Squid can't work

dr85 · Dec 9, 2010, 11:34 AM

I update pfSense to
built on Wed Dec 8 22:39:45 EST 2010

When installed the squid package, lan's computer can't access web site. Delete the squid package, lan's computer can access web site.

Who can help me?

rafael.cardoso · Dec 9, 2010, 11:52 AM

same issue here…

dreamslacker · Dec 9, 2010, 12:19 PM

Disable your traffic shaper and limiters, then try again. There's some cranky issues with having the shaper/ limiter catch squid.

rafael.cardoso · Dec 9, 2010, 1:00 PM

without traffic shaper…

jimp · Dec 9, 2010, 6:09 PM

Did you check the box to "allow users on interface"? Squid may now know it's supposed to allow them access.

If it used to work and then stopped, we need a lot more detail, not just your build time. (i386/amd64, system log output, etc)

Nachtfalke · Dec 9, 2010, 9:00 PM

Same problem here und build Dec 9 04:00 x86, but you do NOT need to uninstall squid, just use the "CTRL" key and unselect the interface SQUID should listen on or better should NOT listen on, than save. In the end, its the same like uninstalling SQUID but pehraps a little faster for testing purposes.

I didn't use any traffic shaper.

@jimp:
please let me know, which log files you need and in which path I could find them. I could post them here tomorrow when I'm at work again.

jimp · Dec 9, 2010, 9:04 PM

Or just uncheck transparent mode and save to disable the redirect. :-)

Just the system log should be ok. Status > System Logs.

EDIT: Maybe also part of the squid log if it shows errors. It would be under /var/squid/log/cache.log

Nachtfalke · Dec 9, 2010, 9:05 PM

I did logging to my external syslog server while booting up pfsense and (try) surfing internet, but at the moment I couldn't remember any hints about squid but I am not sure at alle at the moment.
No other log files necessary for you ?

jimp · Dec 9, 2010, 9:19 PM

System log and squid log would be it, no others I can think of just now.

dr85 · Dec 10, 2010, 1:24 AM

2.0-BETA4 (i386) built on Thu Dec 9 13:24:37 EST 2010

IN "Status: System logs: System"
I find this message:

	saslpasswd2: unable to dlopen /usr/local/lib/sasl2/libgssapiv2.so.2: Shared object "libgssapi.so.10" not found, required by "libgssapiv2.so.2"

When I uncheck transparent mode, It's work.

jimp · Dec 10, 2010, 1:25 AM

Ok, that's a good solid lead I can track down. I'll let you know.

dr85 · Dec 10, 2010, 2:09 AM

IN "Status: System logs: System"
I find this message:


	php: : The command '/tmp/squidGuard_db_rebuild.sh_usrdb' returned exit code '1', the output was '2010/12/10 09:51:15| aclParseAclLine: WARNING: empty ACL: acl throttle_exts urlpath_regex -i "/var/squid/acl/throttle_exts.acl" squid: ERROR: Could not send signal 1 to process 29365: (3) No such process'

