Squidguard problem after new install

andreadg88

In the SQUID Package i've only this setting and transparent proxy:

redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf;redirector_bypass on;redirect_children 3

and this is the squidGuard.conf


# ============================================================
# SquidGuard configuration file
# This file generated automaticly with SquidGuard configurator
# (C)2006 Serg Dvoriancev
# email: dv_serg@mail.ru
# ============================================================

logdir /var/squidGuard/log
dbhome /var/db/squidGuard

# Url BlackList
dest URL_Blacklist {
        domainlist URL_Blacklist/domains
        urllist URL_Blacklist/urls
        redirect http://192.168.1.1:80/sgerror.php?url=403%20La%20visione%20dei%
20video%20non%20e%27%20permessa&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u
}

#
rew safesearch {
        s@(google\..*/search?.*q=.*)@\1\&safe=active@i
        s@(google\..*/images.*q=.*)@\1\&safe=active@i
        s@(google\..*/groups.*q=.*)@\1\&safe=active@i
        s@(google\..*/news.*q=.*)@\1\&safe=active@i
        s@(yandex\..*/yandsearch?.*text=.*)@\1\&fyandex=1@i
        s@(search\.yahoo\..*/search.*p=.*)@\1\&vm=r&v=1@i
        s@(search\.live\..*/.*q=.*)@\1\&adlt=strict@i
        s@(search\.msn\..*/.*q=.*)@\1\&adlt=strict@i
        s@(\.bing\..*/.*q=.*)@\1\&adlt=strict@i
}

#
acl  {
        #
        default  {
                pass URL_Blacklist all
                redirect http://192.168.1.1:80/sgerror.php?url=403%20&a=%a&n=%n&
i=%i&s=%s&t=%t&u=%u
        }
}
dest URL_Blacklist {
        domainlist URL_Blacklist/domains
        urllist URL_Blacklist/urls
        redirect http://192.168.1.1:80/sgerror.php?url=403%20La%20visione%20dei%20video%20no
n%20e%27%20permessa&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u
}

#
rew safesearch {
        s@(google\..*/search?.*q=.*)@\1\&safe=active@i
        s@(google\..*/images.*q=.*)@\1\&safe=active@i
        s@(google\..*/groups.*q=.*)@\1\&safe=active@i
        s@(google\..*/news.*q=.*)@\1\&safe=active@i
        s@(yandex\..*/yandsearch?.*text=.*)@\1\&fyandex=1@i
        s@(search\.yahoo\..*/search.*p=.*)@\1\&vm=r&v=1@i
        s@(search\.live\..*/.*q=.*)@\1\&adlt=strict@i
        s@(search\.msn\..*/.*q=.*)@\1\&adlt=strict@i
        s@(\.bing\..*/.*q=.*)@\1\&adlt=strict@i
}

#
acl  {
        #
        default  {
                pass URL_Blacklist all
                redirect http://192.168.1.1:80/sgerror.php?url=403%20&a=%a&n=%n&i=%i&s=%s&t=
%t&u=%u
        }
}

In the logs, there aren't any reference to the problem…

Mar 30 15:41:23 	squid[59702]: Squid Parent: child process 59894 exited due to signal 6
Mar 30 15:41:23 	kernel: pid 59894 (squid), uid 62: exited on signal 6
Mar 30 15:41:23 	squid[59894]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:41:23 	squid[59702]: Squid Parent: child process 59894 started
Mar 30 15:41:22 	check_reload_status: reloading filter
Mar 30 15:41:22 	php: /pkg_edit.php: Reloading Squid for configuration sync
Mar 30 15:41:20 	squid[59702]: Squid Parent: child process 59704 exited due to signal 6
Mar 30 15:41:20 	kernel: pid 59704 (squid), uid 62: exited on signal 6
Mar 30 15:41:20 	squid[59704]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:41:19 	squid[59702]: Squid Parent: child process 59704 started
Mar 30 15:41:19 	php: /pkg_edit.php: Starting Squid
Mar 30 15:41:01 	squid[59460]: Exiting due to repeated, frequent failures
Mar 30 15:41:01 	squid[59460]: Squid Parent: child process 59614 exited due to signal 6
Mar 30 15:41:01 	kernel: pid 59614 (squid), uid 62: exited on signal 6
Mar 30 15:41:01 	squid[59614]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:41:00 	squid[59460]: Squid Parent: child process 59614 started
Mar 30 15:40:57 	squid[59460]: Squid Parent: child process 59607 exited due to signal 6
Mar 30 15:40:57 	kernel: pid 59607 (squid), uid 62: exited on signal 6
Mar 30 15:40:57 	squid[59607]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:40:57 	squid[59460]: Squid Parent: child process 59607 started
Mar 30 15:40:54 	squid[59460]: Squid Parent: child process 59601 exited due to signal 6
Mar 30 15:40:54 	kernel: pid 59601 (squid), uid 62: exited on signal 6
Mar 30 15:40:54 	squid[59601]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:40:54 	squid[59460]: Squid Parent: child process 59601 started
Mar 30 15:40:51 	check_reload_status: reloading filter
Mar 30 15:40:51 	squid[59460]: Squid Parent: child process 59518 exited due to signal 6
Mar 30 15:40:51 	kernel: pid 59518 (squid), uid 62: exited on signal 6
Mar 30 15:40:51 	squid[59518]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:40:51 	squid[59460]: Squid Parent: child process 59518 started
Mar 30 15:40:47 	squid[59460]: Squid Parent: child process 59463 exited due to signal 6
Mar 30 15:40:47 	kernel: pid 59463 (squid), uid 62: exited on signal 6
Mar 30 15:40:47 	squid[59463]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:40:47 	squid[59460]: Squid Parent: child process 59463 started
Mar 30 15:40:47 	php: /pkg_edit.php: Starting Squid

