Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Squid and SquidGuard Configuration problem!!!

    Scheduled Pinned Locked Moved pfSense Packages
    12 Posts 2 Posters 2.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      dvserg
      last edited by

      Explore syslog, any messages exists?

      SquidGuardDoc EN  RU Tutorial
      Localization ru_PFSense

      1 Reply Last reply Reply Quote 0
      • S
        saej
        last edited by

        Thank you dvserg…
        But no messages exist in syslog... :-\

        Open source is an open source…Please observe it...

        1 Reply Last reply Reply Quote 0
        • D
          dvserg
          last edited by

          Possible view you config files for squid & squidGuard ?

          SquidGuardDoc EN  RU Tutorial
          Localization ru_PFSense

          1 Reply Last reply Reply Quote 0
          • S
            saej
            last edited by

            Yes i can view config files…

            Open source is an open source…Please observe it...

            1 Reply Last reply Reply Quote 0
            • D
              dvserg
              last edited by

              @saej:

              Yes i can view config files…

              Pls post this files here.

              SquidGuardDoc EN  RU Tutorial
              Localization ru_PFSense

              1 Reply Last reply Reply Quote 0
              • S
                saej
                last edited by

                @dvserg:

                @saej:

                Yes i can view config files…

                Pls post this files here.

                This file code is :

                # Do not edit manually !
                http_port 192.168.1.1:3128
                icp_port 0
                
                pid_filename /var/run/squid.pid
                cache_effective_user proxy
                cache_effective_group proxy
                error_directory /usr/local/etc/squid/errors/English
                icon_directory /usr/local/etc/squid/icons
                visible_hostname localhost
                cache_mgr emadi@matasecure.com
                access_log /var/squid/logs/access.log
                cache_log /var/squid/logs/cache.log
                cache_store_log none
                logfile_rotate 10
                shutdown_lifetime 3 seconds
                # Allow local network(s) on interface(s)
                acl localnet src  192.168.1.0/255.255.255.0
                uri_whitespace allow
                
                cache_mem 100 MB
                maximum_object_size_in_memory 128 KB
                memory_replacement_policy heap GDSF
                cache_replacement_policy heap LFUDA
                cache_dir ufs /var/squid/cache 100 16 256
                minimum_object_size 0 KB
                maximum_object_size 4 KB
                offline_mode off
                cache_swap_low 90
                cache_swap_high 95
                
                # No redirector configured
                
                # Setup some default acls
                acl all src 0.0.0.0/0.0.0.0
                acl localhost src 127.0.0.1/255.255.255.255
                acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901  3128 1025-65535 21 70 80 210 280 443 488 563 591 631 777 901 1025-65535
                acl sslports port 443 563  443
                acl manager proto cache_object
                acl purge method PURGE
                acl connect method CONNECT
                acl dynamic urlpath_regex cgi-bin \?
                acl allowed_subnets src 192.168.1.0/24 
                cache deny dynamic
                http_access allow manager localhost
                
                http_access deny manager
                http_access allow purge localhost
                http_access deny purge
                http_access deny !safeports
                http_access deny CONNECT !sslports
                
                # Always allow localhost connections
                http_access allow localhost
                
                quick_abort_min 0 KB
                quick_abort_max 0 KB
                request_body_max_size 0 KB
                reply_body_max_size 0 deny all
                delay_pools 1
                delay_class 1 2
                delay_parameters 1 -1/-1 -1/-1
                delay_initial_bucket_level 100
                # Throttle extensions matched in the url
                acl throttle_exts urlpath_regex -i "/var/squid/acl/throttle_exts.acl"
                delay_access 1 allow throttle_exts
                delay_access 1 deny all
                
                auth_param basic program /usr/local/libexec/squid/ncsa_auth /var/etc/squid.passwd
                auth_param basic children 5
                auth_param basic realm Please enter your credentials to access the proxy
                auth_param basic credentialsttl 60 minutes
                acl password proxy_auth REQUIRED
                http_access allow password localnet
                http_access allow password allowed_subnets
                # Default block all to be sure
                http_access deny all
                

                also i never change this file manualy…
                Thanks

                Open source is an open source…Please observe it...

                1 Reply Last reply Reply Quote 0
                • D
                  dvserg
                  last edited by

                  Did you configure a proxy filter ?

                  SquidGuardDoc EN  RU Tutorial
                  Localization ru_PFSense

                  1 Reply Last reply Reply Quote 0
                  • S
                    saej
                    last edited by

                    @dvserg:

                    Did you configure a proxy filter ?

                    At the first i configured proxy filter
                    But the proxy filter is disable now…

                    Open source is an open source…Please observe it...

                    1 Reply Last reply Reply Quote 0
                    • D
                      dvserg
                      last edited by

                      @saej:

                      Hi all
                      I installed squid and squidguard on my pfsesne .(Version 2.0.2-RELEASE (amd64) )
                      So when i start squid, it is not work very well, it can't open some host while the squidguard is stop!!!
                      What should i do for this problem?

                      1. configure you proxy server, test how it's work
                      2. configure proxy filter, test how its work with proxy filter.
                      3. browse syslog for errors

                      SquidGuardDoc EN  RU Tutorial
                      Localization ru_PFSense

                      1 Reply Last reply Reply Quote 0
                      • S
                        saej
                        last edited by

                        I just configured proxy server…But it just open every host over ssl (https) ... It can't open http (80 port) ... why?

                        Open source is an open source…Please observe it...

                        1 Reply Last reply Reply Quote 0
                        • D
                          dvserg
                          last edited by

                          @saej:

                          I just configured proxy server…But it just open every host over ssl (https) ... It can't open http (80 port) ... why?

                          Enter proxy settings to you browser.

                          SquidGuardDoc EN  RU Tutorial
                          Localization ru_PFSense

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.