Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Squidguard problem after new install

    Scheduled Pinned Locked Moved pfSense Packages
    20 Posts 8 Posters 8.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      joviscomp
      last edited by

      here is my proxy filter log

      Do not edit manually !

      http_port 192.168.143.1:3128
      http_port 127.0.0.1:80 transparent
      icp_port 0

      pid_filename /var/run/squid.pid
      cache_effective_user proxy
      cache_effective_group proxy
      error_directory /usr/local/etc/squid/errors/English
      icon_directory /usr/local/etc/squid/icons
      visible_hostname GameLab
      cache_mgr GameLab@odiongan.net
      access_log /dev/null
      cache_log /var/squid/logs/cache.log
      cache_store_log none
      logfile_rotate 2
      shutdown_lifetime 3 seconds

      Allow local network(s) on interface(s)

      acl localnet src  192.168.143.0/255.255.255.0
      uri_whitespace strip

      cache_mem 2000 MB
      maximum_object_size_in_memory 32 KB
      memory_replacement_policy heap GDSF
      cache_replacement_policy heap LFUDA
      cache_dir ufs /var/squid/cache 100000 16 256
      minimum_object_size 0 KB
      maximum_object_size 200000 KB
      offline_mode off
      cache_swap_low 90
      cache_swap_high 95

      No redirector configured

      Setup some default acls

      acl all src 0.0.0.0/0.0.0.0
      acl localhost src 127.0.0.1/255.255.255.255
      acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901  3128 1025-65535
      acl sslports port 443 563 
      acl manager proto cache_object
      acl purge method PURGE
      acl connect method CONNECT
      acl dynamic urlpath_regex cgi-bin ?
      acl blacklist dstdom_regex -i '/var/squid/acl/blacklist.acl'
      cache deny dynamic
      http_access allow manager localhost

      http_access deny manager
      http_access allow purge localhost
      http_access deny purge
      http_access deny !safeports
      http_access deny CONNECT !sslports

      Always allow localhost connections

      http_access allow localhost

      request_body_max_size 0 KB
      reply_body_max_size 0 deny all
      delay_pools 1
      delay_class 1 2
      delay_parameters 1 -1/-1 -1/-1
      delay_initial_bucket_level 100
      delay_access 1 allow all

      Block access to blacklist domains

      http_access deny blacklist

      Setup allowed acls

      Allow local network(s) on interface(s)

      http_access allow localnet

      Default block all to be sure

      http_access deny all

      1 Reply Last reply Reply Quote 0
      • D
        dvserg
        last edited by

        What a pfSense installation type you use (nanoBSD / HDD installation)

        SquidGuardDoc EN  RU Tutorial
        Localization ru_PFSense

        1 Reply Last reply Reply Quote 0
        • A
          abbetech
          last edited by

          I was having the same problem.  I updated to 2.0 rc1, reinstalled packages, then rebooted.  Now squidguard is running.

          1 Reply Last reply Reply Quote 0
          • NetViciousN
            NetVicious
            last edited by

            Here are my two cents ;-)

            The problem it's when squid tries to run the squidguard slaves:
            [root@pfsense:/root]# /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf
            /libexec/ld-elf.so.1: Shared object "libldap-2.4.so.8" not found, required by "squidGuard"

            So we need the libldap-2.4.so.8

            I did a pkg_info and I saw two openldap packages, I pkg_deleted both of them and installed the last package on http://files.pfsense.org/packages/7/All/

            pkg_add -r http://files.pfsense.org/packages/7/All/openldap-client-2.4.23.tbz

            But it seems this package doesn't installs the libldap-2.4.so.8, it installs libldap-2.4.so.7 so I created a symlink:

            [root@pfsense:~]# cd /usr/local/lib
            [root@pfsense:~]# ln -s libldap-2.4.so.7 libldap-2.4.so.8

            [root@pfsense:/usr/local/lib]# ls -la libldap*
            lrwxr-xr-x 1 root wheel     16 Feb  2  2007 libldap-2.3.so -> libldap-2.3.so.2
            -rw-r–r-- 1 root wheel 215171 Feb  2  2007 libldap-2.3.so.2
            lrwxr-xr-x 1 root wheel     16 Jul 25  2010 libldap-2.4.so -> libldap-2.4.so.7
            -rw-r--r-- 1 root wheel 279350 Jul 25  2010 libldap-2.4.so.7
            lrwxr-xr-x 1 root wheel     16 Mar 30 17:49 libldap-2.4.so.8 -> libldap-2.4.so.7
            -rw-r–r-- 1 root wheel 334522 Jul 25  2010 libldap.a
            -rw-r--r-- 1 root wheel    984 Jul 25  2010 libldap.la
            lrwxr-xr-x 1 root wheel     16 Jul 25  2010 libldap.so -> libldap-2.4.so.7
            lrwxr-xr-x 1 root wheel     18 Feb  2  2007 libldap_r-2.3.so -> libldap_r-2.3.so.2
            -rw-r--r-- 1 root wheel 236440 Feb  2  2007 libldap_r-2.3.so.2
            lrwxr-xr-x 1 root wheel     18 Jul 25  2010 libldap_r-2.4.so -> libldap_r-2.4.so.7
            -rw-r--r-- 1 root wheel 301942 Jul 25  2010 libldap_r-2.4.so.7
            -rw-r--r-- 1 root wheel 369342 Jul 25  2010 libldap_r.a
            -rw-r--r-- 1 root wheel   1016 Jul 25  2010 libldap_r.la
            lrwxr-xr-x 1 root wheel     18 Jul 25  2010 libldap_r.so -> libldap_r-2.4.so.7

            Please give feedback, and if someone knows where to download the tbz with the correct library leave a link.

            Regards from Spain.

