Squid3 - New GUI with sync, normal and reverse proxy

Tikimotel · Jun 15, 2013, 8:22 AM

Does any version of Squidguard work with this -dev version of squid? I cant seem to get the Service to START.

If you reinstalled the packages, sometimes squid is already started without "kids" or "children" active.
Somehow when squid is running it won't take the squidguard process as a child-process.
When that happens, just stop squid via the dashboard or services page and restart using the save button in the proxy server page.

I use squid3-dev with squidGuard-squid3.
With squid3 and onwards I always manually edit the "squidguard_configurator.inc" to use squid3 options for child-processes.


# ------------------------------------------------------------------------------
# squid config options
# ------------------------------------------------------------------------------
define('REDIRECTOR_OPTIONS_REM',   '# squidGuard options');
define('REDIRECTOR_PROGRAM_OPT',   'url_rewrite_program');
define('REDIRECT_BYPASS_OPT',      'url_rewrite_bypass');
define('REDIRECT_CHILDREN_OPT',    'url_rewrite_children');
define('REDIRECTOR_PROCESS_COUNT', '12 startup=8 idle=6 concurrency=0'); # redirector processes count will start with 8 do a max of 12 and idles at 6 (with v3.3+)

technical · Jun 17, 2013, 2:21 PM

marcelloc any news ?

technical · Jun 21, 2013, 5:19 AM

Access.log file still rise marchelloc can u check log rotation on squid3 ?

we are still looking your help. thank you.

marcelloc · Jun 21, 2013, 11:14 AM

Did you tried sarg instead of lightsquid?

You can disable log rotate on squid gui and enable it on sarg.

technical · Jun 21, 2013, 12:26 PM

@marcelloc:

Did you tried sarg instead of lightsquid?

You can disable log rotate on squid gui and enable it on sarg.

many turkish ppl using lightsquid because we translated lightsquid from turkish language http://forum.pfsense.org/index.php/topic,62008.0.html

many ppl must use lightsquid can u check the problem for lightsquid package.

and i ll try it with sarg and inform you.

technical · Jun 22, 2013, 6:32 AM

I ll tryed sarg with log rotate.

there is no change
still not rotated access.log file

check the image's.

marcelloc · Jun 24, 2013, 4:39 AM

Do you have sarg reports created? On my machine it rotates successfully.

Remember to disable log rotating on squid and check sarg script on cron.

Did you tried to reinstall squid package to any other version?

What permissions do you have on squid logs and dir?

technical · Jun 24, 2013, 5:39 AM

@marcelloc:

Do you have sarg reports created? On my machine it rotates successfully.

Remember to disable log rotating on squid and check sarg script on cron.

Did you tried to reinstall squid package to any other version?

What permissions do you have on squid logs and dir?

answer 1 =Do you have sarg reports created? = no i did 1 time using for force there are no auto created reports.
answer 2 =Remember to disable log rotating on squid and check sarg script on cron. = i did check in the screen shots.
answer 3 =Did you tried to reinstall squid package to any other version? =i ll try reinstall , not tryed another version.
answer 4 =What permissions do you have on squid logs and dir? = u see below

/var/squid directory have 0775 chmod.
/var/squid/logs directory have 0777 chmod.
/var/squid/logs/access.log have 0640.
/var/squid/logs/cache.log have 0640.

thank you.

![squid log rotate.jpg_thumb](/public/imported_attachments/1/squid log rotate.jpg_thumb)

![squid log rotate.jpg](/public/imported_attachments/1/squid log rotate.jpg)

marcelloc · Jun 24, 2013, 8:11 PM

If sarg report was created by cron, then your cron is running.

When you run squid -k rotate by hand it works, so your squid is working.

If cron is running and squid is running, I have no idea why your logs are not rotating.

technical · Jun 25, 2013, 5:31 AM

sarg not creating auto reports (this strange)
if im use command like screen shot sarg generating a report
and i ll use for squid rotation command squid -k rotate -f /usr/local/etc/squid/squid.conf (it is not working) there are no rotate logs (really this strange to)

that is a my system log

Jun 25 00:00:14 squid[52049]: Squid Parent: child process 52389 started
Jun 25 00:00:03 php: : executing squid log rotate after sarg.
Jun 25 00:00:02 php: : Sarg: force refresh now with -d date +%d/%m/%Y-date +%d/%m/%Y args, compress(on) and both action after sarg finish.

wtf is that :)

update : (i ll check that command for ssh it shows )

[2.0.3-RELEASE][root@firewall.local]/root(3): /usr/bin/nice -n20 /usr/local/etc/rc.d/squidGuard_logrotate
tail: -: No such file or directory
tail: -: No such file or directory
tail: -: No such file or directory
tail: -: No such file or directory
tail: -: No such file or directory
tail: -: No such file or directory

marcelloc · Jun 25, 2013, 2:15 PM

Are you sure your install is not corrupted?

It looks like tail is missing and cron is not running/working.

technical · Jun 25, 2013, 2:46 PM

@marcelloc:

Are you sure your install is not corrupted?

It looks like tail is missing and cron is not running/working.

if cron is not works how to created that logs correct time ?

Jun 25 00:00:14 squid[52049]: Squid Parent: child process 52389 started
Jun 25 00:00:03 php: : executing squid log rotate after sarg.
Jun 25 00:00:02 php: : Sarg: force refresh now with -d date +%d/%m/%Y-date +%d/%m/%Y args, compress(on) and both action after sarg finish.

cjbujold · Jun 27, 2013, 6:27 PM

Where can I find the correct instructions on using squid 3 reverse proxy with HTTPS.

