Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Squid + SquidGuard Broken - Will Not Start

    Scheduled Pinned Locked Moved pfSense Packages
    20 Posts 2 Posters 8.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      nutt318
      last edited by

      @marcelloc:

      squiguard depends on squid2 install, that's why you see squid-2.7.9_1

      That makes sense.

      So I did the next step and installed squid3, both squid and squidGuard server started but then all of my HTTP traffic was dead, for some reason all traffic wasnt going out. I went ahead and tried a simple reboot, after that it was more broke than before.

      So I did a reset to factory and restored back to a couple weeks ago.

      Not sure how I should go about getting this to work again, any ideas on why both services where started but didnt allow any traffic out?

      1 Reply Last reply Reply Quote 0
      • marcellocM
        marcelloc
        last edited by

        Check what error messages you have during boot process, It will be useful to find what is broken.

        Treinamentos de Elite: http://sys-squad.com

        Help a community developer! ;D

        1 Reply Last reply Reply Quote 0
        • N
          nutt318
          last edited by

          I'm not getting any error messages when starting up the server, however squid starts but squidGuard will not. I've looked into the system log but cannot find any erros when starting the service.

          Is there a way to start squidGuard from the command line?

          1 Reply Last reply Reply Quote 0
          • marcellocM
            marcelloc
            last edited by

            IIRC, squidguard is a squidhelper, so it should be in squid config to startup

            Treinamentos de Elite: http://sys-squad.com

            Help a community developer! ;D

            1 Reply Last reply Reply Quote 0
            • N
              nutt318
              last edited by

              So after shutting down the firewall yesterday and now turning it back on Squid will not start again. I'll also mention that I have 2 identical pieces of hardware and my current production firewall that is in place is not the logs you see. I restored a backup to the test/backup firewall so all settings would be back. Anyways I'm trying to get this going on my backup firewall so when the time comes it will be easy to switch the working one over.

              Should I just completely wipe my backup firewall and start over with the pfSense install, then install all packages, rules, settings, etc? If I do is there anything special on installing squid + squidGuard on a fresh install?

              Again, thanks for the help!

              When trying to start from the console getting the following error:
              [2.0.1-RELEASE][root@pfsense.ps]/root(2): /usr/local/etc/rc.d/squid.sh start
              FATAL: Bungled squid.conf line 4: http_port 127.0.0.1:3128 intercept
              Squid Cache (Version 2.7.STABLE9): Terminated abnormally.