In /var/squid/log/cache.log

2010/12/10 09:59:57| Reconfiguring Squid Cache (version 2.7.STABLE9)...
2010/12/10 09:59:57| FD 23 Closing HTTP connection
2010/12/10 09:59:57| FD 24 Closing HTCP socket
2010/12/10 09:59:57| FD 25 Closing SNMP socket
2010/12/10 09:59:57| aioSync: flushing pending I/O operations
2010/12/10 09:59:57| aioSync: done
2010/12/10 09:59:57| logfileClose: closing log /var/squid/log/access.log
2010/12/10 09:59:57| Including Configuration File: /usr/local/etc/squid/squid.conf (depth 0)
2010/12/10 09:59:57| Cache dir '/var/squid/cache' size remains unchanged at 102400 KB
2010/12/10 09:59:57| aclParseAclLine: WARNING: empty ACL: acl throttle_exts urlpath_regex -i "/var/squid/acl/throttle_exts.acl"
2010/12/10 09:59:57| logfileOpen: opening log /var/squid/log/access.log
2010/12/10 09:59:57| Store logging disabled
2010/12/10 09:59:57| Referer logging is disabled.
2010/12/10 09:59:57| DNS Socket created at 0.0.0.0, port 30288, FD 15
2010/12/10 09:59:57| Adding domain fyschool from /etc/resolv.conf
2010/12/10 09:59:57| Adding nameserver 172.16.0.1 from /etc/resolv.conf
2010/12/10 09:59:57| Adding nameserver 172.16.0.2 from /etc/resolv.conf
2010/12/10 09:59:57| helperOpenServers: Starting 3 'squidGuard' processes
2010-12-10 09:59:57 [22096] (squidGuard): can't write to logfile /var/log/squidGuard.log
2010-12-10 09:59:57 [22096] New setting: logdir: /var/squidGuard/log
2010-12-10 09:59:57 [22096] New setting: dbhome: /var/db/squidGuard
2010-12-10 09:59:57 [22096] init domainlist /var/db/squidGuard/flv_site/domains
2010-12-10 09:59:57 [22096] loading dbfile /var/db/squidGuard/flv_site/domains.db
2010-12-10 09:59:57 [22096] init expressionlist /var/db/squidGuard/flv_site/expressions
2010-12-10 09:59:57 [22096] init domainlist /var/db/squidGuard/game/domains
2010-12-10 09:59:57 [22096] loading dbfile /var/db/squidGuard/game/domains.db
2010-12-10 09:59:57 [22096] init expressionlist /var/db/squidGuard/game/expressions
2010-12-10 09:59:57 [22096] init domainlist /var/db/squidGuard/bhjy_video/domains
2010-12-10 09:59:57 [22096] loading dbfile /var/db/squidGuard/bhjy_video/domains.db
2010-12-10 09:59:57 [22096] init expressionlist /var/db/squidGuard/taobao/expressions
2010-12-10 09:59:57 [22096] logfile not allowed in acl other than default
2010-12-10 09:59:57 [22096] logfile not allowed in acl other than default
2010-12-10 09:59:57 [22096] logfile not allowed in acl other than default
2010-12-10 09:59:57 [22096] logfile not allowed in acl other than default
2010-12-10 09:59:57 [22096] logfile not allowed in acl other than default
2010-12-10 09:59:57 [22377] (squidGuard): can't write to logfile /var/log/squidGuard.log
2010-12-10 09:59:57 [22377] New setting: logdir: /var/squidGuard/log
2010-12-10 09:59:57 [22377] New setting: dbhome: /var/db/squidGuard
2010-12-10 09:59:57 [22377] init domainlist /var/db/squidGuard/flv_site/domains
2010-12-10 09:59:57 [22377] loading dbfile /var/db/squidGuard/flv_site/domains.db
2010-12-10 09:59:57 [22377] init expressionlist /var/db/squidGuard/flv_site/expressions
2010-12-10 09:59:57 [22377] init domainlist /var/db/squidGuard/game/domains
2010-12-10 09:59:57 [22377] loading dbfile /var/db/squidGuard/game/domains.db
2010-12-10 09:59:57 [22377] init expressionlist /var/db/squidGuard/game/expressions
2010-12-10 09:59:57 [22377] init domainlist /var/db/squidGuard/bhjy_video/domains
2010-12-10 09:59:57 [22377] loading dbfile /var/db/squidGuard/bhjy_video/domains.db
2010-12-10 09:59:57 [22377] init expressionlist /var/db/squidGuard/taobao/expressions
2010-12-10 09:59:57 [22377] logfile not allowed in acl other than default
2010-12-10 09:59:57 [22377] logfile not allowed in acl other than default
2010-12-10 09:59:57 [22377] logfile not allowed in acl other than default
2010-12-10 09:59:57 [22377] logfile not allowed in acl other than default
2010-12-10 09:59:57 [22377] logfile not allowed in acl other than default
2010/12/10 09:59:57| Accepting proxy HTTP connections at 192.168.0.1, port 3128, FD 23.
2010/12/10 09:59:57| Accepting HTCP messages on port 4827, FD 24.
2010/12/10 09:59:57| Accepting SNMP messages on port 3401, FD 25.
2010/12/10 09:59:57| WCCP Disabled.
2010/12/10 09:59:57| Loaded Icons.
2010-12-10 09:59:57 [22479] (squidGuard): can't write to logfile /var/log/squidGuard.log
2010-12-10 09:59:57 [22479] New setting: logdir: /var/squidGuard/log
2010-12-10 09:59:57 [22479] New setting: dbhome: /var/db/squidGuard
2010-12-10 09:59:57 [22479] init domainlist /var/db/squidGuard/flv_site/domains
2010-12-10 09:59:57 [22479] loading dbfile /var/db/squidGuard/flv_site/domains.db
2010-12-10 09:59:57 [22479] init expressionlist /var/db/squidGuard/flv_site/expressions
2010-12-10 09:59:57 [22479] init domainlist /var/db/squidGuard/game/domains
2010-12-10 09:59:57 [22479] loading dbfile /var/db/squidGuard/game/domains.db
2010-12-10 09:59:57 [22479] init expressionlist /var/db/squidGuard/game/expressions
2010-12-10 09:59:57 [22479] init domainlist /var/db/squidGuard/bhjy_video/domains
2010-12-10 09:59:57 [22479] loading dbfile /var/db/squidGuard/bhjy_video/domains.db
2010-12-10 09:59:57 [22479] init expressionlist /var/db/squidGuard/taobao/expressions
2010-12-10 09:59:57 [22479] logfile not allowed in acl other than default
2010-12-10 09:59:57 [22479] logfile not allowed in acl other than default
2010-12-10 09:59:57 [22479] logfile not allowed in acl other than default
2010-12-10 09:59:57 [22479] logfile not allowed in acl other than default
2010-12-10 09:59:57 [22479] logfile not allowed in acl other than default
2010/12/10 09:59:57| Ready to serve requests.

