresh now with -d date +%d/%m/%Y-date +%d/%m/%Y args, compress(on) and none action after sarg finish. Mar 15 20:00:00 php: sarg.php: Sarg: force refresh now with -d date +%d/%m/%Y-date +%d/%m/%Y args, compress(on) and none action after sarg finish. Mar 15 19:29:41 kernel: arp: xxx.xx.xx.1 moved from 00:17:10:89:12:60 to 00:17:10:89:10:20 on em2 Mar 15 19:29:38 kernel: arp: xxx.xx.xx.1 moved from 00:17:10:89:10:20 to 00:17:10:89:12:60 on em2 Mar 15 19:29:34 kernel: arp: xxx.xx.xx.1 moved from 00:17:10:89:12:60 to 00:17:10:89:10:20 on em2 Mar 15 19:29:31 kernel: arp: xxx.xx.xx.1 moved from 00:17:10:89:12:60 to 00:17:10:89:10:20 on em2 Mar 15 19:00:00 php: sarg.php: Sarg: force refresh now with -d date +%d/%m/%Y-date +%d/%m/%Y args, compress(on) and none action after sarg finish. Mar 15 18:00:00 php: sarg.php: Sarg: force refresh now with -d date +%d/%m/%Y-date +%d/%m/%Y args, compress(on) and none action after sarg finish.
• M

  Enable "times" for squidguard default acl
  • mendilli

  5
  0
  Votes
  5
  Posts
  661
  Views

  M

  sorry for not being clear, I solved it creating a group acl at the last order and assignin my network as source like you said thanks
• S

  Proxy reports (light squid)
  • shehan31

  2
  0
  Votes
  2
  Posts
  583
  Views

  

  Probably chrome probing for DNS/etc. http://serverfault.com/questions/235307/unusual-head-requests-to-nonsense-urls-from-chrome
• N

  HAProxy 1.5 and HSTS
  • nikolaii

  6
  0
  Votes
  6
  Posts
  2595
  Views

  N

  Yes I totally agree with you. I'll try to reproduce the issue again and get back to you. Nicolas
• G

  MultiWAN failover with squid3 on pfsense 2.1
  • geminux

  4
  0
  Votes
  4
  Posts
  2282
  Views

  A

  Doese failover work?
• A

  Squid3 missing ident support
  • anomaly0617

  1
  0
  Votes
  1
  Posts
  656
  Views

  No one has replied

• D

  Squid3-dev will not start on fresh PFsense VM
  • dskerror

  10
  0
  Votes
  10
  Posts
  6102
  Views

  I

  Hi there, any news concerning that issue? Same problem over here…just spend nearly the whole day trying to fix it. Could one of you guys solve it? Cheers
• S

  Squid 3 and caching
  • Slasky

  2
  0
  Votes
  2
  Posts
  760
  Views

  

  You could do a tail -f /var/squid/logs/access.log and see if you get hits or misses when manually running Windows Update, or you could update a client and watch the bandwidth monitor to see if there is WAN activity that matches the LAN activity.  No WAN activity + large LAN activity means it's using the cache.  Just be warned though.  I have played with Dynamic Content caching in the past and it was not reliable for me.    Every request for a segment of the download would cause the entire file to be downloaded, so a 100MB update ended up making Squid download many gigabytes.  My WAN was saturated for an hour while LAN was flat.  I disabled Dynamic Content after that.
• B

  Squid3-dev https,ssl interception do not work in proxy mode
  • boujid

  4
  0
  Votes
  4
  Posts
  1785
  Views

  U

  did you solved the problem?
• B

  Pfsense 2.2 squidguard not start help Please
  • b_onat

  5
  0
  Votes
  5
  Posts
  1359
  Views

  

  I realized on my installation that the new squid package does NOT start squidguard immediately, but on the first access to a website! This is supposedly how the new SquidGuard works.  I'm not sure how it's a problem unless you must see the little green/white triangle.  As long as it works, that is what's important.
• A

  Squid + kerberos
  • alxbob

  1
  0
  Votes
  1
  Posts
  1315
  Views

  No one has replied

• P

  Pfsense 2.2 upgrade + squid 2.7.9 and squidguard 1.4_7
  • pama

  2
  0
  Votes
  2
  Posts
  1335
  Views

  M

  Hi! I have this problem too.
• 

  Lightsquid on 2.2 should be OK now
  • jimp

  25
  0
  Votes
  25
  Posts
  4464
  Views

  

  There should be no need for that with the current package. The gd library is there and the package should be invoking ldconfig to nudge the system to find it without such hacks. Check to see if it's there at all: find / -name "*GD*.so"
• N

