Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Squid3 - New GUI with sync, normal and reverse proxy

    Scheduled Pinned Locked Moved Cache/Proxy
    428 Posts 104 Posters 471.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      Tikimotel
      last edited by

      @arch113:

      Does any version of Squidguard work with this -dev version of squid?  I cant seem to get the Service to START.

      If you reinstalled the packages, sometimes squid is already started without "kids" or "children" active.
      Somehow when squid is running it won't take the squidguard process as a child-process.
      When that happens, just stop squid via the dashboard or services page and restart using the save button in the proxy server page.

      I use squid3-dev with squidGuard-squid3.
      With squid3 and onwards I always manually edit the "squidguard_configurator.inc" to use squid3 options for child-processes.

      
      # ------------------------------------------------------------------------------
      # squid config options
      # ------------------------------------------------------------------------------
      define('REDIRECTOR_OPTIONS_REM',   '# squidGuard options');
      define('REDIRECTOR_PROGRAM_OPT',   'url_rewrite_program');
      define('REDIRECT_BYPASS_OPT',      'url_rewrite_bypass');
      define('REDIRECT_CHILDREN_OPT',    'url_rewrite_children');
      define('REDIRECTOR_PROCESS_COUNT', '12 startup=8 idle=6 concurrency=0'); # redirector processes count will start with 8 do a max of 12 and idles at 6 (with v3.3+)
      
      
      1 Reply Last reply Reply Quote 0
      • technicalT
        technical
        last edited by

        marcelloc any news ?

        Necati Selim GÜNER
        IT Technician

        1 Reply Last reply Reply Quote 0
        • technicalT
          technical
          last edited by

          Access.log file still rise marchelloc can u check log rotation on squid3 ?

          we are still looking your help. thank you.

          Necati Selim GÜNER
          IT Technician

          1 Reply Last reply Reply Quote 0
          • marcellocM
            marcelloc
            last edited by

            Did you tried sarg instead of lightsquid?

            You can disable log rotate on squid gui and enable it on sarg.

            Treinamentos de Elite: http://sys-squad.com

            Help a community developer! ;D

            1 Reply Last reply Reply Quote 0
            • technicalT
              technical
              last edited by

              @marcelloc:

              Did you tried sarg instead of lightsquid?

              You can disable log rotate on squid gui and enable it on sarg.

              many turkish ppl using lightsquid because we translated lightsquid from turkish language http://forum.pfsense.org/index.php/topic,62008.0.html

              many ppl must use lightsquid can u check the problem for lightsquid package.

              and i ll try it with sarg and inform you.

              Necati Selim GÜNER
              IT Technician

              1 Reply Last reply Reply Quote 0
              • technicalT
                technical
                last edited by

                I ll tryed sarg with log rotate.

                there is no change
                still not rotated access.log file

                check the image's.

                sarg1.jpg
                sarg1.jpg_thumb
                sarg2.jpg
                sarg2.jpg_thumb
                accesslog.jpg
                accesslog.jpg_thumb

                Necati Selim GÜNER
                IT Technician

                1 Reply Last reply Reply Quote 0
                • marcellocM
                  marcelloc
                  last edited by

                  Do you have sarg reports created? On my machine it rotates successfully.

                  Remember to disable log rotating on squid and check sarg script on cron.

                  Did you tried to reinstall squid package to any other version?

                  What permissions do you have on squid logs and dir?

                  Treinamentos de Elite: http://sys-squad.com

                  Help a community developer! ;D

                  1 Reply Last reply Reply Quote 0
                  • technicalT
                    technical
                    last edited by

                    @marcelloc:

                    Do you have sarg reports created? On my machine it rotates successfully.

                    Remember to disable log rotating on squid and check sarg script on cron.

                    Did you tried to reinstall squid package to any other version?

                    What permissions do you have on squid logs and dir?

                    answer 1 =Do you have sarg reports created? = no i did 1 time using for force there are no auto created reports.
                    answer 2 =Remember to disable log rotating on squid and check sarg script on cron. = i did check in the screen shots.
                    answer 3 =Did you tried to reinstall squid package to any other version? =i ll try reinstall , not tryed another version.
                    answer 4 =What permissions do you have on squid logs and dir? = u see below

                    /var/squid directory have 0775 chmod.
                    /var/squid/logs directory have 0777 chmod.
                    /var/squid/logs/access.log have 0640.
                    /var/squid/logs/cache.log have 0640.

                    thank you.

                    ![squid log rotate.jpg_thumb](/public/imported_attachments/1/squid log rotate.jpg_thumb)
                    sargreport.jpg
                    sargreport.jpg_thumb
                    cron.jpg
                    cron.jpg_thumb
                    ![squid log rotate.jpg](/public/imported_attachments/1/squid log rotate.jpg)

                    Necati Selim GÜNER
                    IT Technician

                    1 Reply Last reply Reply Quote 0
                    • marcellocM
                      marcelloc
                      last edited by

                      If sarg report was created by cron, then your cron is running.

