Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Squid Returned to Packages *** PLEASE TEST ***

    Scheduled Pinned Locked Moved pfSense Packages
    226 Posts 46 Posters 159.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      databeestje
      last edited by

      If you go to the access control page and click save. Does that work for you?

      1 Reply Last reply Reply Quote 0
      • N
        Neversky
        last edited by

        That's what I get after that… Again, I am pretty new with this, so what version do I need to have installed...

        Jan 10 01:25:35 squid: Bungled squid.conf line 60: http_access allow unrestricted_hosts
        Jan 10 01:25:20 php: : SQUID is installed but not started. Not installing redirect rules.
        Jan 10 01:25:20 php: : SQUID is installed but not started. Not installing redirect rules.
        Jan 10 01:25:17 check_reload_status: reloading filter
        Jan 10 01:25:16 squid: Bungled squid.conf line 60: http_access allow unrestricted_hosts
        Jan 10 01:25:16 php: /pkg_edit.php: Starting Squid

        1 Reply Last reply Reply Quote 0
        • N
          nepumuk
          last edited by

          Hello,

          after entering IPs in the fields unrestricted hosts, whitelist and blacklist squid is working again for me. Leaving the fields empty does not work.

          BTW is there a way to use the blacklists from squid guard (http://squidguard.shalla.de/shallalist.html) where the domains are separated by <cr>and not by commas?</cr>

          1 Reply Last reply Reply Quote 0
          • J
            Justinw
            last edited by

            @databeestje:

            Since the squid.sh is used by the start, stop and restart service I will not remove that one.

            What I have done instead is implement a delay in the proxy monitor script to wait 5 seconds after launhing to trigger a squid start or not.

            This is reflected as version p7. I have also moved the proxy start script after our attempt to start it.

            Thanks for the fix, I will test here in the next day or two!

            1 Reply Last reply Reply Quote 0
            • B
              bender
              last edited by

              Just started testing version p8. Thanks so much for your efforts on this databeestje - this is a huge feature for many of us  :-)

              First minor thing I noticed, my squid.conf line 17 now unexpectedly reads:

              Allow local network(s) on interface(s)

              I don't think that belongs there ;-) This same line appears later in squid.conf, but in that case it is properly commented out. No big deal - just wanted to let you know.

              1 Reply Last reply Reply Quote 0
              • B
                bender
                last edited by

                I have the same problem as some others - if I leave the Whitelist section empty, I get:

                /usr/local/sbin/squid status

                2007/01/11 04:01:44| parseConfigFile: line 17 unrecognized: 'Allow local network(s) on interface(s)'
                2007/01/11 04:01:44| ACL name 'whitelist' not defined!
                FATAL: Bungled squid.conf line 65: http_access allow whitelist
                Squid Cache (Version 2.6.STABLE5): Terminated abnormally.

                if I leave the blacklist section empty, I get:

                /usr/local/sbin/squid status

                2007/01/11 04:00:00| parseConfigFile: line 17 unrecognized: 'Allow local network(s) on interface(s)'
                2007/01/11 04:00:00| ACL name 'blacklist' not defined!
                FATAL: Bungled squid.conf line 67: http_access deny blacklist
                Squid Cache (Version 2.6.STABLE5): Terminated abnormally.

                i.e. in either case squid actually stops running, which is a silent failure as far as the webgui is concerned

                1 Reply Last reply Reply Quote 0
                • D
                  databeestje
                  last edited by

                  oops!

                  1 Reply Last reply Reply Quote 0
                  • A
                    adrianhensler
                    last edited by

                    I also had it not working unless I filled out the fields. I found that after adding ip's in the last two (whitelist / blacklist) I could then remove them and leave just a single space and squid would not complain about the squid.conf file.  No time to look at it further right now.

