Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Squidguard problem after new install

    Scheduled Pinned Locked Moved pfSense Packages
    20 Posts 8 Posters 8.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      joviscomp
      last edited by

      Do i have to install other packages? i only have two packages installed.squid and squidguard.

      1 Reply Last reply Reply Quote 0
      • J
        joviscomp
        last edited by

        i have reinstalled squidguard and configured. still it wont start. here are the logs..

        Mar 30 21:38:07 squid[7728]: Squid Parent: child process 7730 exited due to signal 6
        Mar 30 21:38:10 squid[7728]: Squid Parent: child process 16557 started
        Mar 30 21:38:11 squid[16557]: The url_rewriter helpers are crashing too rapidly, need help!
        Mar 30 21:38:11 kernel: pid 16557 (squid), uid 62: exited on signal 6
        Mar 30 21:38:11 squid[7728]: Squid Parent: child process 16557 exited due to signal 6
        Mar 30 21:38:11 check_reload_status: reloading filter
        Mar 30 21:38:14 squid[7728]: Squid Parent: child process 16645 started
        Mar 30 21:38:14 squid[16645]: The url_rewriter helpers are crashing too rapidly, need help!
        Mar 30 21:38:14 kernel: pid 16645 (squid), uid 62: exited on signal 6
        Mar 30 21:38:14 squid[7728]: Squid Parent: child process 16645 exited due to signal 6
        Mar 30 21:38:17 squid[7728]: Squid Parent: child process 16652 started
        Mar 30 21:38:17 squid[16652]: The url_rewriter helpers are crashing too rapidly, need help!
        Mar 30 21:38:17 kernel: pid 16652 (squid), uid 62: exited on signal 6
        Mar 30 21:38:17 squid[7728]: Squid Parent: child process 16652 exited due to signal 6
        Mar 30 21:38:20 squid[7728]: Squid Parent: child process 16658 started
        Mar 30 21:38:21 squid[16658]: The url_rewriter helpers are crashing too rapidly, need help!
        Mar 30 21:38:21 kernel: pid 16658 (squid), uid 62: exited on signal 6
        Mar 30 21:38:21 squid[7728]: Squid Parent: child process 16658 exited due to signal 6
        Mar 30 21:38:24 squid[7728]: Squid Parent: child process 16678 started
        Mar 30 21:38:24 squid[16678]: The url_rewriter helpers are crashing too rapidly, need help!
        Mar 30 21:38:24 kernel: pid 16678 (squid), uid 62: exited on signal 6
        Mar 30 21:38:24 squid[7728]: Squid Parent: child process 16678 exited due to signal 6
        Mar 30 21:38:24 squid[7728]: Exiting due to repeated, frequent failures

        1 Reply Last reply Reply Quote 0
        • A
          andreadg88
          last edited by

          In the SQUID Package i've only this setting and transparent proxy:

          redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf;redirector_bypass on;redirect_children 3

          and this is the squidGuard.conf

          
# ============================================================
# SquidGuard configuration file
# This file generated automaticly with SquidGuard configurator
# (C)2006 Serg Dvoriancev
# email: dv_serg@mail.ru
# ============================================================

logdir /var/squidGuard/log
dbhome /var/db/squidGuard

# Url BlackList
dest URL_Blacklist {
        domainlist URL_Blacklist/domains
        urllist URL_Blacklist/urls
        redirect http://192.168.1.1:80/sgerror.php?url=403%20La%20visione%20dei%
20video%20non%20e%27%20permessa&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u
}

#
rew safesearch {
        s@(google\..*/search?.*q=.*)@\1\&safe=active@i
        s@(google\..*/images.*q=.*)@\1\&safe=active@i
        s@(google\..*/groups.*q=.*)@\1\&safe=active@i
        s@(google\..*/news.*q=.*)@\1\&safe=active@i
        s@(yandex\..*/yandsearch?.*text=.*)@\1\&fyandex=1@i
        s@(search\.yahoo\..*/search.*p=.*)@\1\&vm=r&v=1@i
        s@(search\.live\..*/.*q=.*)@\1\&adlt=strict@i
        s@(search\.msn\..*/.*q=.*)@\1\&adlt=strict@i
        s@(\.bing\..*/.*q=.*)@\1\&adlt=strict@i
}