  HAproxy in a failover setup - Secondary firewall dashboard widget can't connect
  • nikolaii

  3
  0
  Votes
  3
  Posts
  1089
  Views

  N

  All righty, thank you for the explanation :) Nicolas
• S

  Squid stripping domain from URL with port forwarding
  • smar

  11
  0
  Votes
  11
  Posts
  5476
  Views

  G

  I had this same issue with squid 2.7.9.  This worked for me: Set squid proxy to listen on port 3129 (or any port you choose, the GUI wouldn't allow me to leave it blank) Add custom option: http_port 3128 transparent Port forward on LAN: Traffic TCP Src * Srcport * Dest * Destport HTTP(80) TargetIP pfsensebox IP Targetport 3128 My guess is that on the GUI without the transparent box checked, squid was not operating transparently on port 3128 until specifically defined to do so. Unfortunately my ultimate goal was to use this rule to apply limiters to the traffic but apparently there is a bug with limiters and squid in transparent mode that I can't seem to get around!
• ?

  Squid Reverse Proxy
  • Guest

  1
  0
  Votes
  1
  Posts
  966
  Views

  No one has replied

• P

  Squid Monitoring and Lightsquid "fix" on pfSense 2.2
  • pfBlense

  11
  0
  Votes
  11
  Posts
  9190
  Views

  

  https://doc.pfsense.org/index.php/Lightsquid_Troubleshooting
• F

  Weird problem in squid guard - Partial access to the Internet
  • firefox

  14
  0
  Votes
  14
  Posts
  4516
  Views

  F

  Try running Firefox on the XP box and see if that is any different. I'll try Clarification the computer is old old the operating system is old Update from yesterday But it was already too late and I turned off my computer The computer in question was one hour ahead I set the computer time and date accurate And now Only two sites inaccessible And show the same message as before
• P

  Haproxy-devel 1.5.9 pkg v0.20 won't start after upgrade 2.1.5 to 2.2 i386
  • pffan

  3
  0
  Votes
  3
  Posts
  720
  Views

  P

  f.y.i. in (somewhat) recent versions of the package its possible to create multiple 'binds' using the normal webgui options. So its possible to have 1 frontend listen on both :443(with ssl-offloading) and :80. So you don't need the bind in 'advanced pass through' anymore.
• J

  Squid is not working
  • Jamerson

  3
  0
  Votes
  3
  Posts
  893
  Views

  

  Have you looked in your SquidGuard filter log?
• T

  Squidguard-squid3 systempatch for use with squid3-dev
  • Tikimotel

  59
  0
  Votes
  59
  Posts
  38449
  Views

  F

  Hi, :) So with ssl filtering, windows update does not want to do this. There in there a manipulation to do to solve this problem. Sorry for my bad english  ;D
• A

  Can Squid be limited to IP instead of subnet?
  • altiris

  5
  0
  Votes
  5
  Posts
  969
  Views

  A

  @Derelict: Don't use transparent mode and only hosts set to use it as a proxy will use it. Alright I will try doing that, thank you.
• W

  Squidguard redirect error page
  • webstor

  4
  0
  Votes
  4
  Posts
  1346
  Views

  

  So what was the solution???
• S

  Squid moaning about /tmp/rules.test.packages syntax error under pfSense 2.2
  • Steve Evans

  23
  0
  Votes
  23
  Posts
  12615
  Views

  S

  Locking this thread as the original issue is resolved; it was caused by me not associating any interfaces and leaving transparent mode enabled. Transparent mode isn't working on i386 and marcelloc has confirmed this is due to a build configuration issue which will be resolved shortly. Steve
• E

  Man in the middle work around for squid?
  • edanpedragosa

  9
  0
  Votes
  9
  Posts
  4212
  Views

  J

  You are running into the application cert pinning I think, I've seen this on a few IOS/android apps but makes sense here as well, and I've confirmed that is what they are doing as well in the following link: http://googleonlinesecurity.blogspot.com/2013/05/changes-to-our-ssl-certificates.html At this time, Google Drive's PC application does not support SNI and performs some degree of certificate pinning for transfers.  (This is going to cause you a lot of issues with SSL MITM setups). One fairly easy way to work around this is with a DNS based filter and with pfSense you can easily control what DNS server a client is using. Thanks, Adam
• 1

  Squid3-dev and SquidGuard-squid3 - reset configuration when restart/shutdown
  • 1010011010

  10
  0
  Votes
  10
  Posts
  5738
  Views

  1

  thanks for your response, I will look and review what you say, I'm hoping to solve this problem, otherwise im gonna give a shot with lusca.