                    1 Reply Last reply Reply Quote 0
                    • U
                      Umberto
                      last edited by

                      I have a small update again, it's not that it's a bug, but it's not complete correct
                      the code:

                      
                      foreach (explode(',', $ifaces) as $i => $iface) {
                      		$real_ifaces[] = squid_get_real_interface_address($iface);
                      		if($real_ifaces[$i][0]) {
                                              if (($settings['transparent_proxy'] == 'on')) {
                      				$conf .= "http_port 127.0.0.1:80 transparent\n";
                                              }
                      			$conf .= "http_port {$real_ifaces[$i][0]}:$port\n";
                      		}
                      	}
                      
                      

                      should be

                      
                                 if (($settings['transparent_proxy'] == 'on')) {
                      		$conf .= "http_port 127.0.0.1:80 transparent\n";
                                  } else {
                      	             foreach (explode(',', $ifaces) as $i => $iface) {
                      			$real_ifaces[] = squid_get_real_interface_address($iface);
                      			if($real_ifaces[$i][0]) {
                      				$conf .= "http_port {$real_ifaces[$i][0]}:$port\n";
                      			}
                      		}
                      	}
                      
                      

                      If you have multiple lan interfaces where you want to run squid on in transparency mode, the old code will add```
                      http_port 127.0.0.1:80 transparent

                      Every interface you've selected will be pointed to the localhost later in the script.
                      1 Reply Last reply Reply Quote 0
                      • D
                        databeestje
                        last edited by

                        Just updated to p9 which should generate the incorrect config creation.

                        Empty blacklist fixing is saved for another day.

                        1 Reply Last reply Reply Quote 0
                        • M
                          mhab12
                          last edited by

                          This is looking great.  Thanks so much for all the progress.

                          I've found one small issue, though it could relate to the malformed blacklist acl.  Wildcards do not work.  When the original squid plugin was working back when, I could create a white list and enter * as the blacklist.  This would only allow traffic to the explicitly named sites.

                          1 Reply Last reply Reply Quote 0
                          • S
                            sullrich
                            last edited by

                            data has been working his ass off on this squid thing where nobody else would work on it including me.

                            Please show your support and donate to the data fund.  Not sure of his paypal account but please, he really has been working hard and deserves a couple cases of beer or wine, etc.

                            1 Reply Last reply Reply Quote 0
                            • D
                              databeestje
                              last edited by

                              Donate money to Seth for no good reason to seth.mos@xs4all.nl

                              1 Reply Last reply Reply Quote 0
                              • C
                                cheeky
                                last edited by

                                Does squid affects the load balancing rules? I'm using load balancing for my two WAN's and it is working fine.
                                Whenever squid is installed, all http traffic goes to the WAN gateway, no traffic passes through WAN2. But if i remove squid, load balancing functions properly again.
                                Any recommendations? Thank you very much.
                                Pfsense rocks!!!

                                1 Reply Last reply Reply Quote 0
                                • D
                                  databeestje
                                  last edited by

                                  That would be correct. That is not something we can fix.
                                  It's the same issue as the FTP proxy

                                  1 Reply Last reply Reply Quote 0
                                  • J
                                    jeroen234
                                    last edited by

                                    pfsense and all aplications on pfsense it self can not use load balancing so they will use the wan interface

                                    1 Reply Last reply Reply Quote 0
                                    • jahonixJ
                                      jahonix
                                      last edited by

                                      Is Squid supposed to be working ATM?

                                      Installed it on a 1.0.1 with 1.0.1-SNAPSHOT-01-13-2007 built on Sun Jan 14 15:07:53 EST 2007 and got these errors:

                                      
                                      Jan 15 10:02:48 	php: : SQUID is installed but not started. Not installing redirect rules.
                                      Jan 15 10:02:47 	check_reload_status: reloading filter
                                      Jan 15 10:02:47 	squid: Bungled squid.conf line 58: http_access allow unrestricted_hosts
                                      Jan 15 10:02:47 	php: /pkg_mgr_install.php: Starting Squid
                                      Jan 15 10:02:47 	last message repeated 2 times
                                      Jan 15 10:02:41 	squid: Bungled squid.conf line 58: http_access allow unrestricted_hosts
                                      Jan 15 10:02:41 	php: /pkg_mgr_install.php: Creating squid cache subdirs in /var/squid/cache
                                      Jan 15 10:02:41 	squid: Bungled squid.conf line 58: http_access allow unrestricted_hosts
                                      Jan 15 10:02:41 	php: /pkg_mgr_install.php: Starting Squid
                                      Jan 15 10:02:41 	last message repeated 2 times
                                      Jan 15 10:02:41 	squid: Bungled squid.conf line 58: http_access allow unrestricted_hosts
                                      Jan 15 10:02:41 	Squid_Alarm[70206]: Attempting restart...
                                      Jan 15 10:02:41 	Squid_Alarm[70204]: Squid has exited. Reconfiguring filter.
                                      Jan 15 10:02:40 	check_reload_status: reloading filter
                                      Jan 15 10:02:36 	squid: Bungled squid.conf line 58: http_access allow unrestricted_hosts
                                      Jan 15 10:02:36 	php: /pkg_mgr_install.php: Creating squid cache subdirs in /var/squid/cache
                                      Jan 15 10:02:36 	php: /pkg_mgr_install.php: Creating squid log dir /var/squid/log/
                                      Jan 15 10:02:36 	kernel: pid 70103 (squid), uid 0: exited on signal 6 (core dumped)
                                      Jan 15 10:02:36 	squid: Unable to open configuration file: /usr/local/etc/squid/squid.conf: (2) No such file or directory
                                      Jan 15 10:02:36 	php: /pkg_mgr_install.php: Starting a proxy monitor script
                                      Jan 15 10:02:36 	php: /pkg_mgr_install.php: Starting Squid
                                      Jan 15 10:02:36 	kernel: pid 70097 (squid), uid 0: exited on signal 6 (core dumped)
                                      Jan 15 10:02:36 	squid: Unable to open configuration file: /usr/local/etc/squid/squid.conf: (2) No such file or directory
                                      Jan 15 10:02:36 	kernel: pid 70095 (squid), uid 0: exited on signal 6 (core dumped)
                                      Jan 15 10:02:36 	squid: Unable to open configuration file: /usr/local/etc/squid/squid.conf: (2) No such file or directory
                                      Jan 15 10:02:31 	kernel: pid 70092 (squid), uid 0: exited on signal 6 (core dumped)
                                      Jan 15 10:02:31 	squid: Unable to open configuration file: /usr/local/etc/squid/squid.conf: (2) No such file or directory
                                      Jan 15 10:02:31 	php: /pkg_mgr_install.php: Creating squid cache subdirs in /var/squid/cache
                                      Jan 15 10:02:30 	php: /pkg_mgr_install.php: Stopping any running proxy monitors
                                      Jan 15 10:02:29 	kernel: pid 70078 (squid), uid 0: exited on signal 6 (core dumped)
                                      Jan 15 10:02:29 	squid: Unable to open configuration file: /usr/local/etc/squid/squid.conf: (2) No such file or directory
                                      Jan 15 10:02:29 	kernel: pid 70076 (squid), uid 0: exited on signal 6 (core dumped)
                                      Jan 15 10:02:29 	squid: Unable to open configuration file: /usr/local/etc/squid/squid.conf: (2) No such file or directory
                                      Jan 15 10:02:24 	kernel: pid 70073 (squid), uid 0: exited on signal 6 (core dumped)
                                      Jan 15 10:02:24 	squid: Unable to open configuration file: /usr/local/etc/squid/squid.conf: (2) No such file or directory
                                      Jan 15 10:02:24 	php: /pkg_mgr_install.php: Creating squid cache subdirs in /var/squid/cache
                                      Jan 15 10:02:24 	php: /pkg_mgr_install.php: Creating Squid cache dir /var/squid/cache
                                      Jan 15 10:02:02 	php: /pkg_mgr_install.php: Beginning package installation for squid.
                                      
                                      

                                      Actually, the file /usr/local/etc/squid/squid.conf  is located where it's supposed to…

                                      1 Reply Last reply Reply Quote 0
                                      • D
                                        databeestje
                                        last edited by

                                        As the previous posts mention, fill in those fields on the access control tab and the errors go away.

                                        I have not had time or incentive to fix these errors yet.

                                        1 Reply Last reply Reply Quote 0
                                        • M
                                          mhab12
                                          last edited by

                                          Thanks again for all the squid work.  Hope nobody minds if databeestje gets the $125 remaining on my bounty.  I'm really looking forward to the last few kinks getting worked out soon.

                                          Maybe some of the other Squid users out there could pitch in a bit too, data deserves it!

                                          1 Reply Last reply Reply Quote 0
                                          • S
                                            sullrich
                                            last edited by

                                            Data deserves every penny plus some more…

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.