I can't find today's access.log in "/var/squid/log"

jimp · Dec 10, 2010, 3:19 AM

OK, try to reinstall squid now, see if it starts (the gssapi error should be gone I hope)

dr85 · Dec 10, 2010, 4:08 AM

I reinstall squid, it's not work yet.
In /var/squid/log/cache.log

2010/12/10 12:01:29| Reconfiguring Squid Cache (version 2.7.STABLE9)...
2010/12/10 12:01:29| FD 21 Closing HTTP connection
2010/12/10 12:01:29| FD 22 Closing HTTP connection
2010/12/10 12:01:29| FD 23 Closing HTCP socket
2010/12/10 12:01:29| FD 24 Closing SNMP socket
2010/12/10 12:01:29| aioSync: flushing pending I/O operations
2010/12/10 12:01:29| aioSync: done
2010/12/10 12:01:29| logfileClose: closing log /var/squid/log/access.log
2010/12/10 12:01:29| Including Configuration File: /usr/local/etc/squid/squid.conf (depth 0)
2010/12/10 12:01:29| Cache dir '/var/squid/cache' size remains unchanged at 102400 KB
2010/12/10 12:01:29| aclParseAclLine: WARNING: empty ACL: acl throttle_exts urlpath_regex -i "/var/squid/acl/throttle_exts.acl"
2010/12/10 12:01:29| Initialising SSL.
2010/12/10 12:01:29| logfileOpen: opening log /var/squid/log/access.log
2010/12/10 12:01:29| Store logging disabled
2010/12/10 12:01:29| Referer logging is disabled.
2010/12/10 12:01:29| DNS Socket created at 0.0.0.0, port 50855, FD 16
2010/12/10 12:01:29| Adding domain fyschool from /etc/resolv.conf
2010/12/10 12:01:29| Adding nameserver 172.16.0.1 from /etc/resolv.conf
2010/12/10 12:01:29| Adding nameserver 172.16.0.2 from /etc/resolv.conf
2010/12/10 12:01:29| Accepting proxy HTTP connections at 192.168.0.1, port 3128, FD 21.
2010/12/10 12:01:29| Accepting transparently proxied HTTP connections at 127.0.0.1, port 80, FD 22.
2010/12/10 12:01:29| Accepting HTCP messages on port 4827, FD 23.
2010/12/10 12:01:29| Accepting SNMP messages on port 3401, FD 24.
2010/12/10 12:01:29| WCCP Disabled.
2010/12/10 12:01:29| Loaded Icons.
2010/12/10 12:01:29| Ready to serve requests.
2010/12/10 12:01:37| Reconfiguring Squid Cache (version 2.7.STABLE9)...
2010/12/10 12:01:37| FD 21 Closing HTTP connection
2010/12/10 12:01:37| FD 22 Closing HTTP connection
2010/12/10 12:01:37| FD 23 Closing HTCP socket
2010/12/10 12:01:37| FD 24 Closing SNMP socket
2010/12/10 12:01:37| aioSync: flushing pending I/O operations
2010/12/10 12:01:37| aioSync: done
2010/12/10 12:01:37| logfileClose: closing log /var/squid/log/access.log
2010/12/10 12:01:37| Including Configuration File: /usr/local/etc/squid/squid.conf (depth 0)
2010/12/10 12:01:37| Cache dir '/var/squid/cache' size remains unchanged at 102400 KB
2010/12/10 12:01:37| aclParseAclLine: WARNING: empty ACL: acl throttle_exts urlpath_regex -i "/var/squid/acl/throttle_exts.acl"
2010/12/10 12:01:37| Initialising SSL.
2010/12/10 12:01:37| logfileOpen: opening log /var/squid/log/access.log
2010/12/10 12:01:37| Store logging disabled
2010/12/10 12:01:37| Referer logging is disabled.
2010/12/10 12:01:37| DNS Socket created at 0.0.0.0, port 38724, FD 16
2010/12/10 12:01:37| Adding domain fyschool from /etc/resolv.conf
2010/12/10 12:01:37| Adding nameserver 172.16.0.1 from /etc/resolv.conf
2010/12/10 12:01:37| Adding nameserver 172.16.0.2 from /etc/resolv.conf
2010/12/10 12:01:37| Accepting proxy HTTP connections at 192.168.0.1, port 3128, FD 21.
2010/12/10 12:01:37| Accepting HTCP messages on port 4827, FD 22.
