Squid errors

Jesse7 · Nov 20, 2005, 9:43 AM

I just installed .94 I havn't had a chance to get .94.4 yet but I got pretty much the same thing. I changed some options and clicked save and an error similar to that appeared. I was on the first tab of the setup page. I got similar errors from the second tab after changing an option or two and perhaps from the third tab also. On the tab you enter ip and domain ips etc after hitting save I got no errors.

I refreshed all the pages I changed settings on and they seemed to be set to what I changed them too.

I didn't bother posting it here because I'm not on the most current version.

Myntric · Nov 20, 2005, 3:59 PM

Interesting. The last commit was a few weeks ago and while quite a bit was changed, I was under the impression that the default install worked. The package is definitely in a state of flux at the moment. In speaking with Colin, it seems that the best way to design a flexible Squid package and allow the integration with SquidGuard, HAVP, ClamAV, or whatever is to code in pure PHP while using the packaging system simply for the install/deinstall and such. This would allow much more flexibility. I've started the process and don't expect to have a commit for little while, but am plugging away and trying to support both packages now. I'll check into this issue and see if I can fix it and commit a new version. I'll let everyone know if I do. Thanks!

sullrich · Nov 20, 2005, 5:05 PM

This actually was a server error. Or package sync script stopped copying changes from CVS.

At any rate, everything is fixed now and the squid stuff should be on the latest version on the server now.

Guest · Nov 20, 2005, 6:59 PM

I'm guessing that the correct answer is to uninstall and then re-install the squid package?

sullrich · Nov 20, 2005, 7:38 PM

@submicron:

I'm guessing that the correct answer is to uninstall and then re-install the squid package?

Yep.

BBMitch · Nov 20, 2005, 9:11 PM

Just did a remove and install…
At the bottom of the package install screen in black on the grey background was this text:
Parse error: parse error, unexpected T_STRING in /etc/inc/pkg-utils.inc(426) : eval()'d code on line 1

Tried the same task again, got the same message about missing includes etc. when I pressed save on the first page of the config... perhaps the cause was the error above?

Thanks!
Still running 0.90 on that box - will upgrade to 94.4 today

Jesse7 · Nov 20, 2005, 9:48 PM

@submicron:

I'm guessing that the correct answer is to uninstall and then re-install the squid package?

My install was 100% fresh. The first thing I did was install squid and start to configure it.

I am thinking I havn't seen these errors before or not I remember, is because I have just used the upgrade option each time (except this time). And it keeps all my settings even when you get the error.

amenabe · Nov 25, 2005, 6:47 AM

Hi all!

Likewise, all references to "GSDF" should also be changed to "GDSF".

;)

Myntric · Nov 25, 2005, 11:38 AM

@amenabe:

Hi all!

Likewise, all references to "GSDF" should also be changed to "GDSF".

;)

Already fixed.

rexster · Jan 5, 2006, 7:21 AM

have pfsense .95a installed and just installed squid.

first time it's installed, i got misconfigured it and got lots of error.
so i removed it and install again.
this time it works fine.

but after reboot, it wont start up automatically.
i have to go to shell and type squid to start it

what to do to make it startup on every boot?

sullrich · Jan 5, 2006, 9:26 PM

@rexster:

have pfsense .95a installed and just installed squid.

This version is not supported. Upgrade to receive support.

rexster · Jan 6, 2006, 2:48 AM

fresh installed pfsense 1 beta
then directly install squid package only.

squid doesnt run at all.
i try see from shell, no /var/squid folder
there's a squid folder on /etc/local
but it's only contain 2 folders (logs and cache) and both folders are empty.

so, no log i can see.
the cache folder also not created yet.

i try squid -z but it gives out error: failed to create folder…

jeroen234 · Jan 6, 2006, 10:34 AM

these steps you need to take to get squid 2.5.12 from the pfsense packages working with pfsense beta 1


pfSense console setup
8)  Shell

mkdir /var/squid
chown squid:squid /var/squid
mkdir /var/squid/logs
chown squid:squid /var/squid/logs
mkdir /var/squid/cache
chown squid:squid /var/squid/cache
mkdir /usr/local/etc/squid/advanced
chown squid:squid /usr/local/etc/squid/advanced
mkdir /usr/local/etc/squid/advanced/acls
chown squid:squid /usr/local/etc/squid/advanced/acls
touch /usr/local/etc/squid/advanced/acls/src_subnets.acl
chown squid:squid /usr/local/etc/squid/advanced/acls/src_subnets.acl
touch /usr/local/etc/squid/advanced/acls/src_unrestricted_ip.acl
chown squid:squid /usr/local/etc/squid/advanced/acls/src_unrestricted_ip.acl
squid -z
exit

pfSense console setup
11)  Restart webConfigurator

now config in pfsense browser
http://ipadress/pkg_edit.php?xml=squid_ng.xml&id=0

go back to consul
pfSense console setup
8)  Shell

squid
ps -ax | grep squid

if you see somving like this :
 4683  ??  Ss     0:00.00 squid
 4685  ??  S      0:00.19 (squid) (squid)
 4695  p0  S+     0:00.01 grep squid

squid is running

rexster · Jan 7, 2006, 4:43 AM

ok now squid runs fine.

still one problem.
how do i make it automatically start on each boot?