              Here are the system logs: Again both squid and squidGuard fail to start

              Last 100 system log entries
Jun 26 15:28:22	ntop[4359]: THREADMGMT[t713227968]: SIH: Idle host scan thread starting [p4359]
Jun 26 15:28:22	ntop[4359]: THREADMGMT[t713227328]: DNSAR(2): Address resolution thread running
Jun 26 15:28:22	ntop[4359]: THREADMGMT[t718033216]: SFP: Fingerprint scan thread starting [p4359]
Jun 26 15:28:22	ntop[4359]: THREADMGMT[t713227648]: DNSAR(1): Address resolution thread running
Jun 26 15:28:22	ntop[4359]: THREADMGMT[t713227008]: DNSAR(3): Address resolution thread running
Jun 26 15:28:22	ntop[4785]: THREADMGMT[t679481664]: ntop RUNSTATE: PREINIT(1)
Jun 26 15:28:22	ntop[4785]: THREADMGMT[t679481664]: ntop RUNSTATE: INIT(2)
Jun 26 15:28:22	ntop[4359]: GeoIP: loaded config file /usr/local/etc/ntop/GeoLiteCity.dat
Jun 26 15:28:22	ntop[4359]: GeoIP: loaded ASN config file /usr/local/etc/ntop/GeoIPASNum.dat
Jun 26 15:28:22	ntop[4359]: SSL is present but https is disabled: use -W <https port=""> for enabling it
Jun 26 15:28:22	ntop[4359]: INITWEB: Initializing web server
Jun 26 15:28:22	ntop[4359]: INITWEB: Initializing TCP/IP socket connections for web server
Jun 26 15:28:22	ntop[4359]: INITWEB: Initialized socket, port 3000, address (any)
Jun 26 15:28:22	ntop[4359]: INITWEB: Waiting for HTTP connections on port 3000
Jun 26 15:28:22	ntop[4359]: INITWEB: Starting web server
Jun 26 15:28:22	ntop[4359]: THREADMGMT[t713226688]: INITWEB: Started thread for web server
Jun 26 15:28:22	ntop[4359]: Listening on [bge1]
Jun 26 15:28:22	ntop[4359]: Loading Plugins
Jun 26 15:28:22	ntop[4359]: THREADMGMT[t713226688]: WEB: Server connection thread starting [p4359]
Jun 26 15:28:22	ntop[4359]: Note: SIGPIPE handler set (ignore)
Jun 26 15:28:22	ntop[4359]: THREADMGMT[t713226688]: WEB: Server connection thread running [p4359]
Jun 26 15:28:22	ntop[4359]: WEB: ntop's web server is now processing requests
Jun 26 15:28:22	ntop[4359]: Searching for plugins in /usr/local/lib/ntop/plugins
Jun 26 15:28:22	ntop[4359]: CPACKET: Welcome to cPacket.(C) 2008 by Luca Deri
Jun 26 15:28:22	ntop[4359]: ICMP: Welcome to ICMPWatch. (C) 1999-2005 by Luca Deri
Jun 26 15:28:22	ntop[4359]: NETFLOW: Welcome to NetFlow.(C) 2002-11 by Luca Deri
Jun 26 15:28:22	ntop[4359]: RRD: Welcome to Round-Robin Database. (C) 2002-11 by Luca Deri.
Jun 26 15:28:22	ntop[4359]: SFLOW: Welcome to sFlow.(C) 2002-11 by Luca Deri
Jun 26 15:28:22	ntop[4359]: Calling plugin start functions (if any)
Jun 26 15:28:22	ntop[4359]: RRD: Welcome to the RRD plugin
Jun 26 15:28:22	ntop[4359]: RRD: Mask for new directories is 0700
Jun 26 15:28:22	ntop[4359]: RRD: Mask for new files is 0066
Jun 26 15:28:22	ntop[4359]: THREADMGMT: RRD: Started thread (t713226368) for data collection
Jun 26 15:28:22	ntop[4359]: THREADMGMT[t713226368]: RRD: Data collection thread starting [p4359]
Jun 26 15:28:22	ntop[4359]: INIT: Created pid file (/var/run/ntop.pid)
Jun 26 15:28:22	ntop[4359]: Now running as requested user 'root' (0:0)
Jun 26 15:28:22	ntop[4359]: Note: Reporting device initally set to 0 [bge1]
Jun 26 15:28:22	ntop[4359]: THREADMGMT[t679481664]: ntop RUNSTATE: RUN(4)
Jun 26 15:28:22	ntop[4359]: THREADMGMT[t713226048]: NPS(1): Started thread for network packet sniffing [bge1]
Jun 26 15:28:22	ntop[4359]: THREADMGMT[t713226048]: NPS(bge1): pcapDispatch thread starting [p4359]
Jun 26 15:28:22	ntop[4359]: THREADMGMT[t718033216]: SFP: Fingerprint scan thread running [p4359]
Jun 26 15:28:22	ntop[4359]: THREADMGMT[t713226048]: NPS(bge1): pcapDispatch thread running [p4359]
Jun 26 15:28:22	ntop[4359]: THREADMGMT[t713227968]: SIH: Idle host scan thread running [p4359]
Jun 26 15:28:22	check_reload_status: Syncing firewall
Jun 26 15:28:23	check_reload_status: Syncing firewall
Jun 26 15:28:23	php: : SQUID is installed but not started. Not installing "nat" rules.
Jun 26 15:28:24	php: : SQUID is installed but not started. Not installing "pfearly" rules.
Jun 26 15:28:25	php: : SQUID is installed but not started. Not installing "filter" rules.
Jun 26 15:28:25	sshd[3195]: Accepted keyboard-interactive/pam for root from 10.72.40.89 port 56494 ssh2
Jun 26 15:28:27	php: : Starting Squid
Jun 26 15:28:27	squid[24648]: Bungled squid.conf line 4: http_port 127.0.0.1:3128 intercept
Jun 26 15:28:27	php: : The command '/usr/local/sbin/squid -f /usr/local/etc/squid/squid.conf' returned exit code '1', the output was 'FATAL: Bungled squid.conf line 4: http_port 127.0.0.1:3128 intercept Squid Cache (Version 2.7.STABLE9): Terminated abnormally.'