2010/12/10 12:01:37| Accepting SNMP messages on port 3401, FD 23.
2010/12/10 12:01:37| WCCP Disabled.
2010/12/10 12:01:37| Loaded Icons.
2010/12/10 12:01:37| Ready to serve requests.
2010/12/10 12:05:14| Reconfiguring Squid Cache (version 2.7.STABLE9)...
2010/12/10 12:05:14| FD 21 Closing HTTP connection
2010/12/10 12:05:14| FD 22 Closing HTCP socket
2010/12/10 12:05:14| FD 23 Closing SNMP socket
2010/12/10 12:05:14| aioSync: flushing pending I/O operations
2010/12/10 12:05:14| aioSync: done
2010/12/10 12:05:14| logfileClose: closing log /var/squid/log/access.log
2010/12/10 12:05:14| Including Configuration File: /usr/local/etc/squid/squid.conf (depth 0)
2010/12/10 12:05:14| Cache dir '/var/squid/cache' size remains unchanged at 102400 KB
2010/12/10 12:05:14| aclParseAclLine: WARNING: empty ACL: acl throttle_exts urlpath_regex -i "/var/squid/acl/throttle_exts.acl"
2010/12/10 12:05:14| Initialising SSL.
2010/12/10 12:05:14| logfileOpen: opening log /var/squid/log/access.log
2010/12/10 12:05:14| Store logging disabled
2010/12/10 12:05:14| Referer logging is disabled.
2010/12/10 12:05:14| DNS Socket created at 0.0.0.0, port 27170, FD 16
2010/12/10 12:05:14| Adding domain fyschool from /etc/resolv.conf
2010/12/10 12:05:14| Adding nameserver 172.16.0.1 from /etc/resolv.conf
2010/12/10 12:05:14| Adding nameserver 172.16.0.2 from /etc/resolv.conf
2010/12/10 12:05:14| Accepting proxy HTTP connections at 192.168.0.1, port 3128, FD 21.
2010/12/10 12:05:14| Accepting HTCP messages on port 4827, FD 22.
2010/12/10 12:05:14| Accepting SNMP messages on port 3401, FD 23.
2010/12/10 12:05:14| WCCP Disabled.
2010/12/10 12:05:14| Loaded Icons.
2010/12/10 12:05:14| Ready to serve requests.
2010/12/10 12:05:24| Reconfiguring Squid Cache (version 2.7.STABLE9)...
2010/12/10 12:05:24| FD 21 Closing HTTP connection
2010/12/10 12:05:24| FD 22 Closing HTCP socket
2010/12/10 12:05:24| FD 23 Closing SNMP socket
2010/12/10 12:05:24| aioSync: flushing pending I/O operations
2010/12/10 12:05:24| aioSync: done
2010/12/10 12:05:24| logfileClose: closing log /var/squid/log/access.log
2010/12/10 12:05:24| Including Configuration File: /usr/local/etc/squid/squid.conf (depth 0)
2010/12/10 12:05:24| Cache dir '/var/squid/cache' size remains unchanged at 102400 KB
2010/12/10 12:05:24| aclParseAclLine: WARNING: empty ACL: acl throttle_exts urlpath_regex -i "/var/squid/acl/throttle_exts.acl"
2010/12/10 12:05:24| Initialising SSL.
2010/12/10 12:05:24| logfileOpen: opening log /var/squid/log/access.log
2010/12/10 12:05:24| Store logging disabled
2010/12/10 12:05:24| Referer logging is disabled.
2010/12/10 12:05:24| DNS Socket created at 0.0.0.0, port 54229, FD 16
2010/12/10 12:05:24| Adding domain fyschool from /etc/resolv.conf
2010/12/10 12:05:24| Adding nameserver 172.16.0.1 from /etc/resolv.conf
2010/12/10 12:05:24| Adding nameserver 172.16.0.2 from /etc/resolv.conf
2010/12/10 12:05:24| Accepting proxy HTTP connections at 192.168.0.1, port 3128, FD 21.
2010/12/10 12:05:24| Accepting transparently proxied HTTP connections at 127.0.0.1, port 80, FD 22.
2010/12/10 12:05:24| Accepting HTCP messages on port 4827, FD 23.
2010/12/10 12:05:24| Accepting SNMP messages on port 3401, FD 24.
2010/12/10 12:05:24| WCCP Disabled.
2010/12/10 12:05:24| Loaded Icons.
2010/12/10 12:05:24| Ready to serve requests.

