Squid 3.3.4 package for pfsense with ssl filtering

marcelloc

I got this when I start Squid (that stops immediatly)

What config are you using? reverse proxy? normal proxy? did you configured a valid CA for squid?

While using transparent proxy, do not select loopback interface.

stanthewizard

I have removed 3.3.4

I followed your commands line for 3.3.5. But no squid … after reinstallation, I'll see if I still have the error message.

Thanks for your help

marcelloc

@stanthewizard:

I followed your commands line for 3.3.5. But no squid … after reinstallation, I'll see if I still have the error message.

fill ssl fields (port, etc) and save config.

check if all libs are there with squid -v

stanthewizard

I don't understand
squid -v give me a lot of file.

but no squid in menu or packages :-X

marcelloc

@stanthewizard:

I don't understand
squid -v give me a lot of file.

but no squid in menu or packages :-X

The upgrade process from 3.3.4 to 3.3.5 is only on console. You do not need to remove squid3-dev package on gui.

stanthewizard

Damned

How do I reinstall the console ?

Thanks

stanthewizard

On one of the Pfsense 2.1RC0 … I nailed the SSL Certificat culprit.
The service is UP with this in the log:

php: /status_services.php: The command '/usr/local/etc/rc.d/squid.sh stop' returned exit code '1', the output was '2013/06/07 08:02:02| ERROR: Directive 'ignore_expect_100' is obsolete. squid: No running copy'

marcelloc

@stanthewizard:

How do I reinstall ~~the~~ on console ?

Reinstall package squid3-dev via gui.

Go to console/ssh, remove with pkg_delete squid-3.3.4 and install using pkg_add squid-3.3.5.

@stanthewizard:

ERROR: Directive 'ignore_expect_100' is obsolete. squid: No running copy'

I've pushed a fix with no version bump. a package reinstall should fix it.

If you what to just manual update it, run these two fetch cmd on console

fetch -o /usr/local/pkg/squid_reverse.inc https://raw.github.com/pfsense/pfsense-packages/8ba97bb7780495943c2d50547514d5b388d06329/config/squid3/33/squid_reverse.inc
fetch -o /usr/local/pkg/squid_reverse_general.xml https://raw.github.com/pfsense/pfsense-packages/8ba97bb7780495943c2d50547514d5b388d06329/config/squid3/33/squid_reverse_general.xml

stanthewizard

Aouch

with pkg_add

pkg_add: can't stat package file 'squid-3.3.5'

:-\

marcelloc

@stanthewizard:

pkg_add: can't stat package file 'squid-3.3.5'

white url are you using to fetch squid 3.3.5?

stanthewizard

sorry I don't understand

I think I have no specific url

marcelloc

@stanthewizard:

sorry I don't understand

On console/ssh use pkg_delete to remove squid-3.3.4 and pkg_add to get squid 3.3.5

i386 systems
pkg_add -r http://e-sac.siteseguro.ws/packages/8/All/squid-3.3.5.tbz

amd64 systems
pkg_add -r http://e-sac.siteseguro.ws/packages/amd64/8/All/squid-3.3.5.tbz

stanthewizard

OK

I installed it … but nothing in the GUI packages ...

Did I do something wrong ?

marcelloc

@stanthewizard:

Did I do something wrong ?

You forgot to install squid3-dev package before doing pkgdell/add on console.

stanthewizard

At last It works

Thanks

BTW
with squid 3.3.5 there is a bug in 2.1 RC0 … endless loop updating package

marcelloc

@stanthewizard:

At last It works

Thanks

BTW
with squid 3.3.5 there is a bug in 2.1 RC0 … endless loop updating package

During firmware upgrade?

stanthewizard

At reboot

Warning about package updating …. endlessly

quetzalcoatl

I always use the latest snapshot, install new 64 bit snapshot every week during the night when no client of mine browses the internet.

I also install squid 3.3.5 package or whatever is the latest.

I never install squidguard or any other package. The absolutely only package i have installed is squid 3.3.x

Following marcello instructions i got some caching, but it's a ridiculous 1% byte hit ratio. Most of the windows updates are not cache anymore.(maybe they are stored into cache but not server, or not even stored at all).

Also there are some pages that get updated daily and squid does not detect the update.

www.filehippo.com and www.jalopnik.com are 2 of the pages that i noticed that squid does not detect that they have been updated…..
Sometimes even a week later squid is showing me the week old page, and both filehippo and jalopnik update daily.

The only way to see those updated pages is turning the squid service off.

There is an option with a checkbox that says "Enable offline mode" and i keep that off otherwise squid will never check tons of page updates.
Enable offline mode is off in my squid.

I always do have some custom refresh options in the "custom options" field.....but even if i leave that field empty, save and restart the whole pfsense machine, i never get a decent hit ratio or byte hit ratio.

I don't even ask for youtube caching because i know it's hard and complicated, but at least some caching like before with ms windows updates, ms office updates, and exe files caching.

I used to be able to download the winrar, winamp, VLC player and more files at 180 mb/s using older squids (when it was already downloaded once).

Now with 3.3.x i never get the cached file, it always starts downloading again at 24kb/s........

Am I the only one with this issue? what am i doing wrong?

marcelloc

@quetzalcoatl:

Am I the only one with this issue? what am i doing wrong?

Did you disabled dynamic content? This behavior/issue happens when its enabled.

Nachtfalke

Hi,

are the "known bugs" on the very first post of this thread still persistent?