Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Time Based restriction with Squid & Squid Guard

    Scheduled Pinned Locked Moved pfSense Packages
    25 Posts 7 Posters 19.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      phil.davis
      last edited by

      I'm sure I noticed this problem on V2.0 also - I don't think that it is a V2.0.1 regression.

      As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
      If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

      1 Reply Last reply Reply Quote 0
      • M
        muffin
        last edited by

        Also having the same problem here running 2.0-RC1.
        Squid: 2.7.9 pkg v.4.3.1
        Squidguard: 1.4_2 pkg v.1.9.1

        I also get the logs about a 'Possible bypass attempt'.

        Any news on a fix? Have been through this thread: http://forum.pfsense.org/index.php/topic,41747.msg222093.html#msg222093
        But the fix did not work for me.

        1 Reply Last reply Reply Quote 0
        • marcellocM
          marcelloc
          last edited by

          Did you configured error response to 302?
          http://forum.pfsense.org/index.php/topic,41747.msg225863.html#msg225863

          Treinamentos de Elite: http://sys-squad.com

          Help a community developer! ;D

          1 Reply Last reply Reply Quote 0
          • C
            codemarauder
            last edited by

            No. It's set at "int error page (enter error message)"

            It's not a browser cache issue. I have also tested simply doing

            "telnet <ip-address>3128"

            and requesting page with

            "GET http://in.rediff.com HTTP/1.0"
            <enter><enter>SquidGuard tells in the log whenever it kicks a scheduler by logging " recalculating alarm in xxx seconds" depending on how many seconds are remaining to kick on or off a scheduler.

            My observation is that it forgets about it's timekeeping job, until kicked with a reconfigure command.</enter></enter></ip-address>

            1 Reply Last reply Reply Quote 0
            • K
              kalu
              last edited by

              i agree with codemarauder

              i love pfsense because i love open source.

              1 Reply Last reply Reply Quote 0
              • C
                codemarauder
                last edited by

                Bumping just to see if there is any interest alive in resolving the issue.

                I am still doing "Apply" every 30 mins to keep its scheduler sane.

                1 Reply Last reply Reply Quote 0
                • marcellocM
                  marcelloc
                  last edited by

                  You can workaround this with a script on cron until somebody finds what is wrong.

                  Treinamentos de Elite: http://sys-squad.com

                  Help a community developer! ;D

                  1 Reply Last reply Reply Quote 0
                  • P
                    phil.davis
                    last edited by

                    I am hoping to test soon on a 2.1DEV test system to see if FreeBSD 8.3 is any better or different. I am just having trouble getting Squid to install on 2.1 at the moment.

                    As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
                    If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

                    1 Reply Last reply Reply Quote 0
                    • marcellocM
                      marcelloc
                      last edited by

                      You can install squid using pkg_add.

                      Take a look on files.pfsense.org

                      After you copy squid link, just do Pkg_add -r link_to_squid_package from console

                      Treinamentos de Elite: http://sys-squad.com

                      Help a community developer! ;D

                      1 Reply Last reply Reply Quote 0
                      • M
                        muffin
                        last edited by

                        @marcelloc:

                        You can workaround this with a script on cron until somebody finds what is wrong.

                        What would the command be to restart squidguard?

                        1 Reply Last reply Reply Quote 0
                        • P
                          phil.davis
                          last edited by

                          On my test 2.1DEV 1G nanobsd system, I did:

                          pkg_add -r http://files.pfsense.org/packages/8/All/squid-2.7.9_1.tbz

                          It loads dependencies also, (cyrus, openldap, perl) spits out a lot of messages about things that don't exist during the perl phase. But none of this installs the pfSense-specific bits - the items on the web configurator menus and the php that goes with it. But, of course, it doesn't show up in "Installed Packages". So I can't configure Squid using the web configurator. It would be nice if the "Available Packages" list showed newer versions of the packages. But I have no idea how that list is loaded from a server somewhere.

                          Am I trying to do this all too early? Are the packages for 2.1DEV not up and running properly yet?
                          or
                          Are there more commands I can execute to install all the remaining pfSense bits of the package?

                          Also, how do I know which version and type of packages are supposed to go with 2.1DEV?

                          There are new tbz packages available dated 5 March, but there are also pbi packages with the same version numbers that have been there a while. I guess that the pbi packages are intended for using pbi_add with future systems based on FreeBSD9.

                          How does the "Available Packages" page know which version to offer?

                          Sorry for all the questions - I think I now need to read up on the whole development environment to get involved with testing or debugging!

                          As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
                          If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

                          1 Reply Last reply Reply Quote 0
                          • marcellocM
                            marcelloc
                            last edited by

                            I think the way cino does to install packages on 2.1 on his 2.1 pfsense are

                            Install pfsense package with gui and then go to console
                            Install freebsd package with pkg_add.

                            Treinamentos de Elite: http://sys-squad.com

                            Help a community developer! ;D

                            1 Reply Last reply Reply Quote 0
                            • P
                              phil.davis
                              last edited by

                              I started agaain with a freshly made CF card of 2.1-DEVELOPMENT. Although the "Available Packages" page just show 2.7.9, it actually fetches the 2.7.9_1 pbi file. I discovered that 2.1 is usig the pbi package system, so it is the pbi files that are used for this.
                              squid loads, I take all the defaults then just select "transparent proxy". It doesn't start, no "squid" user and no /var/squid/cache, so I did

                              pw useradd -g proxy -s /sbin/nologin -d /var/squid -n squid
                              chown -R squid /var/squid
                              mkdir /var/squid/cache
                              squid -z

                              This makes the squid user, gives it rights to /var/squid, makes the cache dir and initialises the cache.

                              Now /var/squid/logs/cache.log has good-looking messages in it. A process starts, but thenn it is gone by the time I can look for it from the command line. So there is some other issue still with getting squid running on 2.1-DEVELOPMENT (at least with nanobsd).

                              I will post this in the more appropriate 2.1 forum topic.

                              As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
                              If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

                              1 Reply Last reply Reply Quote 0
                              • W
                                wibz
                                last edited by

                                any workaround on this problem ?
                                a cron job to restart squidguard or a fix on squidguard config it self ?

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.