btw… one more issue...
even that squid does run, when i check the access.log file,
i only see access to http://my.ip.address
and all access to the internet doesn showed up there.

is this normal?

tnx
rex

hoba · Jan 7, 2006, 4:44 AM

Try starting it by using the hidden xml-options for the config.xml: http://faq.pfsense.com/index.php?sid=18492&lang=en&action=artikel&cat=10&id=38&artlang=en&highlight=hidden

This of course won't be needed later when the package is final.

rexster · Jan 7, 2006, 5:45 AM

can you explain more detailed…
exactly, what to put into config.xml, where to put it?

few issue i found:
transparent proxy doesnt seem to work (yet) ?
and proxy also refuse https protocol?

tnx
rex

jeroen234 · Jan 7, 2006, 9:07 AM

here transparent proxy for poort 80 works but only with 3128 as squid poort on pfsense
the log is on /var/squid/logs/access.log


10.141.254.1 - - [07/Jan/2006:09:32:23 +0100] "GET http://forum.pfsense.org/favicon.ico HTTP/1.1" 404 483 TCP_NEGATIVE_HIT:NONE
10.141.254.1 - - [07/Jan/2006:09:32:24 +0100] "GET http://www.imageshack.us/iframe.php?txtcolor=111111&type=blank HTTP/1.1" 200 1211 TCP_MISS:DIRECT
10.141.254.1 - - [07/Jan/2006:09:32:24 +0100] "GET http://forum.pfsense.org/favicon.ico HTTP/1.1" 404 483 TCP_NEGATIVE_HIT:NONE
10.141.254.1 - - [07/Jan/2006:09:34:06 +0100] "GET http://checkip.dyndns.org/ HTTP/1.0" 200 264 TCP_MISS:DIRECT
10.141.254.1 - - [07/Jan/2006:09:39:09 +0100] "GET http://checkip.dyndns.org/ HTTP/1.0" 200 264 TCP_MISS:DIRECT

check /var/squid/logs/cache.log for squid errors

to start squid from config.xml:
add <shellcmd>squid</shellcmd> to config.xml
look at the code below for where to put it


 <system><optimization>normal</optimization>
	<hostname>pfsense</hostname>
	<domain>wlelystad.homeip.net</domain>
	<username>admin</username>
	<password>$1$.Qr5mty/$FZsZiYnpLMX1fs3VPAJpq1</password>
	<timezone>Europe/Amsterdam</timezone>
	<time-update-interval>300</time-update-interval>
	<timeservers>pool.ntp.org</timeservers>
	 <webgui><protocol>http</protocol>
		 <certificate><private-key><port>10000</port></private-key></certificate></webgui> 
	<enablesshd>yes</enablesshd>

	 <maximumstates><dnsallowoverride><dnsserver><dnsserver><shellcmd>squid</shellcmd></dnsserver></dnsserver></dnsallowoverride></maximumstates></system>

sullrich · Jan 7, 2006, 7:29 PM

@jeroen234:

these steps you need to take to get squid 2.5.12 from the pfsense packages working with pfsense beta 1


pfSense console setup
8)  Shell

mkdir /var/squid
chown squid:squid /var/squid
mkdir /var/squid/logs
chown squid:squid /var/squid/logs
mkdir /var/squid/cache
chown squid:squid /var/squid/cache
mkdir /usr/local/etc/squid/advanced
chown squid:squid /usr/local/etc/squid/advanced
mkdir /usr/local/etc/squid/advanced/acls
chown squid:squid /usr/local/etc/squid/advanced/acls
touch /usr/local/etc/squid/advanced/acls/src_subnets.acl
chown squid:squid /usr/local/etc/squid/advanced/acls/src_subnets.acl
touch /usr/local/etc/squid/advanced/acls/src_unrestricted_ip.acl
chown squid:squid /usr/local/etc/squid/advanced/acls/src_unrestricted_ip.acl
squid -z
exit

pfSense console setup
11)  Restart webConfigurator

now config in pfsense browser
http://ipadress/pkg_edit.php?xml=squid_ng.xml&id=0

go back to consul
pfSense console setup
8)  Shell

squid
ps -ax | grep squid

if you see somving like this :
 4683  ??  Ss     0:00.00 squid
 4685  ??  S      0:00.19 (squid) (squid)
 4695  p0  S+     0:00.01 grep squid

squid is running

I just updated the squid INIT code to include this. Please test again!

sullrich · Jan 7, 2006, 10:28 PM

@sullrich:

This actually was a server error. Or package sync script stopped copying changes from CVS.

At any rate, everything is fixed now and the squid stuff should be on the latest version on the server now.

Speaking of this, we had yet another problem syncing packages. Please try squid again, I've fixed a ton of errors and made sure that it is sycning.

Out of the box squid starts now for me. Please let me know if this is not the case for anyone else, I really want squid working for 1.0.

Schnuffel · Jan 7, 2006, 11:05 PM

Hi @all!

I've tried to use the captive portal together with squid in transparent mode. The captive portal was running before without any errors, but after I have installed squid I've got a lot of errors and squid refused the connection to any server on the wan-side.
Well, I've read the squid docs and faqs and there I've found, it isn't possible to run squid in transparent mode with authentification by acl, ldap and so on.
Now my question: Is it possible to run squid together with a captive portal?

Thanks and so long
Schnuffel