Squid3 - New GUI with sync, normal and reverse proxy

technical

squid -k rotate -f /usr/local/etc/squid/squid.conf does it.

marchelloc it does not work. still access.log file include 12.06.2013 events.
installed packages

squid3 3.1.20 pkg 2.0.6
squidguard 1.4_4 pkg v.1.9.5
Lightsquid 1.8.2 pkg v.2.32

Tikimotel

Does any version of Squidguard work with this -dev version of squid? I cant seem to get the Service to START.

If you reinstalled the packages, sometimes squid is already started without "kids" or "children" active.
Somehow when squid is running it won't take the squidguard process as a child-process.
When that happens, just stop squid via the dashboard or services page and restart using the save button in the proxy server page.

I use squid3-dev with squidGuard-squid3.
With squid3 and onwards I always manually edit the "squidguard_configurator.inc" to use squid3 options for child-processes.


# ------------------------------------------------------------------------------
# squid config options
# ------------------------------------------------------------------------------
define('REDIRECTOR_OPTIONS_REM',   '# squidGuard options');
define('REDIRECTOR_PROGRAM_OPT',   'url_rewrite_program');
define('REDIRECT_BYPASS_OPT',      'url_rewrite_bypass');
define('REDIRECT_CHILDREN_OPT',    'url_rewrite_children');
define('REDIRECTOR_PROCESS_COUNT', '12 startup=8 idle=6 concurrency=0'); # redirector processes count will start with 8 do a max of 12 and idles at 6 (with v3.3+)

technical

marcelloc any news ?

technical

Access.log file still rise marchelloc can u check log rotation on squid3 ?

we are still looking your help. thank you.

marcelloc

Did you tried sarg instead of lightsquid?

You can disable log rotate on squid gui and enable it on sarg.

technical

@marcelloc:

Did you tried sarg instead of lightsquid?

You can disable log rotate on squid gui and enable it on sarg.

many turkish ppl using lightsquid because we translated lightsquid from turkish language http://forum.pfsense.org/index.php/topic,62008.0.html

many ppl must use lightsquid can u check the problem for lightsquid package.

and i ll try it with sarg and inform you.

technical

I ll tryed sarg with log rotate.

there is no change
still not rotated access.log file

check the image's.

sarg1.jpg_thumb

sarg2.jpg_thumb

accesslog.jpg_thumb

marcelloc

Do you have sarg reports created? On my machine it rotates successfully.

Remember to disable log rotating on squid and check sarg script on cron.

Did you tried to reinstall squid package to any other version?

What permissions do you have on squid logs and dir?

technical

@marcelloc:

Do you have sarg reports created? On my machine it rotates successfully.

Remember to disable log rotating on squid and check sarg script on cron.

Did you tried to reinstall squid package to any other version?

What permissions do you have on squid logs and dir?

answer 1 =Do you have sarg reports created? = no i did 1 time using for force there are no auto created reports.
answer 2 =Remember to disable log rotating on squid and check sarg script on cron. = i did check in the screen shots.
answer 3 =Did you tried to reinstall squid package to any other version? =i ll try reinstall , not tryed another version.
answer 4 =What permissions do you have on squid logs and dir? = u see below

/var/squid directory have 0775 chmod.
/var/squid/logs directory have 0777 chmod.
/var/squid/logs/access.log have 0640.
/var/squid/logs/cache.log have 0640.

thank you.

![squid log rotate.jpg_thumb](/public/imported_attachments/1/squid log rotate.jpg_thumb)

sargreport.jpg_thumb

cron.jpg_thumb
![squid log rotate.jpg](/public/imported_attachments/1/squid log rotate.jpg)

marcelloc

If sarg report was created by cron, then your cron is running.

When you run squid -k rotate by hand it works, so your squid is working.

If cron is running and squid is running, I have no idea why your logs are not rotating.

technical

sarg not creating auto reports (this strange)
if im use command like screen shot sarg generating a report
and i ll use for squid rotation command squid -k rotate -f /usr/local/etc/squid/squid.conf (it is not working) there are no rotate logs (really this strange to)

that is a my system log

Jun 25 00:00:14 squid[52049]: Squid Parent: child process 52389 started
Jun 25 00:00:03 php: : executing squid log rotate after sarg.
Jun 25 00:00:02 php: : Sarg: force refresh now with -d date +%d/%m/%Y-date +%d/%m/%Y args, compress(on) and both action after sarg finish.

wtf is that :)

update : (i ll check that command for ssh it shows )

[2.0.3-RELEASE][root@firewall.local]/root(3): /usr/bin/nice -n20 /usr/local/etc/rc.d/squidGuard_logrotate
tail: -: No such file or directory
tail: -: No such file or directory
tail: -: No such file or directory
tail: -: No such file or directory
tail: -: No such file or directory
tail: -: No such file or directory

marcelloc

Are you sure your install is not corrupted?

