Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Squid Questions

    pfSense Packages
    4
    13
    5.6k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      jonnytabpni
      last edited by

      Thanks folks.

      To turn off cacheing, do I just set the Dish Cache size to 0? Then that will be safe for the CF?

      1 Reply Last reply Reply Quote 0
      • J
        jonnytabpni
        last edited by

        This will totally depend on your configuration, but I don't suppose it would be any less safe, and potentially more secure, as you can control content better.

        Can you please tell me where it woudn't be safe? At the minute, the firewall is in default mode, except I've enabled traffic shaping, setup OpenVPN and installed/enabled squid. I havn't blocked ports 80 and 443 yet, as I just want to test that the users are happy with the proxy

        1 Reply Last reply Reply Quote 0
        • C
          chudy
          last edited by

          run this

          sed 's:^cache_dir\(.*\):cache_dir null \/tmp:g' /usr/local/pkg/squid.inc > squid.inc.tmp && mv squid.inc.tmp /usr/local/pkg/squid.inc
          
          1 Reply Last reply Reply Quote 0
          • J
            jonnytabpni
            last edited by

            I get an error saying read-only filesystem :S

            Any ideas?

            THis is confusing, as I can edit my squid config in the web gui…

            1 Reply Last reply Reply Quote 0
            • J
              jonnytabpni
              last edited by

              Any ideas on this?

              I can't seem to write to any of the config files. It just says Read Only Filesystem

              1 Reply Last reply Reply Quote 0
              • J
                jonnytabpni
                last edited by

                Ok folks,

                I got the above command to work. I had to run it from the webGUI and not the shell.

                Can someone pelase explain to me how to web gui can edit the squid.inc file when / is mount as read only?

                Thanks

                1 Reply Last reply Reply Quote 0
                • M
                  mhab12
                  last edited by

                  Either use the Diagnostics/Edit File command from the web GUI and load /usr/local/pkg/squid.inc or use something like WinSCP via SSH or Putty to get the job done.  There are several options to manually edit the file.

                  1 Reply Last reply Reply Quote 0
                  • J
                    jonnytabpni
                    last edited by

                    What is the best way to improve the performance of my pfsense box while running squid? I don't need caching, I just need squid for network security (I intend to install SquidGuard).

                    The box I'm using is a wee ALIX 2D3 (500Mhz AMD Geode 256MB RAM), and VOIP packets are to go through this box (hence why I need the best performance possible)

                    Thanks

                    1 Reply Last reply Reply Quote 0
                    • M
                      mhab12
                      last edited by

                      Are you seeing substantially degraded performance as compared with your non-proxied traffic?  Squid tends to run at near full speed for most people without much (any) tinkering.

                      1 Reply Last reply Reply Quote 0
                      • C
                        clarknova
                        last edited by

                        Now that you remind me, I had issues with my speed dropping out until I implemented this fix:

                        http://forum.pfsense.org/index.php/topic,7186.msg59302.html#lastPost

                        db

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.