Install older version of Packages

stephenw10

Not yet. There is already a bug report open for the missing languages issue: https://redmine.pfsense.org/issues/14406

ericreiss

@stephenw10 Yes I saw that from the other tread. And you can just copy the files and get the ERROR messages to go away. I am more concerned that there is a potential bigger problem.

stephenw10

Yes, I understand. We need to know what caused that though, there's a good chance these things have the same root cause.

ericreiss

@stephenw10 OK, Thanks.

ericreiss

@Pete-wright and @JonathanLee you might want to follow this thread relative to your Squid conversation.

JonathanLee

My Squid and Squidguard packages are working great as of now. Again I am running patches that are now part of this new version as well as the adapted error files.

Does any of this occur?
https://redmine.pfsense.org/issues/13984

These patches on that Redime are now part of the new Squid and Squidguard versions. I am running SSL intercept and transparent at the same time and utilize custom options. Thank you Marcos for fixing all of those issues for us.

What are your error logs showing?

ericreiss

@JonathanLee In general, Squid and ClamAV are not working. I fixed those ERROR Templates just as you did, I had not ready your thread. I was also seeing the DNS first error even thought it is unchecked.

I am not running Squidguard which is a difference from your setup.

And these are clean installs. I did not have an earlier version of Squid installed.

I went from pfSense CE 2.7.0 to pfSense 23.01 then 23.05 on a PC and on a Netgate 6100 MAX from pfSense+ 223.01 to 23.05.

Squid 0.4.46 was a clean/new install.

Those patches should be incorpated as you mentioned since I only recently installed.

stephenw10 is looking into it.

JonathanLee

@ericreiss I have seen the DNS first error for many years. It's a warning. IPv4 first is outdated or something. They just want you to have IPv6 now. Don't stress that one.

ericreiss

@JonathanLee Thanks Jonathan.

Sorry I did not repond sooner, I had short notice Thursday evening to drive down to our office (1.5 hour one way drive) for Friday to test our newly installed 100G symmetric Fiber installation and in stall the Netgate pfSense 6100 MAX.

The 6100 MAX worked like a champ. I had a little issue with a WIFI router I loaned them with DD-WRT firmware as I am trying to convince my boss about the benefits of using it of Lionksys' firmware.

When I returned home and checked it that night, I was able to Tailscale VPN and Wireguard VPN in to manage it.

Love the pfSense.

Then I had a busy weekend personal stuff.

Regarding the DNS v4 first issue, I liked Stephenw10's reply about the Template and DNS v4 first having possible root cause problems causing the other problems I was having.

Looking forward to seeing it working reliably be the other packages and pfSense have been great.

Thanks.

~Eric

ericreiss

@stephenw10 was anything ever determined for this Squid issue?

Thanks,

Eric

ericreiss

@ericreiss said in Install older version of Packages:

@stephenw10

@stephenw10 anything new on this issue?

stephenw10

Nothing on the bug report yet. Anything further will be added there.

JonathanLee

@stephenw10 what about wget???

ericreiss

@stephenw10 so it has been four months on this and no updates on Squid fix?

mcury

What I'm going to say here is not supported, it can brick your firewall and there is a high chance of a reinstall being required.
So, if you choose to follow this route, do it at your own risk, backup a config first and also take a snapshot just to be safe, ok ?

That being said, sometime ago I used to install a previous version of softflowd doing the following procedure: (updated for Squid).

Make sure Squid is not installed.

1- ssh to pfsense
2- go to /tmp directory
3- fetch https://firmware.netgate.com/pkg/pfSense_plus-v23_01_armv7-pfSense_plus_v23_01/All/pfSense-pkg-squid-0.4.45_10.pkg
4- fetch https://firmware.netgate.com/pkg/pfSense_plus-v23_01_armv7-pfSense_plus_v23_01/All/squid-5.7.pkg
5- pkg install pfSense-pkg-squid-0.4.45_10.pkg
6- pkg install squid-5.7.pkg

To remove this package: run pkg remove squid

Note: This version is for ARMv7 only, version 23.01.
Unfortunately, this is the latest version I found at https://firmware.netgate.com/pkg/

Proceed with caution, I didn't test this with Squid, just with softflowd, so you are on your own, your responsibility !

To be honest, I'm not sure if it is a good idea to share this.. pfSense admins, feel free to remove this post if you want, it is ok by me!!

ericreiss

@ericreiss Thanks @mcury but I would like to see support resolve this properly. Others were experiencing what may be the root of the problem from a ticket https://redmine.pfsense.org/issues/14406.

So the solution is not to try to install older versions of package.

But it appears that "Marcos M" could not replicate the problem and that nothing else is being done.

He tried on release 23.09 and I am now at 23.09 whereas I was at 23.05 at the time of the problem. Maybe I should uninstall Squid and try a reinstall.

It would have been nice if it had been tried against 23.05 and 23.09 to see if there was a difference and if the problem was reproducable on 23.05 so that we would know that just going to 23.09 and then installing Squid would fix everything.

But it appears support put the least amount of effort into this and I have not checked it in months.

JonathanLee

@mcury This can also work for Snort right?

JonathanLee

@ericreiss said in Install older version of Packages:

https://redmine.pfsense.org/issues/14406

My redmine lists how to fix the issue, have you attempted to relink the folder, or copy it over to the empty folder?

After 23.05 update and new Squid version 0.4.46 installed errors started showing,

"ERROR: loading file 9;/usr/local/etc/squid/errors/en/ERR_ZERO_SIZE_OBJECT': (2) No such file or directory"

and many others the path /usr/local/squid/errors/templates is the only sub folder listed with error code.

It seems Headers Handling, Language and Other Customizations settings for languages is not loading the error codes into the required subfolder. System is functional however no errors are listed

Fix:

cp -a /usr/local/etc/squid/errors/templates/. /usr/local/etc/squid/errors/en-us

cp -a /usr/local/etc/squid/errors/templates/. /usr/local/etc/squid/errors/en

seems to resolve this however for other languages there is no error codes anylonger.

mcury

@JonathanLee said in Install older version of Packages:

@mcury This can also work for Snort right?

I didn't test, but I think it could work.. The best approach would be to wait a proper fix..
For softflowd, I tested a lot of versions and they all worked, but softflowd is much simpler than Squid or Snort..

ericreiss

@JonathanLee I had done that over the summer. It fixed the one error but there are other problems and @stephenw10 thought there might be a bigger issue since some thing were not being installed properly, it might be indicative of bigger and/or more widespread problems.

So your fix while solving some of the warnings did not resolve the other problem I was seeing.

I was trying to get Squid to do the AV Clam scanning so my needs were more involved.