            ..//\/ e t . \/ i c i o u s ..

            1 Reply Last reply Reply Quote 0
            • O
              orion182
              last edited by

              i try

              pkg_add -r ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7-stable/Latest/openldap24-client.tbz

              and seems it working ok.

              This package is version 2.4.24 and libldap-2.4.so.8 is instaled.

              1 Reply Last reply Reply Quote 0
              • J
                joviscomp
                last edited by

                thanks guys..you are all a big help..it worked already…

                i installed
                http://files.pfsense.org/packages/7/All/openldap-sasl-client-2.4.25_1.tbz

                squidguard is up now..thanks..

                1 Reply Last reply Reply Quote 0
                • NetViciousN
                  NetVicious
                  last edited by

                  Perfect. The 2.4.25 package was not on the server yesterday. Now it installs the libldap-2.4.so.8.

                  Thanks guys.

                  ..//\/ e t . \/ i c i o u s ..

                  1 Reply Last reply Reply Quote 0
                  • A
                    andreadg88
                    last edited by

                    @joviscomp:

                    thanks guys..you are all a big help..it worked already…

                    i installed
                    http://files.pfsense.org/packages/7/All/openldap-sasl-client-2.4.25_1.tbz

                    squidguard is up now..thanks..

                    I've installed them, but squidguard not start, now i've test it with symlink:

                    ln -s libldap-2.4.so.7 libldap-2.4.so.8

                    now it works…

                    1 Reply Last reply Reply Quote 0
                    • NetViciousN
                      NetVicious
                      last edited by

                      andreadg88: Very strange, because the 2.4.25 seems to install the correct library.

                      Paste here the result of:

                      pkg_info
                      ls -la /usr/local/lib/libldap*

                      ..//\/ e t . \/ i c i o u s ..

                      1 Reply Last reply Reply Quote 0
                      • A
                        andreadg88
                        last edited by

                        here the output of shell…

                        it's very strange  ???

                        
# pkg_info
cyrus-sasl-2.1.23   RFC 2222 SASL (Simple Authentication and Security Layer)
cyrus-sasl-2.1.23_3 RFC 2222 SASL (Simple Authentication and Security Layer)
db3-3.3.11_3,1      The Berkeley DB package, revision 3.3
gd-2.0.35,1         A graphics library for fast creation of images
jpeg-6b_4           IJG's jpeg compression utilities
lightsquid-1.7.1_1  A light and fast web based squid proxy traffic analyser
openldap-sasl-client-2.4.25_1 Open source LDAP client implementation with SASL2 support
p5-GD-2.39          A perl5 interface to Gd Graphics Library version2
perl-5.10.1_3       Practical Extraction and Report Language
perl-5.8.8_1        Practical Extraction and Report Language
squid-2.7.9         HTTP Caching Proxy
squidGuard-1.4_3    A fast redirector for squid
squid_radius_auth-1.10 RADIUS authenticator for squid proxy 2.5 and later


                        
# ls -la /usr/local/lib/libldap*
lrwxr-xr-x  1 root  wheel      16 Mar 29 21:37 /usr/local/lib/libldap-2.4.so -> libldap-2.4.so.8
-rwxr-xr-x  1 root  wheel  264819 Jan  9  2009 /usr/local/lib/libldap-2.4.so.3
-rw-r--r--  1 root  wheel  299327 Mar 29 21:37 /usr/local/lib/libldap-2.4.so.8
-rw-r--r--  1 root  wheel  360528 Mar 29 21:37 /usr/local/lib/libldap.a
-rw-r--r--  1 root  wheel    1006 Mar 29 21:37 /usr/local/lib/libldap.la
lrwxr-xr-x  1 root  wheel      16 Mar 29 21:37 /usr/local/lib/libldap.so -> libldap-2.4.so.8
lrwxr-xr-x  1 root  wheel      18 Mar 29 21:37 /usr/local/lib/libldap_r-2.4.so -> libldap_r-2.4.so.8
-rw-r--r--  1 root  wheel  327982 Mar 29 21:37 /usr/local/lib/libldap_r-2.4.so.8
-rw-r--r--  1 root  wheel  397856 Mar 29 21:37 /usr/local/lib/libldap_r.a
-rw-r--r--  1 root  wheel    1029 Mar 29 21:37 /usr/local/lib/libldap_r.la
lrwxr-xr-x  1 root  wheel      18 Mar 29 21:37 /usr/local/lib/libldap_r.so -> libldap_r-2.4.so.8
                        1 Reply Last reply Reply Quote 0
                        • NetViciousN
                          NetVicious
                          last edited by

                          Try to run the squidguard manually from the shell and paste here the error it should show to you:

                          /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf

                          ..//\/ e t . \/ i c i o u s ..

                          1 Reply Last reply Reply Quote 0
                          • R
                            rootchick
                            last edited by

                            I had the same problem after updating squidGuard, and solved it with this:

                            
pkg_delete openldap-client\*
pkg_add -r ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7-stable/Latest/openldap24-client.tbz

                            The dependencies should be updated or something.  This shouldn't happen when upgrading a package on a stable version.

                            1 Reply Last reply Reply Quote 0
                            • jimpJ
                              jimp Rebel Alliance Developer Netgate
                              last edited by

                              The dependencies were updated, the problem is that some people who already had the older ldap version need to reinstall both squid and squidGuard, and occasionally need to pkg_delete squid* openldap* and then reinstall.

                              OpenLDAP had a shared library version bump.

                              Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                              Need help fast? Netgate Global Support!

                              Do not Chat/PM for help!

                              1 Reply Last reply Reply Quote 0
                              • R
                                rootchick
                                last edited by

                                Thanks, good to know.  I had only updated squidGuard and nothing else.

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.