Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Time Based restriction with Squid & Squid Guard

    Scheduled Pinned Locked Moved pfSense Packages
    25 Posts 7 Posters 19.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      kalu
      last edited by

      Yes, i'm thinking of a cron job to restart squidguard that executes at 9:00AM and 17:00PM
      :(

      i love pfsense because i love open source.

      1 Reply Last reply Reply Quote 0
      • P
        phil.davis
        last edited by

        I'm sure I noticed this problem on V2.0 also - I don't think that it is a V2.0.1 regression.

        As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
        If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

        1 Reply Last reply Reply Quote 0
        • M
          muffin
          last edited by

          Also having the same problem here running 2.0-RC1.
          Squid: 2.7.9 pkg v.4.3.1
          Squidguard: 1.4_2 pkg v.1.9.1

          I also get the logs about a 'Possible bypass attempt'.

          Any news on a fix? Have been through this thread: http://forum.pfsense.org/index.php/topic,41747.msg222093.html#msg222093
          But the fix did not work for me.

          1 Reply Last reply Reply Quote 0
          • marcellocM
            marcelloc
            last edited by

            Did you configured error response to 302?
            http://forum.pfsense.org/index.php/topic,41747.msg225863.html#msg225863

            Treinamentos de Elite: http://sys-squad.com

            Help a community developer! ;D

            1 Reply Last reply Reply Quote 0
            • C
              codemarauder
              last edited by

              No. It's set at "int error page (enter error message)"

              It's not a browser cache issue. I have also tested simply doing

              "telnet <ip-address>3128"

              and requesting page with

              "GET http://in.rediff.com HTTP/1.0"
              <enter><enter>SquidGuard tells in the log whenever it kicks a scheduler by logging " recalculating alarm in xxx seconds" depending on how many seconds are remaining to kick on or off a scheduler.

              My observation is that it forgets about it's timekeeping job, until kicked with a reconfigure command.</enter></enter></ip-address>

              1 Reply Last reply Reply Quote 0
              • K
                kalu
                last edited by

                i agree with codemarauder

                i love pfsense because i love open source.

                1 Reply Last reply Reply Quote 0
                • C
                  codemarauder
                  last edited by

                  Bumping just to see if there is any interest alive in resolving the issue.

                  I am still doing "Apply" every 30 mins to keep its scheduler sane.

                  1 Reply Last reply Reply Quote 0
                  • marcellocM
                    marcelloc
                    last edited by

                    You can workaround this with a script on cron until somebody finds what is wrong.

                    Treinamentos de Elite: http://sys-squad.com

                    Help a community developer! ;D

                    1 Reply Last reply Reply Quote 0
                    • P
                      phil.davis
                      last edited by

                      I am hoping to test soon on a 2.1DEV test system to see if FreeBSD 8.3 is any better or different. I am just having trouble getting Squid to install on 2.1 at the moment.

                      As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
                      If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

                      1 Reply Last reply Reply Quote 0
                      • marcellocM
                        marcelloc
                        last edited by

                        You can install squid using pkg_add.

                        Take a look on files.pfsense.org

                        After you copy squid link, just do Pkg_add -r link_to_squid_package from console

                        Treinamentos de Elite: http://sys-squad.com

                        Help a community developer! ;D

                        1 Reply Last reply Reply Quote 0
                        • M
                          muffin
                          last edited by

                          @marcelloc:

                          You can workaround this with a script on cron until somebody finds what is wrong.

                          What would the command be to restart squidguard?

                          1 Reply Last reply Reply Quote 0
                          • P
                            phil.davis
                            last edited by

                            On my test 2.1DEV 1G nanobsd system, I did:

                            pkg_add -r http://files.pfsense.org/packages/8/All/squid-2.7.9_1.tbz

                            It loads dependencies also, (cyrus, openldap, perl) spits out a lot of messages about things that don't exist during the perl phase. But none of this installs the pfSense-specific bits - the items on the web configurator menus and the php that goes with it. But, of course, it doesn't show up in "Installed Packages". So I can't configure Squid using the web configurator. It would be nice if the "Available Packages" list showed newer versions of the packages. But I have no idea how that list is loaded from a server somewhere.

                            Am I trying to do this all too early? Are the packages for 2.1DEV not up and running properly yet?
                            or
                            Are there more commands I can execute to install all the remaining pfSense bits of the package?

                            Also, how do I know which version and type of packages are supposed to go with 2.1DEV?

                            There are new tbz packages available dated 5 March, but there are also pbi packages with the same version numbers that have been there a while. I guess that the pbi packages are intended for using pbi_add with future systems based on FreeBSD9.

                            How does the "Available Packages" page know which version to offer?

                            Sorry for all the questions - I think I now need to read up on the whole development environment to get involved with testing or debugging!

                            As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
                            If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

                            1 Reply Last reply Reply Quote 0
                            • marcellocM
                              marcelloc
                              last edited by

                              I think the way cino does to install packages on 2.1 on his 2.1 pfsense are

                              Install pfsense package with gui and then go to console
                              Install freebsd package with pkg_add.

                              Treinamentos de Elite: http://sys-squad.com

                              Help a community developer! ;D

                              1 Reply Last reply Reply Quote 0
                              • P
                                phil.davis
                                last edited by

                                I started agaain with a freshly made CF card of 2.1-DEVELOPMENT. Although the "Available Packages" page just show 2.7.9, it actually fetches the 2.7.9_1 pbi file. I discovered that 2.1 is usig the pbi package system, so it is the pbi files that are used for this.
                                squid loads, I take all the defaults then just select "transparent proxy". It doesn't start, no "squid" user and no /var/squid/cache, so I did

                                pw useradd -g proxy -s /sbin/nologin -d /var/squid -n squid
                                chown -R squid /var/squid
                                mkdir /var/squid/cache
                                squid -z

                                This makes the squid user, gives it rights to /var/squid, makes the cache dir and initialises the cache.

                                Now /var/squid/logs/cache.log has good-looking messages in it. A process starts, but thenn it is gone by the time I can look for it from the command line. So there is some other issue still with getting squid running on 2.1-DEVELOPMENT (at least with nanobsd).

                                I will post this in the more appropriate 2.1 forum topic.

                                As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
                                If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

                                1 Reply Last reply Reply Quote 0
                                • W
                                  wibz
                                  last edited by

                                  any workaround on this problem ?
                                  a cron job to restart squidguard or a fix on squidguard config it self ?

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.