I been reading several forum entries and several seem to conflict. The situation is I have several HTTPS sites each with their own SSL certificate. Trying to find the best way to implement reverse proxy. Some forums seem to indicate that you can do it with one certificate and others say that you need an ssl certificate for each site. Tried a number of them and none seem to work.

I just want to know how to serve "easily" more than one 443 web site on more than one server using PFSense and Squid 3 reverse proxy for HTTPS. Is there an authoritative guide on this subject which gives step by step directions that actually works every time?

Thanks
cjb

marcelloc · Jun 27, 2013, 7:07 PM

with one extenal ip and an wildcard ssl you can publish as many sites you need with the same domain.

with one external ip and more then one ssl, you may need one port for each site.

diegoriera · Jul 4, 2013, 8:09 PM

Hi,

I config reverse proxy to Exchange, but on RPC over HTTP service show MISS/401. If redirect 443 port to exchange didn't have error.

Result test in https://www.testexchangeconnectivity.com

Additional Details
Attempting to ping RPC endpoint 6001 (Exchange Information Store) on server 5a56cc6d-4eba-4f85-8b64-2e68abd4cbf7@domain.com.
The attempt to ping the endpoint failed.
Tell me more about this issue and how to resolve it

Additional Details
The RPC_E_ACCESS_DENIED error (0x5) was thrown by the RPC Runtime process.

marcelloc · Jul 5, 2013, 4:53 AM

Can you try with squid3-dev fetching missing sasl libs.

Squid 3.1 does not has http 1.1 support but squid3.3 has.

grassu · Jul 5, 2013, 1:00 PM

One more certificate question. Is it possible to use a SAN certificate instead of a wildcard certificate for the reverse proxy?

Thanks,
grassu

diegoriera · Jul 5, 2013, 7:32 PM

Marcelloc, I tryed use Squid3-dev, but had a problem to start squid.

pfSense php: /pkg_mgr_install.php: The command '/usr/local/sbin/squid -f /usr/local/etc/squid/squid.conf' returned exit code '1', the output was '/libexec/ld-elf.so.1: Shared object "libgssapi.so.10" not found, required by "squid"'

diegoriera · Jul 10, 2013, 9:42 PM

marceloc,

Testei o Squid3-Dev, mas com ele ocorre um erro parecido.

Tentando realizar ping no ponto de extremidade RPC 6001 (Exchange Information Store) no servidor 5a56cc6d-4eba-4f85-8b64-2e68abd4cbf7@domain.com.
Falha ao tentar fazer ping no ponto de extremidade.

Detalhes Adicionais
Erro RPC lançado pelo processo de Tempo de Execução RPC. Erro 1818 CallCancelled

Se faço um NAT direto para o Exchange não ocorre erro.

Tentando realizar ping no ponto de extremidade RPC 6001 (Exchange Information Store) no servidor 5a56cc6d-4eba-4f85-8b64-2e68abd4cbf7@domain.com.
Êxito ao fazer ping no ponto de extremidade.

Detalhes Adicionais
Status RPC Ok (0) retornado em 968 ms.

No Log aparece isso.

10.07.2013 18:32:57 207.46.14.63 TCP_MISS_ABORTED/200 https://mail.domain.com/rpc/rpcproxy.dll? - 10.1.0.5
10.07.2013 18:32:27 207.46.14.63 TCP_MISS/401 https://mail.domain.com/rpc/rpcproxy.dll? - 10.1.0.5
10.07.2013 18:32:26 207.46.14.63 TCP_MISS/401 https://mail.domain.com/rpc/rpcproxy.dll? - 10.1.0.5
10.07.2013 18:32:23 207.46.14.63 TCP_MISS/200 https://mail.domain.com/rpc/rpcproxy.dll? - 10.1.0.5
10.07.2013 18:32:23 207.46.14.63 TCP_MISS/401 https://mail.domain.com/rpc/rpcproxy.dll? - 10.1.0.5
10.07.2013 18:32:23 207.46.14.63 TCP_MISS/200 https://mail.domain.com/Rpc/RpcProxy.dll? - 10.1.0.5
10.07.2013 18:32:20 207.46.14.63 TCP_MISS/401 https://mail.domain.com/Rpc/RpcProxy.dll? - 10.1.0.5
10.07.2013 18:32:20 207.46.14.63 TCP_MISS/401 https://mail.domain.com/Rpc/RpcProxy.dll? - 10.1.0.5
10.07.2013 18:32:20 207.46.14.63 TCP_MISS/401 https://mail.domain.com/rpc/rpcproxy.dll? - 10.1.0.5

Tikimotel · Jul 17, 2013, 7:54 AM

Please upload the pbi first before updating the package information. :'(

Beginning package installation for squid3-dev .
Downloading package configuration file... done.
Saving updated package information... done.
Downloading squid3-dev and its dependencies... 
Checking for package installation... 
 Downloading http://files.pfsense.org/packages/amd64/8/All/squid-3.3.8-amd64.pbi ...  could not download from there or http://files.pfsense.org/packages/amd64/8/All//squid-3.3.8-amd64.pbi.
of squid-3.3.8-amd64 failed!

Installation aborted.Backing up libraries... 
Removing package...
Starting package deletion for squid-3.3.8-amd64...done.
Removing squid3-dev components...
Tabs items... done.
Menu items... done.
Services... done.
Loading package instructions...
Include file squid.inc could not be found for inclusion.
Deinstall commands... 
Not executing custom deinstall hook because an include is missing.
Removing package instructions...done.
Auxiliary files... done.
Package XML... done.
Configuration... done.
Cleaning up... done.
Failed to install package.

Installation halted.