Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Squid Returned to Packages *** PLEASE TEST ***

    Scheduled Pinned Locked Moved pfSense Packages
    226 Posts 46 Posters 159.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      sullrich
      last edited by

      data has been working his ass off on this squid thing where nobody else would work on it including me.

      Please show your support and donate to the data fund.  Not sure of his paypal account but please, he really has been working hard and deserves a couple cases of beer or wine, etc.

      1 Reply Last reply Reply Quote 0
      • D
        databeestje
        last edited by

        Donate money to Seth for no good reason to seth.mos@xs4all.nl

        1 Reply Last reply Reply Quote 0
        • C
          cheeky
          last edited by

          Does squid affects the load balancing rules? I'm using load balancing for my two WAN's and it is working fine.
          Whenever squid is installed, all http traffic goes to the WAN gateway, no traffic passes through WAN2. But if i remove squid, load balancing functions properly again.
          Any recommendations? Thank you very much.
          Pfsense rocks!!!

          1 Reply Last reply Reply Quote 0
          • D
            databeestje
            last edited by

            That would be correct. That is not something we can fix.
            It's the same issue as the FTP proxy

            1 Reply Last reply Reply Quote 0
            • J
              jeroen234
              last edited by

              pfsense and all aplications on pfsense it self can not use load balancing so they will use the wan interface

              1 Reply Last reply Reply Quote 0
              • jahonixJ
                jahonix
                last edited by

                Is Squid supposed to be working ATM?

                Installed it on a 1.0.1 with 1.0.1-SNAPSHOT-01-13-2007 built on Sun Jan 14 15:07:53 EST 2007 and got these errors:

                
Jan 15 10:02:48 	php: : SQUID is installed but not started. Not installing redirect rules.
Jan 15 10:02:47 	check_reload_status: reloading filter
Jan 15 10:02:47 	squid: Bungled squid.conf line 58: http_access allow unrestricted_hosts
Jan 15 10:02:47 	php: /pkg_mgr_install.php: Starting Squid
Jan 15 10:02:47 	last message repeated 2 times
Jan 15 10:02:41 	squid: Bungled squid.conf line 58: http_access allow unrestricted_hosts
Jan 15 10:02:41 	php: /pkg_mgr_install.php: Creating squid cache subdirs in /var/squid/cache
Jan 15 10:02:41 	squid: Bungled squid.conf line 58: http_access allow unrestricted_hosts
Jan 15 10:02:41 	php: /pkg_mgr_install.php: Starting Squid
Jan 15 10:02:41 	last message repeated 2 times
Jan 15 10:02:41 	squid: Bungled squid.conf line 58: http_access allow unrestricted_hosts
Jan 15 10:02:41 	Squid_Alarm[70206]: Attempting restart...
Jan 15 10:02:41 	Squid_Alarm[70204]: Squid has exited. Reconfiguring filter.
Jan 15 10:02:40 	check_reload_status: reloading filter
Jan 15 10:02:36 	squid: Bungled squid.conf line 58: http_access allow unrestricted_hosts
Jan 15 10:02:36 	php: /pkg_mgr_install.php: Creating squid cache subdirs in /var/squid/cache
Jan 15 10:02:36 	php: /pkg_mgr_install.php: Creating squid log dir /var/squid/log/
Jan 15 10:02:36 	kernel: pid 70103 (squid), uid 0: exited on signal 6 (core dumped)
Jan 15 10:02:36 	squid: Unable to open configuration file: /usr/local/etc/squid/squid.conf: (2) No such file or directory
Jan 15 10:02:36 	php: /pkg_mgr_install.php: Starting a proxy monitor script
Jan 15 10:02:36 	php: /pkg_mgr_install.php: Starting Squid
Jan 15 10:02:36 	kernel: pid 70097 (squid), uid 0: exited on signal 6 (core dumped)
Jan 15 10:02:36 	squid: Unable to open configuration file: /usr/local/etc/squid/squid.conf: (2) No such file or directory
Jan 15 10:02:36 	kernel: pid 70095 (squid), uid 0: exited on signal 6 (core dumped)
Jan 15 10:02:36 	squid: Unable to open configuration file: /usr/local/etc/squid/squid.conf: (2) No such file or directory
Jan 15 10:02:31 	kernel: pid 70092 (squid), uid 0: exited on signal 6 (core dumped)
Jan 15 10:02:31 	squid: Unable to open configuration file: /usr/local/etc/squid/squid.conf: (2) No such file or directory
Jan 15 10:02:31 	php: /pkg_mgr_install.php: Creating squid cache subdirs in /var/squid/cache
Jan 15 10:02:30 	php: /pkg_mgr_install.php: Stopping any running proxy monitors
Jan 15 10:02:29 	kernel: pid 70078 (squid), uid 0: exited on signal 6 (core dumped)
Jan 15 10:02:29 	squid: Unable to open configuration file: /usr/local/etc/squid/squid.conf: (2) No such file or directory
Jan 15 10:02:29 	kernel: pid 70076 (squid), uid 0: exited on signal 6 (core dumped)
Jan 15 10:02:29 	squid: Unable to open configuration file: /usr/local/etc/squid/squid.conf: (2) No such file or directory
Jan 15 10:02:24 	kernel: pid 70073 (squid), uid 0: exited on signal 6 (core dumped)
Jan 15 10:02:24 	squid: Unable to open configuration file: /usr/local/etc/squid/squid.conf: (2) No such file or directory
Jan 15 10:02:24 	php: /pkg_mgr_install.php: Creating squid cache subdirs in /var/squid/cache
Jan 15 10:02:24 	php: /pkg_mgr_install.php: Creating Squid cache dir /var/squid/cache
Jan 15 10:02:02 	php: /pkg_mgr_install.php: Beginning package installation for squid.

