Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Squidguard problem after new install

    Scheduled Pinned Locked Moved pfSense Packages
    20 Posts 8 Posters 8.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      andreadg88
      last edited by

      I have the same problem on two server, please post the precedent version in the packages area.

      1 Reply Last reply Reply Quote 0
      • D
        dvserg
        last edited by

        Configure you packages. See logs.

        SquidGuardDoc EN  RU Tutorial
        Localization ru_PFSense

        1 Reply Last reply Reply Quote 0
        • J
          joviscomp
          last edited by

          Do i have to install other packages? i only have two packages installed.squid and squidguard.

          1 Reply Last reply Reply Quote 0
          • J
            joviscomp
            last edited by

            i have reinstalled squidguard and configured. still it wont start. here are the logs..

            Mar 30 21:38:07 squid[7728]: Squid Parent: child process 7730 exited due to signal 6
            Mar 30 21:38:10 squid[7728]: Squid Parent: child process 16557 started
            Mar 30 21:38:11 squid[16557]: The url_rewriter helpers are crashing too rapidly, need help!
            Mar 30 21:38:11 kernel: pid 16557 (squid), uid 62: exited on signal 6
            Mar 30 21:38:11 squid[7728]: Squid Parent: child process 16557 exited due to signal 6
            Mar 30 21:38:11 check_reload_status: reloading filter
            Mar 30 21:38:14 squid[7728]: Squid Parent: child process 16645 started
            Mar 30 21:38:14 squid[16645]: The url_rewriter helpers are crashing too rapidly, need help!
            Mar 30 21:38:14 kernel: pid 16645 (squid), uid 62: exited on signal 6
            Mar 30 21:38:14 squid[7728]: Squid Parent: child process 16645 exited due to signal 6
            Mar 30 21:38:17 squid[7728]: Squid Parent: child process 16652 started
            Mar 30 21:38:17 squid[16652]: The url_rewriter helpers are crashing too rapidly, need help!
            Mar 30 21:38:17 kernel: pid 16652 (squid), uid 62: exited on signal 6
            Mar 30 21:38:17 squid[7728]: Squid Parent: child process 16652 exited due to signal 6
            Mar 30 21:38:20 squid[7728]: Squid Parent: child process 16658 started
            Mar 30 21:38:21 squid[16658]: The url_rewriter helpers are crashing too rapidly, need help!
            Mar 30 21:38:21 kernel: pid 16658 (squid), uid 62: exited on signal 6
            Mar 30 21:38:21 squid[7728]: Squid Parent: child process 16658 exited due to signal 6
            Mar 30 21:38:24 squid[7728]: Squid Parent: child process 16678 started
            Mar 30 21:38:24 squid[16678]: The url_rewriter helpers are crashing too rapidly, need help!
            Mar 30 21:38:24 kernel: pid 16678 (squid), uid 62: exited on signal 6
            Mar 30 21:38:24 squid[7728]: Squid Parent: child process 16678 exited due to signal 6
            Mar 30 21:38:24 squid[7728]: Exiting due to repeated, frequent failures

            1 Reply Last reply Reply Quote 0
            • A
              andreadg88
              last edited by

              In the SQUID Package i've only this setting and transparent proxy:

              redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf;redirector_bypass on;redirect_children 3

              and this is the squidGuard.conf

              
# ============================================================
# SquidGuard configuration file
# This file generated automaticly with SquidGuard configurator
# (C)2006 Serg Dvoriancev
# email: dv_serg@mail.ru
# ============================================================

logdir /var/squidGuard/log
dbhome /var/db/squidGuard

# Url BlackList
dest URL_Blacklist {
        domainlist URL_Blacklist/domains
        urllist URL_Blacklist/urls
        redirect http://192.168.1.1:80/sgerror.php?url=403%20La%20visione%20dei%
20video%20non%20e%27%20permessa&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u
}