joviscomp

here is my proxy filter log

Do not edit manually !

http_port 192.168.143.1:3128
http_port 127.0.0.1:80 transparent
icp_port 0

pid_filename /var/run/squid.pid
cache_effective_user proxy
cache_effective_group proxy
error_directory /usr/local/etc/squid/errors/English
icon_directory /usr/local/etc/squid/icons
visible_hostname GameLab
cache_mgr GameLab@odiongan.net
access_log /dev/null
cache_log /var/squid/logs/cache.log
cache_store_log none
logfile_rotate 2
shutdown_lifetime 3 seconds

Allow local network(s) on interface(s)

acl localnet src 192.168.143.0/255.255.255.0
uri_whitespace strip

cache_mem 2000 MB
maximum_object_size_in_memory 32 KB
memory_replacement_policy heap GDSF
cache_replacement_policy heap LFUDA
cache_dir ufs /var/squid/cache 100000 16 256
minimum_object_size 0 KB
maximum_object_size 200000 KB
offline_mode off
cache_swap_low 90
cache_swap_high 95

No redirector configured

Setup some default acls

acl all src 0.0.0.0/0.0.0.0
acl localhost src 127.0.0.1/255.255.255.255
acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901 3128 1025-65535
acl sslports port 443 563
acl manager proto cache_object
acl purge method PURGE
acl connect method CONNECT
acl dynamic urlpath_regex cgi-bin ?
acl blacklist dstdom_regex -i '/var/squid/acl/blacklist.acl'
cache deny dynamic
http_access allow manager localhost

http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !safeports
http_access deny CONNECT !sslports

Always allow localhost connections

http_access allow localhost

request_body_max_size 0 KB
reply_body_max_size 0 deny all
delay_pools 1
delay_class 1 2
delay_parameters 1 -1/-1 -1/-1
delay_initial_bucket_level 100
delay_access 1 allow all

Block access to blacklist domains

http_access deny blacklist

Setup allowed acls

Allow local network(s) on interface(s)

http_access allow localnet

Default block all to be sure

http_access deny all

dvserg

What a pfSense installation type you use (nanoBSD / HDD installation)

abbetech

I was having the same problem. I updated to 2.0 rc1, reinstalled packages, then rebooted. Now squidguard is running.

NetVicious

Here are my two cents ;-)

The problem it's when squid tries to run the squidguard slaves:
[root@pfsense:/root]# /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf
/libexec/ld-elf.so.1: Shared object "libldap-2.4.so.8" not found, required by "squidGuard"

So we need the libldap-2.4.so.8

I did a pkg_info and I saw two openldap packages, I pkg_deleted both of them and installed the last package on http://files.pfsense.org/packages/7/All/

pkg_add -r http://files.pfsense.org/packages/7/All/openldap-client-2.4.23.tbz

But it seems this package doesn't installs the libldap-2.4.so.8, it installs libldap-2.4.so.7 so I created a symlink:

[root@pfsense:~]# cd /usr/local/lib
[root@pfsense:~]# ln -s libldap-2.4.so.7 libldap-2.4.so.8

[root@pfsense:/usr/local/lib]# ls -la libldap*
lrwxr-xr-x 1 root wheel 16 Feb 2 2007 libldap-2.3.so -> libldap-2.3.so.2
-rw-r–r-- 1 root wheel 215171 Feb 2 2007 libldap-2.3.so.2
lrwxr-xr-x 1 root wheel 16 Jul 25 2010 libldap-2.4.so -> libldap-2.4.so.7
-rw-r--r-- 1 root wheel 279350 Jul 25 2010 libldap-2.4.so.7
lrwxr-xr-x 1 root wheel 16 Mar 30 17:49 libldap-2.4.so.8 -> libldap-2.4.so.7
-rw-r–r-- 1 root wheel 334522 Jul 25 2010 libldap.a
-rw-r--r-- 1 root wheel 984 Jul 25 2010 libldap.la
lrwxr-xr-x 1 root wheel 16 Jul 25 2010 libldap.so -> libldap-2.4.so.7
lrwxr-xr-x 1 root wheel 18 Feb 2 2007 libldap_r-2.3.so -> libldap_r-2.3.so.2
-rw-r--r-- 1 root wheel 236440 Feb 2 2007 libldap_r-2.3.so.2
lrwxr-xr-x 1 root wheel 18 Jul 25 2010 libldap_r-2.4.so -> libldap_r-2.4.so.7
-rw-r--r-- 1 root wheel 301942 Jul 25 2010 libldap_r-2.4.so.7
-rw-r--r-- 1 root wheel 369342 Jul 25 2010 libldap_r.a
-rw-r--r-- 1 root wheel 1016 Jul 25 2010 libldap_r.la
lrwxr-xr-x 1 root wheel 18 Jul 25 2010 libldap_r.so -> libldap_r-2.4.so.7

Please give feedback, and if someone knows where to download the tbz with the correct library leave a link.