jimp · Dec 10, 2010, 4:22 AM

That looks like some kind of configuration error


2010/12/10 12:01:37| aclParseAclLine: WARNING: empty ACL: acl throttle_exts urlpath_regex -i "/var/squid/acl/throttle_exts.acl"

Do you have any traffic limits/throttling setup in squid? It's saying there is an empty ACL for throttle extensions.

dr85 · Dec 10, 2010, 4:41 AM

installedpackages config


 <installedpackages><squid><config><active_interface>lan</active_interface>
			<allow_interface>on</allow_interface>
			 <transparent_proxy><private_subnet_proxy_off><defined_ip_proxy_off><defined_ip_proxy_off_dest><log_enabled>on</log_enabled>
			<log_dir>/var/squid/log</log_dir>
			<log_rotate>92</log_rotate>
			<proxy_port>3128</proxy_port>
			 <icp_port><visible_hostname>localhost</visible_hostname>
			<admin_email>admin@localhost</admin_email>
			<error_language>Simplify_Chinese</error_language>
			 <disable_xforward><disable_via><uri_whitespace>strip</uri_whitespace>
			 <dns_nameservers><disable_squidversion></disable_squidversion></dns_nameservers></disable_via></disable_xforward></icp_port></defined_ip_proxy_off_dest></defined_ip_proxy_off></private_subnet_proxy_off></transparent_proxy></config></squid> 
	 <squidcache><config><harddisk_cache_size>0</harddisk_cache_size>
			<harddisk_cache_system>aufs</harddisk_cache_system>
			<harddisk_cache_location>/var/squid/cache</harddisk_cache_location>
			<memory_cache_size>32</memory_cache_size>
			<minimum_object_size>0</minimum_object_size>
			<maximum_object_size>1024</maximum_object_size>
			<level1_subdirs>16</level1_subdirs>
			<memory_replacement_policy>heap LRU</memory_replacement_policy>
			<cache_replacement_policy>heap LFUDA</cache_replacement_policy>
			<cache_swap_low>90</cache_swap_low>
			<cache_swap_high>95</cache_swap_high>
			 <donotcache><enable_offline></enable_offline></donotcache></config></squidcache> 
	 <squidnac><config><allowed_subnets><unrestricted_hosts><banned_hosts><whitelist><blacklist><ext_cachemanager></ext_cachemanager></blacklist></whitelist></banned_hosts></unrestricted_hosts></allowed_subnets></config></squidnac> 

<menu>
		<name>Cron</name>
		<tooltiptext>cron settings.</tooltiptext>
		Services
		<configfile>cron.xml</configfile>
		<url>/packages/cron/cron.php</url>
	</menu>

<menu>
		<name>Proxy server</name>
		<tooltiptext>Modify the proxy server's settings</tooltiptext>
		Services
		<url>/pkg_edit.php?xml=squid.xml&id=0</url>
	</menu>

 <package><package><name>Cron</name>
		 <website><category>Services</category>
		 <pkginfolink><config_file>http://www.pfsense.com/packages/config/cron/cron.xml</config_file>
		<depends_on_package_base_url>http://files.pfsense.org/packages/8/All/</depends_on_package_base_url>
		<version>0.1.5</version>
		<status>Beta</status>
		<required_version>1.2</required_version>
		<maintainer>markjcrane@gmail.com</maintainer>
		<configurationfile>cron.xml</configurationfile></pkginfolink></website></package> 
	 <package><name>squid</name>