Jun 26 15:28:27	ntop[4359]: CHKVER: Checking current ntop version at version.ntop.org/version.xml
Jun 26 15:28:27	ntop[4359]: CHKVER: Version file is from 'version.ntop.org'
Jun 26 15:28:27	ntop[4359]: CHKVER: as of date is '2011-08-15T11:00:47'
Jun 26 15:28:27	ntop[4359]: CHKVER: This version of ntop is the CURRENT stable version
Jun 26 15:28:28	php: : Starting Squid
Jun 26 15:28:28	squid[28591]: Bungled squid.conf line 4: http_port 127.0.0.1:3128 intercept
Jun 26 15:28:28	php: : The command '/usr/local/sbin/squid -f /usr/local/etc/squid/squid.conf' returned exit code '1', the output was 'FATAL: Bungled squid.conf line 4: http_port 127.0.0.1:3128 intercept Squid Cache (Version 2.7.STABLE9): Terminated abnormally.'
Jun 26 15:28:32	ntop[4359]: THREADMGMT[t724356800]: RRD: Started thread for throughput data collection
Jun 26 15:28:32	ntop[4359]: THREADMGMT[t713226368]: RRD: Data collection thread running [p4359]
Jun 26 15:28:32	ntop[4359]: THREADMGMT[t724356800]: RRD: Throughput data collection: Thread starting [p4359]
Jun 26 15:28:32	ntop[4359]: THREADMGMT[t724356800]: RRD: Throughput data collection: Thread running [p4359]
Jun 26 15:28:37	check_reload_status: Reloading filter
Jun 26 15:28:38	check_reload_status: Reloading filter
Jun 26 15:28:42	php: : SQUID is installed but not started. Not installing "nat" rules.
Jun 26 15:28:43	php: : SQUID is installed but not started. Not installing "pfearly" rules.
Jun 26 15:28:43	php: : SQUID is installed but not started. Not installing "filter" rules.
Jun 26 15:28:49	php: : SQUID is installed but not started. Not installing "nat" rules.
Jun 26 15:28:49	php: : SQUID is installed but not started. Not installing "pfearly" rules.
Jun 26 15:28:49	php: : SQUID is installed but not started. Not installing "filter" rules.
Jun 26 15:28:50	check_reload_status: Syncing firewall
Jun 26 15:28:51	check_reload_status: Syncing firewall
Jun 26 15:28:53	php: : Starting Squid
Jun 26 15:28:53	squid[8601]: Bungled squid.conf line 4: http_port 127.0.0.1:3128 intercept
Jun 26 15:28:53	php: : The command '/usr/local/sbin/squid -f /usr/local/etc/squid/squid.conf' returned exit code '1', the output was 'FATAL: Bungled squid.conf line 4: http_port 127.0.0.1:3128 intercept Squid Cache (Version 2.7.STABLE9): Terminated abnormally.'
Jun 26 15:28:53	php: : Starting Squid
Jun 26 15:28:53	squid[10724]: Bungled squid.conf line 4: http_port 127.0.0.1:3128 intercept
Jun 26 15:28:53	php: : The command '/usr/local/sbin/squid -f /usr/local/etc/squid/squid.conf' returned exit code '1', the output was 'FATAL: Bungled squid.conf line 4: http_port 127.0.0.1:3128 intercept Squid Cache (Version 2.7.STABLE9): Terminated abnormally.'
Jun 26 15:29:03	check_reload_status: Reloading filter
Jun 26 15:29:03	check_reload_status: Syncing firewall
Jun 26 15:29:03	check_reload_status: Reloading filter
Jun 26 15:29:04	check_reload_status: Syncing firewall
Jun 26 15:29:05	squid[27977]: Bungled squid.conf line 4: http_port 127.0.0.1:3128 intercept
Jun 26 15:29:06	php: : IPSEC: One or more IPsec tunnel endpoints has changed its IP. Refreshing.
Jun 26 15:29:06	squid[32891]: Bungled squid.conf line 4: http_port 127.0.0.1:3128 intercept
Jun 26 15:29:07	login: login on ttyv0 as root
Jun 26 15:29:08	php: : SQUID is installed but not started. Not installing "nat" rules.
Jun 26 15:29:09	php: : SQUID is installed but not started. Not installing "pfearly" rules.
Jun 26 15:29:09	php: : SQUID is installed but not started. Not installing "filter" rules.
Jun 26 15:29:10	Squid_Alarm[52438]: Squid has exited. Reconfiguring filter.
Jun 26 15:29:10	Squid_Alarm[52774]: Attempting restart...
Jun 26 15:29:10	squid[53979]: Bungled squid.conf line 4: http_port 127.0.0.1:3128 intercept
Jun 26 15:29:11	Squid_Alarm[55131]: Squid has exited. Reconfiguring filter.
Jun 26 15:29:11	Squid_Alarm[55489]: Attempting restart...
Jun 26 15:29:11	squid[56779]: Bungled squid.conf line 4: http_port 127.0.0.1:3128 intercept
Jun 26 15:29:14	php: : SQUID is installed but not started. Not installing "nat" rules.
Jun 26 15:29:14	php: : SQUID is installed but not started. Not installing "pfearly" rules.
Jun 26 15:29:15	php: : SQUID is installed but not started. Not installing "filter" rules.
Jun 26 15:30:16	squid[62898]: Bungled squid.conf line 4: http_port 127.0.0.1:3128 intercept</https>
              1 Reply Last reply Reply Quote 0
              • N
                nutt318
                last edited by