Regards from Spain.

orion182

i try

pkg_add -r ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7-stable/Latest/openldap24-client.tbz

and seems it working ok.

This package is version 2.4.24 and libldap-2.4.so.8 is instaled.

joviscomp

thanks guys..you are all a big help..it worked already…

i installed
http://files.pfsense.org/packages/7/All/openldap-sasl-client-2.4.25_1.tbz

squidguard is up now..thanks..

NetVicious

Perfect. The 2.4.25 package was not on the server yesterday. Now it installs the libldap-2.4.so.8.

Thanks guys.

andreadg88

@joviscomp:

thanks guys..you are all a big help..it worked already…

i installed
http://files.pfsense.org/packages/7/All/openldap-sasl-client-2.4.25_1.tbz

squidguard is up now..thanks..

I've installed them, but squidguard not start, now i've test it with symlink:

ln -s libldap-2.4.so.7 libldap-2.4.so.8

now it works…

NetVicious

andreadg88: Very strange, because the 2.4.25 seems to install the correct library.

Paste here the result of:

pkg_info
ls -la /usr/local/lib/libldap*

andreadg88

here the output of shell…

it's very strange ???


# pkg_info
cyrus-sasl-2.1.23   RFC 2222 SASL (Simple Authentication and Security Layer)
cyrus-sasl-2.1.23_3 RFC 2222 SASL (Simple Authentication and Security Layer)
db3-3.3.11_3,1      The Berkeley DB package, revision 3.3
gd-2.0.35,1         A graphics library for fast creation of images
jpeg-6b_4           IJG's jpeg compression utilities
lightsquid-1.7.1_1  A light and fast web based squid proxy traffic analyser
openldap-sasl-client-2.4.25_1 Open source LDAP client implementation with SASL2 support
p5-GD-2.39          A perl5 interface to Gd Graphics Library version2
perl-5.10.1_3       Practical Extraction and Report Language
perl-5.8.8_1        Practical Extraction and Report Language
squid-2.7.9         HTTP Caching Proxy
squidGuard-1.4_3    A fast redirector for squid
squid_radius_auth-1.10 RADIUS authenticator for squid proxy 2.5 and later


# ls -la /usr/local/lib/libldap*
lrwxr-xr-x  1 root  wheel      16 Mar 29 21:37 /usr/local/lib/libldap-2.4.so -> libldap-2.4.so.8
-rwxr-xr-x  1 root  wheel  264819 Jan  9  2009 /usr/local/lib/libldap-2.4.so.3
-rw-r--r--  1 root  wheel  299327 Mar 29 21:37 /usr/local/lib/libldap-2.4.so.8
-rw-r--r--  1 root  wheel  360528 Mar 29 21:37 /usr/local/lib/libldap.a
-rw-r--r--  1 root  wheel    1006 Mar 29 21:37 /usr/local/lib/libldap.la
lrwxr-xr-x  1 root  wheel      16 Mar 29 21:37 /usr/local/lib/libldap.so -> libldap-2.4.so.8
lrwxr-xr-x  1 root  wheel      18 Mar 29 21:37 /usr/local/lib/libldap_r-2.4.so -> libldap_r-2.4.so.8
-rw-r--r--  1 root  wheel  327982 Mar 29 21:37 /usr/local/lib/libldap_r-2.4.so.8
-rw-r--r--  1 root  wheel  397856 Mar 29 21:37 /usr/local/lib/libldap_r.a
-rw-r--r--  1 root  wheel    1029 Mar 29 21:37 /usr/local/lib/libldap_r.la
lrwxr-xr-x  1 root  wheel      18 Mar 29 21:37 /usr/local/lib/libldap_r.so -> libldap_r-2.4.so.8

NetVicious

Try to run the squidguard manually from the shell and paste here the error it should show to you:

/usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf

rootchick

I had the same problem after updating squidGuard, and solved it with this:


pkg_delete openldap-client\*
pkg_add -r ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7-stable/Latest/openldap24-client.tbz

The dependencies should be updated or something. This shouldn't happen when upgrading a package on a stable version.

jimp

The dependencies were updated, the problem is that some people who already had the older ldap version need to reinstall both squid and squidGuard, and occasionally need to pkg_delete squid* openldap* and then reinstall.

OpenLDAP had a shared library version bump.

rootchick

Thanks, good to know. I had only updated squidGuard and nothing else.