		<website>http://www.squid-cache.org/</website>
		<category>Network</category>
		<version>2.7.9_4</version>
		<status>Stable</status>
		<required_version>2</required_version>
		<maintainer>fernando@netfilter.com.br seth.mos@xs4all.nl mfuchs77@googlemail.com jimp@pfsense.org</maintainer>
		<depends_on_package_base_url>http://files.pfsense.org/packages/8/All/</depends_on_package_base_url>
		<depends_on_package>squid-2.7.9.tbz</depends_on_package>
		<depends_on_package>squid_radius_auth-1.10.tbz</depends_on_package>
		<depends_on_package>libwww-5.4.0_4.tbz</depends_on_package>
		<build_port_path>/usr/ports/www/squid</build_port_path>
		<build_port_path>/usr/ports/www/squid_radius_auth</build_port_path>
		<build_port_path>/usr/ports/www/libwww</build_port_path>
		<build_options>WITH_SQUID_KERB_AUTH=true WITH_SQUID_LDAP_AUTH=true WITH_SQUID_NIS_AUTH=true WITH_SQUID_SASL_AUTH=true WITH_SQUID_DELAY_POOLS=true WITH_SQUID_SNMP=true WITH_SQUID_CARP=true WITH_SQUID_SSL=true WITHOUT_SQUID_PINGER=true WITHOUT_SQUID_DNS_HELPER=true WITH_SQUID_HTCP=true WITH_SQUID_VIA_DB=true WITH_SQUID_CACHE_DIGESTS=true WITH_SQUID_WCCP=true WITHOUT_SQUID_WCCPV2=true WITHOUT_SQUID_STRICT_HTTP=true WITH_SQUID_IDENT=true WITH_SQUID_REFERER_LOG=true WITHOUT_SQUID_USERAGENT_LOG=true WITH_SQUID_ARP_ACL=true WITH_SQUID_PF=true WITHOUT_SQUID_IPFILTER=true WITH_SQUID_FOLLOW_XFF=true WITH_SQUID_AUFS=true WITH_SQUID_COSS=true WITH_SQUID_KQUEUE=true WITH_SQUID_LARGEFILE=true WITHOUT_SQUID_STACKTRACES=true</build_options>
		<config_file>http://www.pfsense.org/packages/config/squid/squid.xml</config_file>
		<configurationfile>squid.xml</configurationfile></package> 
	 <service><name>cron</name>
		<rcfile>cron.sh</rcfile>
		<executable>cron</executable></service> 
	 <service><name>squid</name>
		<rcfile>squid.sh</rcfile>
		<executable>squid</executable></service> 
	 <squidguardlog><config><logtype>block_log</logtype></config></squidguardlog> 
	 <squidtraffic><config><max_download_size>0</max_download_size>
			<max_upload_size>0</max_upload_size>
			<overall_throttling>0</overall_throttling>
			<perhost_throttling>0</perhost_throttling>
			<throttle_specific>on</throttle_specific>
			 <throttle_binaries><throttle_cdimages><throttle_multimedia><throttle_others><quick_abort_min>0</quick_abort_min>
			<quick_abort_max>0</quick_abort_max>
			<quick_abort_pct>0</quick_abort_pct></throttle_others></throttle_multimedia></throttle_cdimages></throttle_binaries></config></squidtraffic> 
	 <tab></tab></package></installedpackages>

jimp · Dec 10, 2010, 5:02 AM

You have "Throttle only specific extensions" checked but no extensions listed. Uncheck that, save, and then see if it starts.

dr85 · Dec 10, 2010, 5:29 AM

I modify the /conf/config.xml set it to off,reboot the pfsense.
It's not work it.

jimp · Dec 10, 2010, 6:12 AM

Just delete the whole <squidtraffic>…</squidtraffic> section.

Nachtfalke · Dec 10, 2010, 7:00 AM

Hi,

updated tomorrow to latest Snapshot Dec 9 13:xx x86.

Removing package...
	Starting package deletion for squid-2.7.9...done.
	Starting package deletion for squid_radius_auth-1.10...done.
	Starting package deletion for libwww-5.4.0_4...done.
Removing squid components...
	Tabs items... done.
	Menu items... done.
	Services... done.
Loading package instructions...
	Deinstall commands... done.
	Removing package instructions...done.
	Auxiliary files... done.
	Package XML... done.
	Configuration... done.
Beginning package installation for squid...
Downloading package configuration file... done.
Saving updated package information... done.
Downloading squid and its dependencies... 
Checking for package installation... 
libwww-5.4.0_4  (extracting)
openssl-1.0.0_4 already installed.Loading package configuration... failed!

Installation aborted.Removing package...
	Starting package deletion for squid-2.7.9...done.
	Starting package deletion for openssl-1.0...done.
	Starting package deletion for cyrus-sasl-2.1...done.
	Starting package deletion for openssl-1.0...done.
	Starting package deletion for openldap-client-2.4...done.
	Starting package deletion for openssl-1.0...done.
	Starting package deletion for perl-5.10...done.
	Starting package deletion for squid_radius_auth-1.10...done.
	Starting package deletion for libwww-5.4.0_4...done.
	Starting package deletion for openssl-1.0...done.
Removing squid components...
	Configuration... done.
Failed to install package.

All packages reinstalled.

SQUID wasn't installed but lightsquid was when I look at System -> Packages. Internet connection works.

After going to System - Packages and installing SQUID it should be installed ok.

Installation of squid completed.
Beginning package installation for squid...
Downloading package configuration file... done.
Saving updated package information... done.
Downloading squid and its dependencies... 
Checking for package installation... 
libwww-5.4.0_4  (extracting)
openssl-1.0.0_4 already installed.
Loading package configuration... done.
	Configuring package components...
	Additional files... done.
Loading package instructions...
	Menu items... done.
	Integrated Tab items... done.
	Services... done.
Custom commands...
	Executing custom_php_install_command()...done.
	Executing custom_php_resync_config_command()...done.
Writing configuration... done.
Starting service.

