Squid + squid guard stops randomly

josey

i will manually enter complete configuration, that is not problem.

thanks for advice, i will try and let you know

josey

Just to leave feedback,
PFS completely removed and reinstalled, packages installed, squid and squid guard works like charm (for now :))…
a didnt want to restore backup config, so i enter complete configuration manually (all static routes, firewall, nat etc)
I hope that this reinstall fix things...

Will let you know for couple of days

josey

same problem returns…

is it possible that someone of users behind pfs have some application that can confuse proxy filter, so that it stops with filtering?

i dont know what to do any more

josey

ok guys
i see im not alone with this problem
(http://forum.pfsense.org/index.php/topic,27597.0.html, etc…)
squid and squid guard are running but not filtering any web traffic after restarting services, works for day or two, and then filtering stops again...

also i installed one test pfs 2.0 beta4 (amd x64) to test squid and squidguard, and it cant run squid and squidguard, services are installed but cant run...

can we expect fix for 1.2.3, or should we wait for 2.0 to be fixed ?

thanks

jimp

It works fine for most people on 1.2.3. I would not expect 2.0 to be more stable at the moment.

The problem with squid's on x64 is different entirely, and has nothing to do with the original post here. There are a couple threads from yesterday about it (check system logs for signal 6 errors) but either way, if you're on 2.0 and having issues, start a new thread in the 2.0 board and don't keep tacking on to this one since that is definitely a separate issue.

josey

yes i was searching, and find out that, there is some problems with squidguard on 1.2.3,
and that there is problem on 2.0, but also it is not related to problem i have here.

im running 1.2.3
and 2.0 beta4 in test phase…

i have two different problems on same package :(

thanks for answer

ColdFusion

I'm running 2.0 beta 4 and sguidguard has worked everyday since I installed it over 10 days ago. I also had no issue when I was on 1.23 prior to installing 2.0.

josey

what date install do you use?
i couldnt even install amd x64 version from 13 aug. 2010…

than i download older version from 28. jul 2010 and installation passed with no probs.
also i cant believe that i have issue with machines? with different machines? but again, maybe hardware is problem, both machines are amd 64.

thanks for reply

ColdFusion

Currently on: 2.0-BETA4
built on Tue Aug 10 02:57:56 EDT 2010
FreeBSD 8.1-RELEASE

josey

hm, 32 or 64?
it seems 32bit versions work fine.

ColdFusion

32

josey

32? :)

ok, i was talking that i have problems with 64bit version, and everyone who use 32bit version say they have no problems, so i follow, and reinstal to 32bit version…

on install i had same stack up like with 64bit version
message:
BIOS DRIVE C: IS DISK 0

and than installation hangs for a 10 min or so...

i thought that on end of installation i will get same error as with 64bit version (that is why i switched to 28.jul install), but installation finished fine...

installation of squid passed ok, only ehen i reboot pfs, it started uninstalation ???
ok, reinstalled again, also install squidguard, and now both packages work.

Now i have to run it for couple of days to see is there same problem that i have with 1.2.3. version.

So definitely there is bug with 2.0 BETA 4 64bit install...

coldfusion, thanks for reply

josey

squidguard was filtering until first restart
i think that now i have same problem regarding to this topic http://forum.pfsense.org/index.php/topic,27597.0.html

when i restart service i get this on log:
Aug 20 09:54:35 Squid_Alarm[32428]: Reconfiguring filter…
Aug 20 09:54:35 php: : The command '/sbin/pfctl -nf /tmp/rules.test.packages' returned exit code '1', the output was '/tmp/rules.test.packages:6: macro 'pptp' not defined /tmp/rules.test.packages:6: syntax error'
Aug 20 09:54:35 php: : There was an error while parsing the package filter rules for /usr/local/pkg/squid.inc.
Aug 20 09:54:36 php: : The command '/sbin/pfctl -nf /tmp/rules.test.packages' returned exit code '1', the output was '/tmp/rules.test.packages:13: macro 'pptp' not defined /tmp/rules.test.packages:13: syntax error'
Aug 20 09:54:36 php: : There was an error while parsing the package filter rules for /usr/local/pkg/squid.inc.
Aug 20 09:54:36 Squid_Alarm[38776]: Squid has resumed. Reconfiguring filter.
Aug 20 09:54:36 php: : The command '/sbin/pfctl -nf /tmp/rules.test.packages' returned exit code '1', the output was '/tmp/rules.test.packages:6: macro 'pptp' not defined /tmp/rules.test.packages:6: syntax error'
Aug 20 09:54:36 php: : There was an error while parsing the package filter rules for /usr/local/pkg/squid.inc.
Aug 20 09:54:36 php: : The command '/sbin/pfctl -nf /tmp/rules.test.packages' returned exit code '1', the output was '/tmp/rules.test.packages:13: macro 'pptp' not defined /tmp/rules.test.packages:13: syntax error'
Aug 20 09:54:36 php: : There was an error while parsing the package filter rules for /usr/local/pkg/squid.inc.
Aug 20 09:54:47 squid[18219]: The url_rewriter helpers are crashing too rapidly, need help!
Aug 20 09:54:47 squid[17778]: Squid Parent: child process 18219 exited due to signal 6
Aug 20 09:54:47 kernel: pid 18219 (squid), uid 62: exited on signal 6
Aug 20 09:54:50 squid[17778]: Squid Parent: child process 46534 started

i dont have acl rules and destinations

josey

problem found in 2.0 beta 4 32bit
when i enable PPTP VPN, web filtering stops!

bug? :)

maybe same problem with 1.2.3.? i mean maybe is related?
Because i notice, that, after pfs receive connection to vpn, squidguard stops with filtering, but it is random, not every time.

any suggestions? comments?

thanks

AndreasP

I have been having the same probem with suid and squid guard. It will work for a bit, then stop working all together. Very frustrating. I have tried so many times and things to fix it. I gave up.

Good luck

josey

@MrKluttz:

I have been having the same probem with suid and squid guard. It will work for a bit, then stop working all together. Very frustrating. I have tried so many times and things to fix it. I gave up.

Good luck

agree, very frustrating, and i cant give up, i need that service, and i need it badly

sot010174

Guys, I think I have a workaround for this issue. I had (hopefully HAD) the same issue. squidguard stops filtering and allows everything to go through every day or two.

Running 1.2.3 Release. Possible solution: I've ssh'd into the pfsense box, and I´ve set cron to kill squidguard 03:00 everyday. pfsense seems to restart squidguard automatically. Seems to work fine now!

Command: killall -9 squidguard

Simple as that. Let me know if that fixes for you guys as well.

josey

:)
no need just install 2.0 works perfect

orion182

I have too problem with squid+squidguard randomly stop filtering and pass all traffic.
(pfsense 1.2.3, squid 2.7.9_4, squidGuard 1.3_1 pkg v.1.9)

I find in filter log this message:

07.03.2011 06:07:45 going into emergency mode
07.03.2011 06:07:45 overflow in vsprintf (sgLogError): Unknown error:

in emergency mode squidguard according to documentation pass all traffic.

I think if squidquard package is by mistake buid without this patches (or one of them):
http://squidguard.org/Downloads/Patches/1.3/Readme.Patch-20091015
http://squidguard.org/Downloads/Patches/1.3/Readme.Patch-20091019

or is new similar bug.

I apologize for my English :)