It looks like tail is missing and cron is not running/working.

technical

@marcelloc:

Are you sure your install is not corrupted?

It looks like tail is missing and cron is not running/working.

if cron is not works how to created that logs correct time ?

Jun 25 00:00:14 squid[52049]: Squid Parent: child process 52389 started
Jun 25 00:00:03 php: : executing squid log rotate after sarg.
Jun 25 00:00:02 php: : Sarg: force refresh now with -d date +%d/%m/%Y-date +%d/%m/%Y args, compress(on) and both action after sarg finish.

cjbujold

Where can I find the correct instructions on using squid 3 reverse proxy with HTTPS.

I been reading several forum entries and several seem to conflict. The situation is I have several HTTPS sites each with their own SSL certificate. Trying to find the best way to implement reverse proxy. Some forums seem to indicate that you can do it with one certificate and others say that you need an ssl certificate for each site. Tried a number of them and none seem to work.

I just want to know how to serve "easily" more than one 443 web site on more than one server using PFSense and Squid 3 reverse proxy for HTTPS. Is there an authoritative guide on this subject which gives step by step directions that actually works every time?

Thanks
cjb

marcelloc

with one extenal ip and an wildcard ssl you can publish as many sites you need with the same domain.

with one external ip and more then one ssl, you may need one port for each site.

diegoriera

Hi,

I config reverse proxy to Exchange, but on RPC over HTTP service show MISS/401. If redirect 443 port to exchange didn't have error.

Result test in https://www.testexchangeconnectivity.com

Additional Details
Attempting to ping RPC endpoint 6001 (Exchange Information Store) on server 5a56cc6d-4eba-4f85-8b64-2e68abd4cbf7@domain.com.
The attempt to ping the endpoint failed.
Tell me more about this issue and how to resolve it

Additional Details
The RPC_E_ACCESS_DENIED error (0x5) was thrown by the RPC Runtime process.

marcelloc

Can you try with squid3-dev fetching missing sasl libs.

Squid 3.1 does not has http 1.1 support but squid3.3 has.

grassu

One more certificate question. Is it possible to use a SAN certificate instead of a wildcard certificate for the reverse proxy?

Thanks,
grassu

diegoriera

Marcelloc, I tryed use Squid3-dev, but had a problem to start squid.

pfSense php: /pkg_mgr_install.php: The command '/usr/local/sbin/squid -f /usr/local/etc/squid/squid.conf' returned exit code '1', the output was '/libexec/ld-elf.so.1: Shared object "libgssapi.so.10" not found, required by "squid"'

diegoriera

marceloc,

Testei o Squid3-Dev, mas com ele ocorre um erro parecido.

Tentando realizar ping no ponto de extremidade RPC 6001 (Exchange Information Store) no servidor 5a56cc6d-4eba-4f85-8b64-2e68abd4cbf7@domain.com.
Falha ao tentar fazer ping no ponto de extremidade.

Detalhes Adicionais
Erro RPC lançado pelo processo de Tempo de Execução RPC. Erro 1818 CallCancelled

Se faço um NAT direto para o Exchange não ocorre erro.

Tentando realizar ping no ponto de extremidade RPC 6001 (Exchange Information Store) no servidor 5a56cc6d-4eba-4f85-8b64-2e68abd4cbf7@domain.com.
Êxito ao fazer ping no ponto de extremidade.

Detalhes Adicionais
Status RPC Ok (0) retornado em 968 ms.

No Log aparece isso.

10.07.2013 18:32:57 207.46.14.63 TCP_MISS_ABORTED/200 https://mail.domain.com/rpc/rpcproxy.dll? - 10.1.0.5
10.07.2013 18:32:27 207.46.14.63 TCP_MISS/401 https://mail.domain.com/rpc/rpcproxy.dll? - 10.1.0.5
10.07.2013 18:32:26 207.46.14.63 TCP_MISS/401 https://mail.domain.com/rpc/rpcproxy.dll? - 10.1.0.5
10.07.2013 18:32:23 207.46.14.63 TCP_MISS/200 https://mail.domain.com/rpc/rpcproxy.dll? - 10.1.0.5
10.07.2013 18:32:23 207.46.14.63 TCP_MISS/401 https://mail.domain.com/rpc/rpcproxy.dll? - 10.1.0.5
10.07.2013 18:32:23 207.46.14.63 TCP_MISS/200 https://mail.domain.com/Rpc/RpcProxy.dll? - 10.1.0.5
10.07.2013 18:32:20 207.46.14.63 TCP_MISS/401 https://mail.domain.com/Rpc/RpcProxy.dll? - 10.1.0.5
10.07.2013 18:32:20 207.46.14.63 TCP_MISS/401 https://mail.domain.com/Rpc/RpcProxy.dll? - 10.1.0.5
10.07.2013 18:32:20 207.46.14.63 TCP_MISS/401 https://mail.domain.com/rpc/rpcproxy.dll? - 10.1.0.5