                Actually, the file /usr/local/etc/squid/squid.conf  is located where it's supposed to…

                1 Reply Last reply Reply Quote 0
                • D
                  databeestje
                  last edited by

                  As the previous posts mention, fill in those fields on the access control tab and the errors go away.

                  I have not had time or incentive to fix these errors yet.

                  1 Reply Last reply Reply Quote 0
                  • M
                    mhab12
                    last edited by

                    Thanks again for all the squid work.  Hope nobody minds if databeestje gets the $125 remaining on my bounty.  I'm really looking forward to the last few kinks getting worked out soon.

                    Maybe some of the other Squid users out there could pitch in a bit too, data deserves it!

                    1 Reply Last reply Reply Quote 0
                    • S
                      sullrich
                      last edited by

                      Data deserves every penny plus some more…

                      1 Reply Last reply Reply Quote 0
                      • jahonixJ
                        jahonix
                        last edited by

                        @databeestje:

                        I have not had time or incentive to fix these errors yet.

                        Woops, sorry!
                        I thought of recalling that these fields were blank filled on install but that might not be committed yet.

                        Thanks for the hard work you put in squid!

                        1 Reply Last reply Reply Quote 0
                        • L
                          Level 10
                          last edited by

                          I fixed the problem on that way:

                          (well, it's a dirty hack, but it works out with 2.6.5_1-p9)

                          Tab "Access control"

                          Allowed subnets: use a local subnet (that subnet don't have to exist realy in your network), that dosn't fit to the proxy-interface. (the interface-subnet is used automaticly)

                          Unrestricted IPs: the same as subnets above - an ip that dosn't fit to the local subnet on proxy-interface

                          Banned host addresses: an ip not used in your local network

                          Whitelist: 0.0.0.0 - it means all ip-ranges
                          Blacklist: an ip-adress not used in your local network

                          Have nice proxying ;)

                          1 Reply Last reply Reply Quote 0
                          • A
                            AkumaKuruma
                            last edited by

                            mines crashing with the following

                            Jan 16 08:40:58 squid: Bungled squid.conf line 70: http_access allow localnet 
Jan 16 08:40:33 php: : Not installing nat reflection rules for a port range > 500 
Jan 16 08:40:33 php: : SQUID is installed but not started. Not installing redirect rules. 
Jan 16 08:40:33 php: : SQUID is installed but not started. Not installing redirect rules. 
Jan 16 08:40:28 php: : Not installing nat reflection rules for a port range > 500 
Jan 16 08:40:26 check_reload_status: reloading filter

                            sounds like it doesnt like me having the higher ports forwarded. but that shouldnt really matter to squid.

