Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Squid and SquidGuard Configuration problem!!!

    Scheduled Pinned Locked Moved pfSense Packages
    12 Posts 2 Posters 2.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      saej
      last edited by

      Thank you dvserg…
      But no messages exist in syslog... :-\

      Open source is an open source…Please observe it...

      1 Reply Last reply Reply Quote 0
      • D
        dvserg
        last edited by

        Possible view you config files for squid & squidGuard ?

        SquidGuardDoc EN  RU Tutorial
        Localization ru_PFSense

        1 Reply Last reply Reply Quote 0
        • S
          saej
          last edited by

          Yes i can view config files…

          Open source is an open source…Please observe it...

          1 Reply Last reply Reply Quote 0
          • D
            dvserg
            last edited by

            @saej:

            Yes i can view config files…

            Pls post this files here.

            SquidGuardDoc EN  RU Tutorial
            Localization ru_PFSense

            1 Reply Last reply Reply Quote 0
            • S
              saej
              last edited by

              @dvserg:

              @saej:

              Yes i can view config files…

              Pls post this files here.

              This file code is :

              # Do not edit manually !
              http_port 192.168.1.1:3128
              icp_port 0
              
              pid_filename /var/run/squid.pid
              cache_effective_user proxy
              cache_effective_group proxy
              error_directory /usr/local/etc/squid/errors/English
              icon_directory /usr/local/etc/squid/icons
              visible_hostname localhost
              cache_mgr emadi@matasecure.com
              access_log /var/squid/logs/access.log
              cache_log /var/squid/logs/cache.log
              cache_store_log none
              logfile_rotate 10
              shutdown_lifetime 3 seconds
              # Allow local network(s) on interface(s)
              acl localnet src  192.168.1.0/255.255.255.0
              uri_whitespace allow
              
              cache_mem 100 MB
              maximum_object_size_in_memory 128 KB
              memory_replacement_policy heap GDSF
              cache_replacement_policy heap LFUDA
              cache_dir ufs /var/squid/cache 100 16 256
              minimum_object_size 0 KB
              maximum_object_size 4 KB
              offline_mode off
              cache_swap_low 90
              cache_swap_high 95
              
              # No redirector configured
              
              # Setup some default acls
              acl all src 0.0.0.0/0.0.0.0
              acl localhost src 127.0.0.1/255.255.255.255
              acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901  3128 1025-65535 21 70 80 210 280 443 488 563 591 631 777 901 1025-65535
              acl sslports port 443 563  443
              acl manager proto cache_object
              acl purge method PURGE
              acl connect method CONNECT
              acl dynamic urlpath_regex cgi-bin \?
              acl allowed_subnets src 192.168.1.0/24 
              cache deny dynamic
              http_access allow manager localhost
              
              http_access deny manager
              http_access allow purge localhost
              http_access deny purge
              http_access deny !safeports
              http_access deny CONNECT !sslports
              
              # Always allow localhost connections
              http_access allow localhost
              
              quick_abort_min 0 KB
              quick_abort_max 0 KB
              request_body_max_size 0 KB
              reply_body_max_size 0 deny all
              delay_pools 1
              delay_class 1 2
              delay_parameters 1 -1/-1 -1/-1
              delay_initial_bucket_level 100
              # Throttle extensions matched in the url
              acl throttle_exts urlpath_regex -i "/var/squid/acl/throttle_exts.acl"
              delay_access 1 allow throttle_exts
              delay_access 1 deny all
              
              auth_param basic program /usr/local/libexec/squid/ncsa_auth /var/etc/squid.passwd
              auth_param basic children 5
              auth_param basic realm Please enter your credentials to access the proxy
              auth_param basic credentialsttl 60 minutes
              acl password proxy_auth REQUIRED
              http_access allow password localnet
              http_access allow password allowed_subnets
              # Default block all to be sure
              http_access deny all
              

              also i never change this file manualy…
              Thanks

              Open source is an open source…Please observe it...

              1 Reply Last reply Reply Quote 0
              • D
                dvserg
                last edited by

                Did you configure a proxy filter ?

                SquidGuardDoc EN  RU Tutorial
                Localization ru_PFSense

                1 Reply Last reply Reply Quote 0
                • S
                  saej
                  last edited by

                  @dvserg:

                  Did you configure a proxy filter ?

                  At the first i configured proxy filter
                  But the proxy filter is disable now…

                  Open source is an open source…Please observe it...

                  1 Reply Last reply Reply Quote 0
                  • D
                    dvserg
                    last edited by

                    @saej:

                    Hi all
                    I installed squid and squidguard on my pfsesne .(Version 2.0.2-RELEASE (amd64) )
                    So when i start squid, it is not work very well, it can't open some host while the squidguard is stop!!!
                    What should i do for this problem?

                    1. configure you proxy server, test how it's work
                    2. configure proxy filter, test how its work with proxy filter.
                    3. browse syslog for errors

                    SquidGuardDoc EN  RU Tutorial
                    Localization ru_PFSense

                    1 Reply Last reply Reply Quote 0
                    • S
                      saej
                      last edited by

                      I just configured proxy server…But it just open every host over ssl (https) ... It can't open http (80 port) ... why?

                      Open source is an open source…Please observe it...

                      1 Reply Last reply Reply Quote 0
                      • D
                        dvserg
                        last edited by

                        @saej:

                        I just configured proxy server…But it just open every host over ssl (https) ... It can't open http (80 port) ... why?

                        Enter proxy settings to you browser.

                        SquidGuardDoc EN  RU Tutorial
                        Localization ru_PFSense

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.