Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Squid and SquidGuard Configuration problem!!!

    Scheduled Pinned Locked Moved pfSense Packages
    12 Posts 2 Posters 2.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      saej
      last edited by

      Hi all
      I installed squid and squidguard on my pfsesne .(Version 2.0.2-RELEASE (amd64) )
      So when i start squid, it is not work very well, it can't open some host while the squidguard is stop!!!
      What should i do for this problem?
      Please help me…
      Thanks.

      Open source is an open source…Please observe it...

      1 Reply Last reply Reply Quote 0
      • D
        dvserg
        last edited by

        Explore syslog, any messages exists?

        SquidGuardDoc EN  RU Tutorial
        Localization ru_PFSense

        1 Reply Last reply Reply Quote 0
        • S
          saej
          last edited by

          Thank you dvserg…
          But no messages exist in syslog... :-\

          Open source is an open source…Please observe it...

          1 Reply Last reply Reply Quote 0
          • D
            dvserg
            last edited by

            Possible view you config files for squid & squidGuard ?

            SquidGuardDoc EN  RU Tutorial
            Localization ru_PFSense

            1 Reply Last reply Reply Quote 0
            • S
              saej
              last edited by

              Yes i can view config files…

              Open source is an open source…Please observe it...

              1 Reply Last reply Reply Quote 0
              • D
                dvserg
                last edited by

                @saej:

                Yes i can view config files…

                Pls post this files here.

                SquidGuardDoc EN  RU Tutorial
                Localization ru_PFSense

                1 Reply Last reply Reply Quote 0
                • S
                  saej
                  last edited by

                  @dvserg:

                  @saej:

                  Yes i can view config files…

                  Pls post this files here.

                  This file code is :

                  # Do not edit manually !
                  http_port 192.168.1.1:3128
                  icp_port 0
                  
                  pid_filename /var/run/squid.pid
                  cache_effective_user proxy
                  cache_effective_group proxy
                  error_directory /usr/local/etc/squid/errors/English
                  icon_directory /usr/local/etc/squid/icons
                  visible_hostname localhost
                  cache_mgr emadi@matasecure.com
                  access_log /var/squid/logs/access.log
                  cache_log /var/squid/logs/cache.log
                  cache_store_log none
                  logfile_rotate 10
                  shutdown_lifetime 3 seconds
                  # Allow local network(s) on interface(s)
                  acl localnet src  192.168.1.0/255.255.255.0
                  uri_whitespace allow
                  
                  cache_mem 100 MB
                  maximum_object_size_in_memory 128 KB
                  memory_replacement_policy heap GDSF
                  cache_replacement_policy heap LFUDA
                  cache_dir ufs /var/squid/cache 100 16 256
                  minimum_object_size 0 KB
                  maximum_object_size 4 KB
                  offline_mode off
                  cache_swap_low 90
                  cache_swap_high 95
                  
                  # No redirector configured
                  
                  # Setup some default acls
                  acl all src 0.0.0.0/0.0.0.0
                  acl localhost src 127.0.0.1/255.255.255.255
                  acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901  3128 1025-65535 21 70 80 210 280 443 488 563 591 631 777 901 1025-65535
                  acl sslports port 443 563  443
                  acl manager proto cache_object
                  acl purge method PURGE
                  acl connect method CONNECT
                  acl dynamic urlpath_regex cgi-bin \?
                  acl allowed_subnets src 192.168.1.0/24 
                  cache deny dynamic
                  http_access allow manager localhost
                  
                  http_access deny manager
                  http_access allow purge localhost
                  http_access deny purge
                  http_access deny !safeports
                  http_access deny CONNECT !sslports
                  
                  # Always allow localhost connections
                  http_access allow localhost
                  
                  quick_abort_min 0 KB
                  quick_abort_max 0 KB
                  request_body_max_size 0 KB
                  reply_body_max_size 0 deny all
                  delay_pools 1
                  delay_class 1 2
                  delay_parameters 1 -1/-1 -1/-1
                  delay_initial_bucket_level 100
                  # Throttle extensions matched in the url
                  acl throttle_exts urlpath_regex -i "/var/squid/acl/throttle_exts.acl"
                  delay_access 1 allow throttle_exts
                  delay_access 1 deny all
                  
                  auth_param basic program /usr/local/libexec/squid/ncsa_auth /var/etc/squid.passwd
                  auth_param basic children 5
                  auth_param basic realm Please enter your credentials to access the proxy
                  auth_param basic credentialsttl 60 minutes
                  acl password proxy_auth REQUIRED
                  http_access allow password localnet
                  http_access allow password allowed_subnets
                  # Default block all to be sure
                  http_access deny all
                  

                  also i never change this file manualy…
                  Thanks

                  Open source is an open source…Please observe it...

                  1 Reply Last reply Reply Quote 0
                  • D
                    dvserg
                    last edited by

                    Did you configure a proxy filter ?

                    SquidGuardDoc EN  RU Tutorial
                    Localization ru_PFSense

                    1 Reply Last reply Reply Quote 0
                    • S
                      saej
                      last edited by

                      @dvserg:

                      Did you configure a proxy filter ?

                      At the first i configured proxy filter
                      But the proxy filter is disable now…

                      Open source is an open source…Please observe it...

                      1 Reply Last reply Reply Quote 0
                      • D
                        dvserg
                        last edited by

                        @saej:

                        Hi all
                        I installed squid and squidguard on my pfsesne .(Version 2.0.2-RELEASE (amd64) )
                        So when i start squid, it is not work very well, it can't open some host while the squidguard is stop!!!
                        What should i do for this problem?

                        1. configure you proxy server, test how it's work
                        2. configure proxy filter, test how its work with proxy filter.
                        3. browse syslog for errors

                        SquidGuardDoc EN  RU Tutorial
                        Localization ru_PFSense

                        1 Reply Last reply Reply Quote 0
                        • S
                          saej
                          last edited by

                          I just configured proxy server…But it just open every host over ssl (https) ... It can't open http (80 port) ... why?

                          Open source is an open source…Please observe it...

                          1 Reply Last reply Reply Quote 0
                          • D
                            dvserg
                            last edited by

                            @saej:

                            I just configured proxy server…But it just open every host over ssl (https) ... It can't open http (80 port) ... why?

                            Enter proxy settings to you browser.

                            SquidGuardDoc EN  RU Tutorial
                            Localization ru_PFSense

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.