                            1 Reply Last reply Reply Quote 0
                            • D
                              databeestje
                              last edited by

                              Not sure why you would want a squid without a valid localnet decleration.

                              Also, when you check the allow networks on local interfaces you automatically will have this filled out. Since this is what most users will want.

                              1 Reply Last reply Reply Quote 0
                              • D
                                databeestje
                                last edited by

                                Version p10 just committed.

                                This should fix the empty ACL problem. I'll see how hard it is to rewrite the acl lists into a line by line format instead of commaseperated.

                                1 Reply Last reply Reply Quote 0
                                • M
                                  Mikhail
                                  last edited by

                                  @databeestje:

                                  Version p10 just committed.

                                  This should fix the empty ACL problem. I'll see how hard it is to rewrite the acl lists into a line by line format instead of commaseperated.

                                  it does't work…
                                  Jan 16 19:07:42 kernel: pid 62862 (squid), uid 0: exited on signal 6 (core dumped)
                                  Jan 16 19:07:41 squid: No port defined

                                  1 Reply Last reply Reply Quote 0
                                  • M
                                    Mikhail
                                    last edited by

                                    also i can't make any changes on General settings page.

                                    The following input errors were detected:

                                    * You must start log location with a / mark
                                        * That is not a valid log location dir
                                        * You can not run squid on the same port as the webgui

                                    P.S. I am not using logs…

                                    1 Reply Last reply Reply Quote 0
                                    • A
                                      AkumaKuruma
                                      last edited by

                                      Data: i ended up having to wipe squid completely off including manually deleting the squid config files for it fo finally work. all the settings were correct and enabled as they should have been. guess it was an artifact from a previous version that was interfering. last test was P9 and was blocking what i was telling it too.

                                      I'll try out P10 when i get home tonight.

                                      1 Reply Last reply Reply Quote 0
                                      • N
                                        nepumuk
                                        last edited by

                                        Squid now works with empty fields here - great!

                                        1 Reply Last reply Reply Quote 0
                                        • S
                                          superwutze
                                          last edited by

                                          coredumps here too

                                          latest snapshot and p10 and only "pid xxxx (squid), uid 0: exited on signal 6 (core dumped)"

                                          pkg uninstalled, used pkg_delete to remove both squid-packages, 'find / -name "squid"' and all deleted and even removed all squid lines from /cf/conf/config.xml but it stays the same.

                                          my pkg_info shows the following:

                                          bsdinstaller-2.0.2006.0728 BSD Installer mega-package
cpdup-1.05          A comprehensive filesystem mirroring program
lighttpd-1.4.13     A secure, fast, compliant, and very flexible Web Server
lua-5.0.2_1         Small, compilable scripting language providing easy access
openldap-client-2.3.24 Open source LDAP client implementation
openldap-client-2.3.30 Open source LDAP client implementation
openntpd-3.7p1,2    OpenBSD's Network Time Protocol daemon
pcre-6.7            Perl Compatible Regular Expressions library
perl-5.8.8          Practical Extraction and Report Language

                                          what packages can safely be removed (dependencies from squid)? maybe there is some old version in there that has to be reinstalled.

                                          1 Reply Last reply Reply Quote 0
                                          • A
                                            AkumaKuruma
                                            last edited by

                                            any plans to get wildcards working? i.e.  *.blockeddomain.com would block www.blockeddomain.com and ftp.blockeddomain.com

                                            or is this something outside the scope of what the default squid package can do?

                                            as for testing P10, I cant get it to work except for having all fields have an entry in them. I have to have dummy information in the top 3 fields (using 192.168.255.0/24 block since my network isnt). so as far as i can tell, P10 doesnt fix anything and runs identical to P9

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.