#
rew safesearch {
        s@(google\..*/search?.*q=.*)@\1\&safe=active@i
        s@(google\..*/images.*q=.*)@\1\&safe=active@i
        s@(google\..*/groups.*q=.*)@\1\&safe=active@i
        s@(google\..*/news.*q=.*)@\1\&safe=active@i
        s@(yandex\..*/yandsearch?.*text=.*)@\1\&fyandex=1@i
        s@(search\.yahoo\..*/search.*p=.*)@\1\&vm=r&v=1@i
        s@(search\.live\..*/.*q=.*)@\1\&adlt=strict@i
        s@(search\.msn\..*/.*q=.*)@\1\&adlt=strict@i
        s@(\.bing\..*/.*q=.*)@\1\&adlt=strict@i
}

#
acl  {
        #
        default  {
                pass URL_Blacklist all
                redirect http://192.168.1.1:80/sgerror.php?url=403%20&a=%a&n=%n&
i=%i&s=%s&t=%t&u=%u
        }
}
dest URL_Blacklist {
        domainlist URL_Blacklist/domains
        urllist URL_Blacklist/urls
        redirect http://192.168.1.1:80/sgerror.php?url=403%20La%20visione%20dei%20video%20no
n%20e%27%20permessa&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u
}

#
rew safesearch {
        s@(google\..*/search?.*q=.*)@\1\&safe=active@i
        s@(google\..*/images.*q=.*)@\1\&safe=active@i
        s@(google\..*/groups.*q=.*)@\1\&safe=active@i
        s@(google\..*/news.*q=.*)@\1\&safe=active@i
        s@(yandex\..*/yandsearch?.*text=.*)@\1\&fyandex=1@i
        s@(search\.yahoo\..*/search.*p=.*)@\1\&vm=r&v=1@i
        s@(search\.live\..*/.*q=.*)@\1\&adlt=strict@i
        s@(search\.msn\..*/.*q=.*)@\1\&adlt=strict@i
        s@(\.bing\..*/.*q=.*)@\1\&adlt=strict@i
}

#
acl  {
        #
        default  {
                pass URL_Blacklist all
                redirect http://192.168.1.1:80/sgerror.php?url=403%20&a=%a&n=%n&i=%i&s=%s&t=
%t&u=%u
        }
}

              In the logs, there aren't any reference to the problem…

              Mar 30 15:41:23 	squid[59702]: Squid Parent: child process 59894 exited due to signal 6
Mar 30 15:41:23 	kernel: pid 59894 (squid), uid 62: exited on signal 6
Mar 30 15:41:23 	squid[59894]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:41:23 	squid[59702]: Squid Parent: child process 59894 started
Mar 30 15:41:22 	check_reload_status: reloading filter
Mar 30 15:41:22 	php: /pkg_edit.php: Reloading Squid for configuration sync
Mar 30 15:41:20 	squid[59702]: Squid Parent: child process 59704 exited due to signal 6
Mar 30 15:41:20 	kernel: pid 59704 (squid), uid 62: exited on signal 6
Mar 30 15:41:20 	squid[59704]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:41:19 	squid[59702]: Squid Parent: child process 59704 started
Mar 30 15:41:19 	php: /pkg_edit.php: Starting Squid
Mar 30 15:41:01 	squid[59460]: Exiting due to repeated, frequent failures
Mar 30 15:41:01 	squid[59460]: Squid Parent: child process 59614 exited due to signal 6
Mar 30 15:41:01 	kernel: pid 59614 (squid), uid 62: exited on signal 6
Mar 30 15:41:01 	squid[59614]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:41:00 	squid[59460]: Squid Parent: child process 59614 started
Mar 30 15:40:57 	squid[59460]: Squid Parent: child process 59607 exited due to signal 6
Mar 30 15:40:57 	kernel: pid 59607 (squid), uid 62: exited on signal 6
Mar 30 15:40:57 	squid[59607]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:40:57 	squid[59460]: Squid Parent: child process 59607 started
Mar 30 15:40:54 	squid[59460]: Squid Parent: child process 59601 exited due to signal 6
Mar 30 15:40:54 	kernel: pid 59601 (squid), uid 62: exited on signal 6
Mar 30 15:40:54 	squid[59601]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:40:54 	squid[59460]: Squid Parent: child process 59601 started
Mar 30 15:40:51 	check_reload_status: reloading filter
Mar 30 15:40:51 	squid[59460]: Squid Parent: child process 59518 exited due to signal 6
Mar 30 15:40:51 	kernel: pid 59518 (squid), uid 62: exited on signal 6
Mar 30 15:40:51 	squid[59518]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:40:51 	squid[59460]: Squid Parent: child process 59518 started
Mar 30 15:40:47 	squid[59460]: Squid Parent: child process 59463 exited due to signal 6
Mar 30 15:40:47 	kernel: pid 59463 (squid), uid 62: exited on signal 6
Mar 30 15:40:47 	squid[59463]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:40:47 	squid[59460]: Squid Parent: child process 59463 started
Mar 30 15:40:47 	php: /pkg_edit.php: Starting Squid
              1 Reply Last reply Reply Quote 0
              • J
                joviscomp
                last edited by