#
acl  {
        #
        default  {
                pass URL_Blacklist all
                redirect http://192.168.1.1:80/sgerror.php?url=403%20&a=%a&n=%n&
i=%i&s=%s&t=%t&u=%u
        }
}
dest URL_Blacklist {
        domainlist URL_Blacklist/domains
        urllist URL_Blacklist/urls
        redirect http://192.168.1.1:80/sgerror.php?url=403%20La%20visione%20dei%20video%20no
n%20e%27%20permessa&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u
}

#
rew safesearch {
        s@(google\..*/search?.*q=.*)@\1\&safe=active@i
        s@(google\..*/images.*q=.*)@\1\&safe=active@i
        s@(google\..*/groups.*q=.*)@\1\&safe=active@i
        s@(google\..*/news.*q=.*)@\1\&safe=active@i
        s@(yandex\..*/yandsearch?.*text=.*)@\1\&fyandex=1@i
        s@(search\.yahoo\..*/search.*p=.*)@\1\&vm=r&v=1@i
        s@(search\.live\..*/.*q=.*)@\1\&adlt=strict@i
        s@(search\.msn\..*/.*q=.*)@\1\&adlt=strict@i
        s@(\.bing\..*/.*q=.*)@\1\&adlt=strict@i
}

#
acl  {
        #
        default  {
                pass URL_Blacklist all
                redirect http://192.168.1.1:80/sgerror.php?url=403%20&a=%a&n=%n&i=%i&s=%s&t=
%t&u=%u
        }
}

          In the logs, there aren't any reference to the problem…

          Mar 30 15:41:23 	squid[59702]: Squid Parent: child process 59894 exited due to signal 6
Mar 30 15:41:23 	kernel: pid 59894 (squid), uid 62: exited on signal 6
Mar 30 15:41:23 	squid[59894]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:41:23 	squid[59702]: Squid Parent: child process 59894 started
Mar 30 15:41:22 	check_reload_status: reloading filter
Mar 30 15:41:22 	php: /pkg_edit.php: Reloading Squid for configuration sync
Mar 30 15:41:20 	squid[59702]: Squid Parent: child process 59704 exited due to signal 6
Mar 30 15:41:20 	kernel: pid 59704 (squid), uid 62: exited on signal 6
Mar 30 15:41:20 	squid[59704]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:41:19 	squid[59702]: Squid Parent: child process 59704 started
Mar 30 15:41:19 	php: /pkg_edit.php: Starting Squid
Mar 30 15:41:01 	squid[59460]: Exiting due to repeated, frequent failures
Mar 30 15:41:01 	squid[59460]: Squid Parent: child process 59614 exited due to signal 6
Mar 30 15:41:01 	kernel: pid 59614 (squid), uid 62: exited on signal 6
Mar 30 15:41:01 	squid[59614]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:41:00 	squid[59460]: Squid Parent: child process 59614 started
Mar 30 15:40:57 	squid[59460]: Squid Parent: child process 59607 exited due to signal 6
Mar 30 15:40:57 	kernel: pid 59607 (squid), uid 62: exited on signal 6
Mar 30 15:40:57 	squid[59607]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:40:57 	squid[59460]: Squid Parent: child process 59607 started
Mar 30 15:40:54 	squid[59460]: Squid Parent: child process 59601 exited due to signal 6
Mar 30 15:40:54 	kernel: pid 59601 (squid), uid 62: exited on signal 6
Mar 30 15:40:54 	squid[59601]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:40:54 	squid[59460]: Squid Parent: child process 59601 started
Mar 30 15:40:51 	check_reload_status: reloading filter
Mar 30 15:40:51 	squid[59460]: Squid Parent: child process 59518 exited due to signal 6
Mar 30 15:40:51 	kernel: pid 59518 (squid), uid 62: exited on signal 6
Mar 30 15:40:51 	squid[59518]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:40:51 	squid[59460]: Squid Parent: child process 59518 started
Mar 30 15:40:47 	squid[59460]: Squid Parent: child process 59463 exited due to signal 6
Mar 30 15:40:47 	kernel: pid 59463 (squid), uid 62: exited on signal 6
Mar 30 15:40:47 	squid[59463]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:40:47 	squid[59460]: Squid Parent: child process 59463 started
Mar 30 15:40:47 	php: /pkg_edit.php: Starting Squid
          1 Reply Last reply Reply Quote 0
          • J
            joviscomp
            last edited by