Installation completed.   Please check to make sure that the package is configured from the respective menu then start the package.

Now it is not possible from a Client to browse the internet, but I can do a ping to 8.8.8.8 AND I cand do a ping to www.google.com from Windows cmd.
Further the pfSense is able to check for latest snapshot and tells me "You are on latest version"

Just a short explaination:

WAN1 –
---pfSense1 (LoadBalancing) ---- pfSense2 (SQUID, Lightsquid) ----- Clients
WAN2 --/

Ping from the clients to www.google.com or 8.8.8.8 works if SQUID is enabled or disabled.
pfSense2 could get snapshot update information if SQUID is enabled or not
Clients could go to webGUI of pfSense1 if SQUID is enabled or not
Clients could ONLY browse the web, IF SQUID is NOT activated.

Part of my syslog:

12-10-2010	08:00:03	Cron.Info	pfsense2.localdomain	Dec 10 08:00:01 /usr/sbin/cron[54807]: (root) CMD (/usr/bin/nice -n20 newsyslog)
12-10-2010	08:00:03	Cron.Info	pfsense2.localdomain	Dec 10 08:00:01 /usr/sbin/cron[54772]: (root) CMD (/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 sshlockout)
12-10-2010	08:00:03	Cron.Info	pfsense2.localdomain	Dec 10 08:00:01 /usr/sbin/cron[54753]: (root) CMD (/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 virusprot)
12-10-2010	08:00:03	Cron.Info	pfsense2.localdomain	Dec 10 08:00:01 /usr/sbin/cron[54697]: (root) CMD (/usr/bin/perl /usr/local/www/lightsquid/lightparser.pl today)
12-10-2010	08:00:02	Cron.Info	pfsense1.localdomain	Dec 10 08:00:00 /usr/sbin/cron[55187]: (root) CMD (/usr/bin/nice -n20 newsyslog)
12-10-2010	08:00:02	Cron.Info	pfsense1.localdomain	Dec 10 08:00:00 /usr/sbin/cron[54969]: (root) CMD (/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 sshlockout)
12-10-2010	08:00:02	Cron.Info	pfsense1.localdomain	Dec 10 08:00:00 /usr/sbin/cron[54801]: (root) CMD (/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 virusprot)
12-10-2010	07:55:36	User.Warning	pfsense2.localdomain	Dec 10 07:55:34 php: : There was an error while parsing the package filter rules for /usr/local/pkg/squid.inc.
12-10-2010	07:55:36	User.Warning	pfsense2.localdomain	Dec 10 07:55:34 php: : There was an error while parsing the package filter rules for /usr/local/pkg/squid.inc.
12-10-2010	07:55:36	User.Warning	pfsense2.localdomain	Dec 10 07:55:34 php: : The command '/sbin/pfctl -nf /tmp/rules.test.packages' returned exit code '1', the output was '/tmp/rules.test.packages:17: syntax error /tmp/rules.test.packages:18: syntax error' 
12-10-2010	07:55:36	User.Warning	pfsense2.localdomain	Dec 10 07:55:34 php: : The command '/sbin/pfctl -nf /tmp/rules.test.packages' returned exit code '1', the output was '/tmp/rules.test.packages:17: syntax error /tmp/rules.test.packages:18: syntax error' 
12-10-2010	07:55:36	User.Warning	pfsense2.localdomain	Dec 10 07:55:34 php: : There was an error while parsing the package filter rules for /usr/local/pkg/squid.inc.
12-10-2010	07:55:36	User.Warning	pfsense2.localdomain	Dec 10 07:55:34 php: : There was an error while parsing the package filter rules for /usr/local/pkg/squid.inc.
12-10-2010	07:55:36	User.Warning	pfsense2.localdomain	Dec 10 07:55:34 php: : The command '/sbin/pfctl -nf /tmp/rules.test.packages' returned exit code '1', the output was '/tmp/rules.test.packages:18: syntax error /tmp/rules.test.packages:19: syntax error' 
12-10-2010	07:55:36	User.Warning	pfsense2.localdomain	Dec 10 07:55:34 php: : The command '/sbin/pfctl -nf /tmp/rules.test.packages' returned exit code '1', the output was '/tmp/rules.test.packages:18: syntax error /tmp/rules.test.packages:19: syntax error' 
12-10-2010	07:55:35	User.Notice	pfsense2.localdomain	Dec 10 07:55:33 check_reload_status: reloading filter
12-10-2010	07:55:35	User.Notice	pfsense2.localdomain	Dec 10 07:55:33 check_reload_status: reloading filter