                here is my proxy filter log

                Do not edit manually !

                http_port 192.168.143.1:3128
                http_port 127.0.0.1:80 transparent
                icp_port 0

                pid_filename /var/run/squid.pid
                cache_effective_user proxy
                cache_effective_group proxy
                error_directory /usr/local/etc/squid/errors/English
                icon_directory /usr/local/etc/squid/icons
                visible_hostname GameLab
                cache_mgr GameLab@odiongan.net
                access_log /dev/null
                cache_log /var/squid/logs/cache.log
                cache_store_log none
                logfile_rotate 2
                shutdown_lifetime 3 seconds

                Allow local network(s) on interface(s)

                acl localnet src  192.168.143.0/255.255.255.0
                uri_whitespace strip

                cache_mem 2000 MB
                maximum_object_size_in_memory 32 KB
                memory_replacement_policy heap GDSF
                cache_replacement_policy heap LFUDA
                cache_dir ufs /var/squid/cache 100000 16 256
                minimum_object_size 0 KB
                maximum_object_size 200000 KB
                offline_mode off
                cache_swap_low 90
                cache_swap_high 95

                No redirector configured

                Setup some default acls

                acl all src 0.0.0.0/0.0.0.0
                acl localhost src 127.0.0.1/255.255.255.255
                acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901  3128 1025-65535
                acl sslports port 443 563 
                acl manager proto cache_object
                acl purge method PURGE
                acl connect method CONNECT
                acl dynamic urlpath_regex cgi-bin ?
                acl blacklist dstdom_regex -i '/var/squid/acl/blacklist.acl'
                cache deny dynamic
                http_access allow manager localhost

                http_access deny manager
                http_access allow purge localhost
                http_access deny purge
                http_access deny !safeports
                http_access deny CONNECT !sslports

                Always allow localhost connections

                http_access allow localhost

                request_body_max_size 0 KB
                reply_body_max_size 0 deny all
                delay_pools 1
                delay_class 1 2
                delay_parameters 1 -1/-1 -1/-1
                delay_initial_bucket_level 100
                delay_access 1 allow all

                Block access to blacklist domains

                http_access deny blacklist

                Setup allowed acls

                Allow local network(s) on interface(s)

                http_access allow localnet

                Default block all to be sure

                http_access deny all

                1 Reply Last reply Reply Quote 0
                • D
                  dvserg
                  last edited by

                  What a pfSense installation type you use (nanoBSD / HDD installation)

                  SquidGuardDoc EN  RU Tutorial
                  Localization ru_PFSense

                  1 Reply Last reply Reply Quote 0
                  • A
                    abbetech
                    last edited by

                    I was having the same problem.  I updated to 2.0 rc1, reinstalled packages, then rebooted.  Now squidguard is running.