            here is my proxy filter log

            Do not edit manually !

            http_port 192.168.143.1:3128
            http_port 127.0.0.1:80 transparent
            icp_port 0

            pid_filename /var/run/squid.pid
            cache_effective_user proxy
            cache_effective_group proxy
            error_directory /usr/local/etc/squid/errors/English
            icon_directory /usr/local/etc/squid/icons
            visible_hostname GameLab
            cache_mgr GameLab@odiongan.net
            access_log /dev/null
            cache_log /var/squid/logs/cache.log
            cache_store_log none
            logfile_rotate 2
            shutdown_lifetime 3 seconds

            Allow local network(s) on interface(s)

            acl localnet src  192.168.143.0/255.255.255.0
            uri_whitespace strip

            cache_mem 2000 MB
            maximum_object_size_in_memory 32 KB
            memory_replacement_policy heap GDSF
            cache_replacement_policy heap LFUDA
            cache_dir ufs /var/squid/cache 100000 16 256
            minimum_object_size 0 KB
            maximum_object_size 200000 KB
            offline_mode off
            cache_swap_low 90
            cache_swap_high 95

            No redirector configured

            Setup some default acls

            acl all src 0.0.0.0/0.0.0.0
            acl localhost src 127.0.0.1/255.255.255.255
            acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901  3128 1025-65535
            acl sslports port 443 563 
            acl manager proto cache_object
            acl purge method PURGE
            acl connect method CONNECT
            acl dynamic urlpath_regex cgi-bin ?
            acl blacklist dstdom_regex -i '/var/squid/acl/blacklist.acl'
            cache deny dynamic
            http_access allow manager localhost

            http_access deny manager
            http_access allow purge localhost
            http_access deny purge
            http_access deny !safeports
            http_access deny CONNECT !sslports

            Always allow localhost connections

            http_access allow localhost

            request_body_max_size 0 KB
            reply_body_max_size 0 deny all
            delay_pools 1
            delay_class 1 2
            delay_parameters 1 -1/-1 -1/-1
            delay_initial_bucket_level 100
            delay_access 1 allow all

            Block access to blacklist domains

            http_access deny blacklist

            Setup allowed acls

            Allow local network(s) on interface(s)

            http_access allow localnet

            Default block all to be sure

            http_access deny all

            1 Reply Last reply Reply Quote 0
            • D
              dvserg
              last edited by

              What a pfSense installation type you use (nanoBSD / HDD installation)

              SquidGuardDoc EN  RU Tutorial
              Localization ru_PFSense

              1 Reply Last reply Reply Quote 0
              • A
                abbetech
                last edited by

                I was having the same problem.  I updated to 2.0 rc1, reinstalled packages, then rebooted.  Now squidguard is running.

                1 Reply Last reply Reply Quote 0
                • NetViciousN
                  NetVicious
                  last edited by

                  Here are my two cents ;-)

                  The problem it's when squid tries to run the squidguard slaves:
                  [root@pfsense:/root]# /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf
                  /libexec/ld-elf.so.1: Shared object "libldap-2.4.so.8" not found, required by "squidGuard"

                  So we need the libldap-2.4.so.8

                  I did a pkg_info and I saw two openldap packages, I pkg_deleted both of them and installed the last package on http://files.pfsense.org/packages/7/All/

                  pkg_add -r http://files.pfsense.org/packages/7/All/openldap-client-2.4.23.tbz

                  But it seems this package doesn't installs the libldap-2.4.so.8, it installs libldap-2.4.so.7 so I created a symlink:

                  [root@pfsense:~]# cd /usr/local/lib
                  [root@pfsense:~]# ln -s libldap-2.4.so.7 libldap-2.4.so.8

                  [root@pfsense:/usr/local/lib]# ls -la libldap*
                  lrwxr-xr-x 1 root wheel     16 Feb  2  2007 libldap-2.3.so -> libldap-2.3.so.2
                  -rw-r–r-- 1 root wheel 215171 Feb  2  2007 libldap-2.3.so.2
                  lrwxr-xr-x 1 root wheel     16 Jul 25  2010 libldap-2.4.so -> libldap-2.4.so.7
                  -rw-r--r-- 1 root wheel 279350 Jul 25  2010 libldap-2.4.so.7
                  lrwxr-xr-x 1 root wheel     16 Mar 30 17:49 libldap-2.4.so.8 -> libldap-2.4.so.7
                  -rw-r–r-- 1 root wheel 334522 Jul 25  2010 libldap.a
                  -rw-r--r-- 1 root wheel    984 Jul 25  2010 libldap.la
                  lrwxr-xr-x 1 root wheel     16 Jul 25  2010 libldap.so -> libldap-2.4.so.7
                  lrwxr-xr-x 1 root wheel     18 Feb  2  2007 libldap_r-2.3.so -> libldap_r-2.3.so.2
                  -rw-r--r-- 1 root wheel 236440 Feb  2  2007 libldap_r-2.3.so.2
                  lrwxr-xr-x 1 root wheel     18 Jul 25  2010 libldap_r-2.4.so -> libldap_r-2.4.so.7
                  -rw-r--r-- 1 root wheel 301942 Jul 25  2010 libldap_r-2.4.so.7
                  -rw-r--r-- 1 root wheel 369342 Jul 25  2010 libldap_r.a
                  -rw-r--r-- 1 root wheel   1016 Jul 25  2010 libldap_r.la
                  lrwxr-xr-x 1 root wheel     18 Jul 25  2010 libldap_r.so -> libldap_r-2.4.so.7

                  Please give feedback, and if someone knows where to download the tbz with the correct library leave a link.

                  Regards from Spain.

                  ..//\/ e t . \/ i c i o u s ..

                  1 Reply Last reply Reply Quote 0
                  • O
                    orion182
                    last edited by

                    i try

                    pkg_add -r ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7-stable/Latest/openldap24-client.tbz

                    and seems it working ok.

                    This package is version 2.4.24 and libldap-2.4.so.8 is instaled.

                    1 Reply Last reply Reply Quote 0
                    • J
                      joviscomp
                      last edited by

                      thanks guys..you are all a big help..it worked already…

                      i installed
                      http://files.pfsense.org/packages/7/All/openldap-sasl-client-2.4.25_1.tbz

                      squidguard is up now..thanks..

                      1 Reply Last reply Reply Quote 0
                      • NetViciousN
                        NetVicious
                        last edited by

                        Perfect. The 2.4.25 package was not on the server yesterday. Now it installs the libldap-2.4.so.8.

                        Thanks guys.

                        ..//\/ e t . \/ i c i o u s ..

                        1 Reply Last reply Reply Quote 0
                        • A
                          andreadg88
                          last edited by

                          @joviscomp:

                          thanks guys..you are all a big help..it worked already…

                          i installed
                          http://files.pfsense.org/packages/7/All/openldap-sasl-client-2.4.25_1.tbz

                          squidguard is up now..thanks..

                          I've installed them, but squidguard not start, now i've test it with symlink:

                          ln -s libldap-2.4.so.7 libldap-2.4.so.8

                          now it works…

                          1 Reply Last reply Reply Quote 0
                          • NetViciousN
                            NetVicious
                            last edited by

                            andreadg88: Very strange, because the 2.4.25 seems to install the correct library.

                            Paste here the result of:

                            pkg_info
                            ls -la /usr/local/lib/libldap*

                            ..//\/ e t . \/ i c i o u s ..