12-10-2010	07:55:35	User.Warning	pfsense2.localdomain	Dec 10 07:55:33 php: /pkg_edit.php: Reloading Squid for configuration sync
12-10-2010	07:55:35	User.Warning	pfsense2.localdomain	Dec 10 07:55:33 php: /pkg_edit.php: Reloading Squid for configuration sync
12-10-2010	07:54:54	User.Warning	pfsense2.localdomain	Dec 10 07:54:52 php: : There was an error while parsing the package filter rules for /usr/local/pkg/squid.inc.
12-10-2010	07:54:54	User.Warning	pfsense2.localdomain	Dec 10 07:54:52 php: : There was an error while parsing the package filter rules for /usr/local/pkg/squid.inc.
12-10-2010	07:54:54	User.Warning	pfsense2.localdomain	Dec 10 07:54:52 php: : The command '/sbin/pfctl -nf /tmp/rules.test.packages' returned exit code '1', the output was '/tmp/rules.test.packages:17: syntax error /tmp/rules.test.packages:18: syntax error' 
12-10-2010	07:54:54	User.Warning	pfsense2.localdomain	Dec 10 07:54:52 php: : The command '/sbin/pfctl -nf /tmp/rules.test.packages' returned exit code '1', the output was '/tmp/rules.test.packages:17: syntax error /tmp/rules.test.packages:18: syntax error' 
12-10-2010	07:54:53	User.Warning	pfsense2.localdomain	Dec 10 07:54:50 php: : There was an error while parsing the package filter rules for /usr/local/pkg/squid.inc.
12-10-2010	07:54:53	User.Warning	pfsense2.localdomain	Dec 10 07:54:50 php: : There was an error while parsing the package filter rules for /usr/local/pkg/squid.inc.
12-10-2010	07:54:52	User.Warning	pfsense2.localdomain	Dec 10 07:54:50 php: : The command '/sbin/pfctl -nf /tmp/rules.test.packages' returned exit code '1', the output was '/tmp/rules.test.packages:18: syntax error /tmp/rules.test.packages:19: syntax error' 
12-10-2010	07:54:52	User.Warning	pfsense2.localdomain	Dec 10 07:54:50 php: : The command '/sbin/pfctl -nf /tmp/rules.test.packages' returned exit code '1', the output was '/tmp/rules.test.packages:18: syntax error /tmp/rules.test.packages:19: syntax error' 
12-10-2010	07:54:50	User.Warning	pfsense2.localdomain	Dec 10 07:54:47 php: : There was an error while parsing the package filter rules for /usr/local/pkg/squid.inc.
12-10-2010	07:54:50	User.Warning	pfsense2.localdomain	Dec 10 07:54:47 php: : There was an error while parsing the package filter rules for /usr/local/pkg/squid.inc.
12-10-2010	07:54:50	User.Warning	pfsense2.localdomain	Dec 10 07:54:47 php: : The command '/sbin/pfctl -nf /tmp/rules.test.packages' returned exit code '1', the output was '/tmp/rules.test.packages:17: syntax error /tmp/rules.test.packages:18: syntax error' 
12-10-2010	07:54:50	User.Warning	pfsense2.localdomain	Dec 10 07:54:47 php: : The command '/sbin/pfctl -nf /tmp/rules.test.packages' returned exit code '1', the output was '/tmp/rules.test.packages:17: syntax error /tmp/rules.test.packages:18: syntax error' 
12-10-2010	07:54:48	User.Warning	pfsense2.localdomain	Dec 10 07:54:46 php: : There was an error while parsing the package filter rules for /usr/local/pkg/squid.inc.
12-10-2010	07:54:48	User.Warning	pfsense2.localdomain	Dec 10 07:54:46 php: : There was an error while parsing the package filter rules for /usr/local/pkg/squid.inc.
12-10-2010	07:54:48	User.Warning	pfsense2.localdomain	Dec 10 07:54:46 php: : The command '/sbin/pfctl -nf /tmp/rules.test.packages' returned exit code '1', the output was '/tmp/rules.test.packages:18: syntax error /tmp/rules.test.packages:19: syntax error' 
12-10-2010	07:54:48	User.Warning	pfsense2.localdomain	Dec 10 07:54:46 php: : The command '/sbin/pfctl -nf /tmp/rules.test.packages' returned exit code '1', the output was '/tmp/rules.test.packages:18: syntax error /tmp/rules.test.packages:19: syntax error' 
12-10-2010	07:54:34	User.Notice	pfsense2.localdomain	Dec 10 07:54:32 check_reload_status: reloading filter

Hope this helps in a way…