                    1 Reply Last reply Reply Quote 0
                    • NetViciousN
                      NetVicious
                      last edited by

                      Here are my two cents ;-)

                      The problem it's when squid tries to run the squidguard slaves:
                      [root@pfsense:/root]# /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf
                      /libexec/ld-elf.so.1: Shared object "libldap-2.4.so.8" not found, required by "squidGuard"

                      So we need the libldap-2.4.so.8

                      I did a pkg_info and I saw two openldap packages, I pkg_deleted both of them and installed the last package on http://files.pfsense.org/packages/7/All/

                      pkg_add -r http://files.pfsense.org/packages/7/All/openldap-client-2.4.23.tbz

                      But it seems this package doesn't installs the libldap-2.4.so.8, it installs libldap-2.4.so.7 so I created a symlink:

                      [root@pfsense:~]# cd /usr/local/lib
                      [root@pfsense:~]# ln -s libldap-2.4.so.7 libldap-2.4.so.8

                      [root@pfsense:/usr/local/lib]# ls -la libldap*
                      lrwxr-xr-x 1 root wheel     16 Feb  2  2007 libldap-2.3.so -> libldap-2.3.so.2
                      -rw-r–r-- 1 root wheel 215171 Feb  2  2007 libldap-2.3.so.2
                      lrwxr-xr-x 1 root wheel     16 Jul 25  2010 libldap-2.4.so -> libldap-2.4.so.7
                      -rw-r--r-- 1 root wheel 279350 Jul 25  2010 libldap-2.4.so.7
                      lrwxr-xr-x 1 root wheel     16 Mar 30 17:49 libldap-2.4.so.8 -> libldap-2.4.so.7
                      -rw-r–r-- 1 root wheel 334522 Jul 25  2010 libldap.a
                      -rw-r--r-- 1 root wheel    984 Jul 25  2010 libldap.la
                      lrwxr-xr-x 1 root wheel     16 Jul 25  2010 libldap.so -> libldap-2.4.so.7
                      lrwxr-xr-x 1 root wheel     18 Feb  2  2007 libldap_r-2.3.so -> libldap_r-2.3.so.2
                      -rw-r--r-- 1 root wheel 236440 Feb  2  2007 libldap_r-2.3.so.2
                      lrwxr-xr-x 1 root wheel     18 Jul 25  2010 libldap_r-2.4.so -> libldap_r-2.4.so.7
                      -rw-r--r-- 1 root wheel 301942 Jul 25  2010 libldap_r-2.4.so.7
                      -rw-r--r-- 1 root wheel 369342 Jul 25  2010 libldap_r.a
                      -rw-r--r-- 1 root wheel   1016 Jul 25  2010 libldap_r.la
                      lrwxr-xr-x 1 root wheel     18 Jul 25  2010 libldap_r.so -> libldap_r-2.4.so.7

                      Please give feedback, and if someone knows where to download the tbz with the correct library leave a link.

                      Regards from Spain.

                      ..//\/ e t . \/ i c i o u s ..

                      1 Reply Last reply Reply Quote 0
                      • O
                        orion182
                        last edited by

                        i try

                        pkg_add -r ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7-stable/Latest/openldap24-client.tbz

                        and seems it working ok.

                        This package is version 2.4.24 and libldap-2.4.so.8 is instaled.

                        1 Reply Last reply Reply Quote 0
                        • J
                          joviscomp
                          last edited by

                          thanks guys..you are all a big help..it worked already…

                          i installed
                          http://files.pfsense.org/packages/7/All/openldap-sasl-client-2.4.25_1.tbz

                          squidguard is up now..thanks..

                          1 Reply Last reply Reply Quote 0
                          • NetViciousN
                            NetVicious
                            last edited by

                            Perfect. The 2.4.25 package was not on the server yesterday. Now it installs the libldap-2.4.so.8.

                            Thanks guys.

                            ..//\/ e t . \/ i c i o u s ..

                            1 Reply Last reply Reply Quote 0
                            • A
                              andreadg88
                              last edited by

                              @joviscomp:

                              thanks guys..you are all a big help..it worked already…

                              i installed
                              http://files.pfsense.org/packages/7/All/openldap-sasl-client-2.4.25_1.tbz

                              squidguard is up now..thanks..

                              I've installed them, but squidguard not start, now i've test it with symlink:

                              ln -s libldap-2.4.so.7 libldap-2.4.so.8

                              now it works…

                              1 Reply Last reply Reply Quote 0
                              • NetViciousN
                                NetVicious
                                last edited by

                                andreadg88: Very strange, because the 2.4.25 seems to install the correct library.

                                Paste here the result of:

                                pkg_info
                                ls -la /usr/local/lib/libldap*

                                ..//\/ e t . \/ i c i o u s ..