                So I did a fresh install on my backup firewall server. Installed Squid3, then installed squidGuard. Still getting errors on squidGuard, trying to reinstall the package getting this error.

                Fatal error: Cannot use string offset as an array in /usr/local/pkg/squidguard.inc on line 946

                Trying to remove the package, getting this error. Any ideas?

                Fatal error: Cannot use string offset as an array in /usr/local/pkg/squidguard.inc on line 946

                1 Reply Last reply Reply Quote 0
                • marcellocM
                  marcelloc
                  last edited by

                  Squidguard error says that there is no squid xml config saved.

                  Save squid config setup, install squidguard and then force squid3 install again as squidguard forces squid2.

                  Treinamentos de Elite: http://sys-squad.com

                  Help a community developer! ;D

                  1 Reply Last reply Reply Quote 0
                  • N
                    nutt318
                    last edited by

                    I gave that a shot, now getting this error.

                    squid[7651]: Bungled squid.conf line 4: http_port 127.0.0.1:3128 intercept

                    So here is part of my squid.conf file

                    # This file is automatically generated by pfSense
# Do not edit manually !
http_port 10.72.0.3:3128
http_port 127.0.0.1:3128 intercept
icp_port 7

pid_filename /var/run/squid.pid
cache_effective_user proxy
cache_effective_group proxy
error_default_language English
icon_directory /usr/local/etc/squid/icons
visible_hostname localhost
cache_mgr jaken@popstarnetworks.com
access_log /var/squid/logs/access.log
cache_log /var/squid/logs/cache.log
cache_store_log none
sslcrtd_children 0
logfile_rotate 30
shutdown_lifetime 3 seconds
# Allow local network(s) on interface(s)
acl localnet src  10.72.0.0/16
uri_whitespace strip

acl dynamic urlpath_regex cgi-bin \?
cache deny dynamic
cache_mem 8 MB
maximum_object_size_in_memory 32 KB
memory_replacement_policy heap GDSF
cache_replacement_policy heap LFUDA
cache_dir ufs /var/squid/cache 100 16 256
minimum_object_size 0 KB
maximum_object_size 10 KB
offline_mode off
# No redirector configured
                    1 Reply Last reply Reply Quote 0
                    • marcellocM
                      marcelloc
                      last edited by

                      maybe squidguard installed squid2 after squid3 install.

                      are you sure you reinstalled squid3?

                      if so, try to uninstall squid3 and then install again.

                      Treinamentos de Elite: http://sys-squad.com

                      Help a community developer! ;D

                      1 Reply Last reply Reply Quote 0
                      • N
                        nutt318
                        last edited by

                        I did a pkg_info and saw that squid3 and squid-2.7.9_1 and squidGuard-1.4_4

                        So I uninstalled squid3 and then installed it again and now squid is running.

                        Doing a pkg_info im still showing squid-2.7.9_1, squid-3.1.20, squidGuard-1.4_4.

                        Should squid 2 not be there? Now that squid3 is running what should i try to get squidGuard working?

                        1 Reply Last reply Reply Quote 0
                        • marcellocM
                          marcelloc
                          last edited by

                          @nutt318:

                          Should squid 2 not be there? Now that squid3 is running what should i try to get squidGuard working?

                          Now, just set up squidguard gui.

                          Treinamentos de Elite: http://sys-squad.com

                          Help a community developer! ;D

                          1 Reply Last reply Reply Quote 0
                          • N
                            nutt318
                            last edited by

                            Its working!

                            Thank you soo much Marcelloc

                            As a future reference when installing squid + squidGuard, what should I install first?

                            1 Reply Last reply Reply Quote 0
                            • marcellocM
                              marcelloc
                              last edited by

                              @nutt318:

                              As a future reference when installing squid + squidGuard, what should I install first?

                              squidguard then squid3.

                              if it fails to install, then install squid, squidguard, remove squid install squid3

                              Treinamentos de Elite: http://sys-squad.com

                              Help a community developer! ;D

                              1 Reply Last reply Reply Quote 0
                              • N
                                nutt318
                                last edited by

                                Awesome!

                                Again, thanks for the help

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.