                            1 Reply Last reply Reply Quote 0
                            • A
                              andreadg88
                              last edited by

                              here the output of shell…

                              it's very strange  ???

                              
# pkg_info
cyrus-sasl-2.1.23   RFC 2222 SASL (Simple Authentication and Security Layer)
cyrus-sasl-2.1.23_3 RFC 2222 SASL (Simple Authentication and Security Layer)
db3-3.3.11_3,1      The Berkeley DB package, revision 3.3
gd-2.0.35,1         A graphics library for fast creation of images
jpeg-6b_4           IJG's jpeg compression utilities
lightsquid-1.7.1_1  A light and fast web based squid proxy traffic analyser
openldap-sasl-client-2.4.25_1 Open source LDAP client implementation with SASL2 support
p5-GD-2.39          A perl5 interface to Gd Graphics Library version2
perl-5.10.1_3       Practical Extraction and Report Language
perl-5.8.8_1        Practical Extraction and Report Language
squid-2.7.9         HTTP Caching Proxy
squidGuard-1.4_3    A fast redirector for squid
squid_radius_auth-1.10 RADIUS authenticator for squid proxy 2.5 and later


                              
# ls -la /usr/local/lib/libldap*
lrwxr-xr-x  1 root  wheel      16 Mar 29 21:37 /usr/local/lib/libldap-2.4.so -> libldap-2.4.so.8
-rwxr-xr-x  1 root  wheel  264819 Jan  9  2009 /usr/local/lib/libldap-2.4.so.3
-rw-r--r--  1 root  wheel  299327 Mar 29 21:37 /usr/local/lib/libldap-2.4.so.8
-rw-r--r--  1 root  wheel  360528 Mar 29 21:37 /usr/local/lib/libldap.a
-rw-r--r--  1 root  wheel    1006 Mar 29 21:37 /usr/local/lib/libldap.la
lrwxr-xr-x  1 root  wheel      16 Mar 29 21:37 /usr/local/lib/libldap.so -> libldap-2.4.so.8
lrwxr-xr-x  1 root  wheel      18 Mar 29 21:37 /usr/local/lib/libldap_r-2.4.so -> libldap_r-2.4.so.8
-rw-r--r--  1 root  wheel  327982 Mar 29 21:37 /usr/local/lib/libldap_r-2.4.so.8
-rw-r--r--  1 root  wheel  397856 Mar 29 21:37 /usr/local/lib/libldap_r.a
-rw-r--r--  1 root  wheel    1029 Mar 29 21:37 /usr/local/lib/libldap_r.la
lrwxr-xr-x  1 root  wheel      18 Mar 29 21:37 /usr/local/lib/libldap_r.so -> libldap_r-2.4.so.8
                              1 Reply Last reply Reply Quote 0
                              • NetViciousN
                                NetVicious
                                last edited by

                                Try to run the squidguard manually from the shell and paste here the error it should show to you:

                                /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf

                                ..//\/ e t . \/ i c i o u s ..

                                1 Reply Last reply Reply Quote 0
                                • R
                                  rootchick
                                  last edited by

                                  I had the same problem after updating squidGuard, and solved it with this:

                                  
pkg_delete openldap-client\*
pkg_add -r ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7-stable/Latest/openldap24-client.tbz

                                  The dependencies should be updated or something.  This shouldn't happen when upgrading a package on a stable version.

                                  1 Reply Last reply Reply Quote 0
                                  • jimpJ
                                    jimp Rebel Alliance Developer Netgate
                                    last edited by

                                    The dependencies were updated, the problem is that some people who already had the older ldap version need to reinstall both squid and squidGuard, and occasionally need to pkg_delete squid* openldap* and then reinstall.

                                    OpenLDAP had a shared library version bump.

                                    Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                                    Need help fast? Netgate Global Support!

                                    Do not Chat/PM for help!

                                    1 Reply Last reply Reply Quote 0
                                    • R
                                      rootchick
                                      last edited by

                                      Thanks, good to know.  I had only updated squidGuard and nothing else.

                                      1 Reply Last reply Reply Quote 0
                                      • First post
                                        Last post
                                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.