                                1 Reply Last reply Reply Quote 0
                                • A
                                  andreadg88
                                  last edited by

                                  here the output of shell…

                                  it's very strange  ???

                                  
# pkg_info
cyrus-sasl-2.1.23   RFC 2222 SASL (Simple Authentication and Security Layer)
cyrus-sasl-2.1.23_3 RFC 2222 SASL (Simple Authentication and Security Layer)
db3-3.3.11_3,1      The Berkeley DB package, revision 3.3
gd-2.0.35,1         A graphics library for fast creation of images
jpeg-6b_4           IJG's jpeg compression utilities
lightsquid-1.7.1_1  A light and fast web based squid proxy traffic analyser
openldap-sasl-client-2.4.25_1 Open source LDAP client implementation with SASL2 support
p5-GD-2.39          A perl5 interface to Gd Graphics Library version2
perl-5.10.1_3       Practical Extraction and Report Language
perl-5.8.8_1        Practical Extraction and Report Language
squid-2.7.9         HTTP Caching Proxy
squidGuard-1.4_3    A fast redirector for squid
squid_radius_auth-1.10 RADIUS authenticator for squid proxy 2.5 and later


                                  
# ls -la /usr/local/lib/libldap*
lrwxr-xr-x  1 root  wheel      16 Mar 29 21:37 /usr/local/lib/libldap-2.4.so -> libldap-2.4.so.8
-rwxr-xr-x  1 root  wheel  264819 Jan  9  2009 /usr/local/lib/libldap-2.4.so.3
-rw-r--r--  1 root  wheel  299327 Mar 29 21:37 /usr/local/lib/libldap-2.4.so.8
-rw-r--r--  1 root  wheel  360528 Mar 29 21:37 /usr/local/lib/libldap.a
-rw-r--r--  1 root  wheel    1006 Mar 29 21:37 /usr/local/lib/libldap.la
lrwxr-xr-x  1 root  wheel      16 Mar 29 21:37 /usr/local/lib/libldap.so -> libldap-2.4.so.8
lrwxr-xr-x  1 root  wheel      18 Mar 29 21:37 /usr/local/lib/libldap_r-2.4.so -> libldap_r-2.4.so.8
-rw-r--r--  1 root  wheel  327982 Mar 29 21:37 /usr/local/lib/libldap_r-2.4.so.8
-rw-r--r--  1 root  wheel  397856 Mar 29 21:37 /usr/local/lib/libldap_r.a
-rw-r--r--  1 root  wheel    1029 Mar 29 21:37 /usr/local/lib/libldap_r.la
lrwxr-xr-x  1 root  wheel      18 Mar 29 21:37 /usr/local/lib/libldap_r.so -> libldap_r-2.4.so.8
                                  1 Reply Last reply Reply Quote 0
                                  • NetViciousN
                                    NetVicious
                                    last edited by

                                    Try to run the squidguard manually from the shell and paste here the error it should show to you:

                                    /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf

                                    ..//\/ e t . \/ i c i o u s ..

                                    1 Reply Last reply Reply Quote 0
                                    • R
                                      rootchick
                                      last edited by

                                      I had the same problem after updating squidGuard, and solved it with this:

                                      
pkg_delete openldap-client\*
pkg_add -r ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7-stable/Latest/openldap24-client.tbz

                                      The dependencies should be updated or something.  This shouldn't happen when upgrading a package on a stable version.

                                      1 Reply Last reply Reply Quote 0
                                      • jimpJ
                                        jimp Rebel Alliance Developer Netgate
                                        last edited by

                                        The dependencies were updated, the problem is that some people who already had the older ldap version need to reinstall both squid and squidGuard, and occasionally need to pkg_delete squid* openldap* and then reinstall.

                                        OpenLDAP had a shared library version bump.

                                        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                                        Need help fast? Netgate Global Support!

                                        Do not Chat/PM for help!

                                        1 Reply Last reply Reply Quote 0
                                        • R
                                          rootchick
                                          last edited by

                                          Thanks, good to know.  I had only updated squidGuard and nothing else.

                                          1 Reply Last reply Reply Quote 0
                                          • First post
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.