                      When you run squid -k rotate by hand it works, so your squid is working.

                      If cron is running and squid is running, I have no idea why your logs are not rotating.

                      Treinamentos de Elite: http://sys-squad.com

                      Help a community developer! ;D

                      1 Reply Last reply Reply Quote 0
                      • technicalT
                        technical
                        last edited by

                        sarg not creating auto reports (this strange)
                        if im use command like screen shot sarg generating a report
                        and i ll use for squid rotation command squid -k rotate  -f /usr/local/etc/squid/squid.conf (it is not working) there are no rotate logs (really this strange to)

                        that is a my system log

                        Jun 25 00:00:14 squid[52049]: Squid Parent: child process 52389 started
                        Jun 25 00:00:03 php: : executing squid log rotate after sarg.
                        Jun 25 00:00:02 php: : Sarg: force refresh now with -d date +%d/%m/%Y-date +%d/%m/%Y args, compress(on) and both action after sarg finish.

                        wtf is that :)

                        update : (i ll check that command for ssh it shows )

                        [2.0.3-RELEASE][root@firewall.local]/root(3): /usr/bin/nice -n20 /usr/local/etc/rc.d/squidGuard_logrotate
                        tail: -: No such file or directory
                        tail: -: No such file or directory
                        tail: -: No such file or directory
                        tail: -: No such file or directory
                        tail: -: No such file or directory
                        tail: -: No such file or directory

                        Necati Selim GÜNER
                        IT Technician

                        1 Reply Last reply Reply Quote 0
                        • marcellocM
                          marcelloc
                          last edited by

                          Are you sure your install is not corrupted?

                          It looks like tail is missing and cron is not running/working.

                          Treinamentos de Elite: http://sys-squad.com

                          Help a community developer! ;D

                          1 Reply Last reply Reply Quote 0
                          • technicalT
                            technical
                            last edited by

                            @marcelloc:

                            Are you sure your install is not corrupted?

                            It looks like tail is missing and cron is not running/working.

                            if cron is not works how to created that logs correct time ?

                            Jun 25 00:00:14    squid[52049]: Squid Parent: child process 52389 started
                            Jun 25 00:00:03    php: : executing squid log rotate after sarg.
                            Jun 25 00:00:02    php: : Sarg: force refresh now with -d date +%d/%m/%Y-date +%d/%m/%Y args, compress(on) and both action after sarg finish.

                            Necati Selim GÜNER
                            IT Technician

                            1 Reply Last reply Reply Quote 0
                            • C
                              cjbujold
                              last edited by

                              Where can I find the correct instructions on using squid 3 reverse proxy with HTTPS.

                              I been reading several forum entries and several seem to conflict.  The situation is I have several HTTPS sites each with their own SSL certificate.  Trying to find the best way to implement reverse proxy.  Some forums seem to indicate that you can do it with one certificate and others say that you need an ssl certificate for each site.  Tried a number of them and none seem to work.

                              I just want to know how to serve "easily" more than one 443 web site on more than one server using PFSense and Squid 3 reverse proxy for HTTPS.  Is there an authoritative guide on this subject which gives step by step directions that actually works every time?

                              Thanks
                              cjb

                              1 Reply Last reply Reply Quote 0
                              • marcellocM
                                marcelloc
                                last edited by

                                with one extenal ip and an wildcard ssl you can publish as many sites you need with the same domain.

                                with one external ip and more then one ssl, you may need one port for each site.

                                Treinamentos de Elite: http://sys-squad.com

                                Help a community developer! ;D

                                1 Reply Last reply Reply Quote 0
                                • D
                                  diegoriera
                                  last edited by

                                  Hi,

                                  I config reverse proxy to Exchange, but on RPC over HTTP service show MISS/401. If redirect 443 port to exchange didn't have error.

                                  Result test in https://www.testexchangeconnectivity.com

                                  Additional Details
                                  Attempting to ping RPC endpoint 6001 (Exchange Information Store) on server 5a56cc6d-4eba-4f85-8b64-2e68abd4cbf7@domain.com.
                                  The attempt to ping the endpoint failed.
                                  Tell me more about this issue and how to resolve it

                                  Additional Details
                                  The RPC_E_ACCESS_DENIED error (0x5) was thrown by the RPC Runtime process.

                                  1 Reply Last reply Reply Quote 0
                                  • marcellocM
                                    marcelloc
                                    last edited by

                                    Can you try with squid3-dev fetching missing sasl libs.

                                    Squid 3.1 does not has http 1.1 support but squid3.3 has.

                                    Treinamentos de Elite: http://sys-squad.com

                                    Help a community developer! ;D

                                    1 Reply Last reply Reply Quote 0
                                    • G
                                      grassu
                                      last edited by

                                      One more certificate question. Is it possible to use a SAN certificate instead of a wildcard certificate for the reverse proxy?

                                      Thanks,
                                      grassu

                                      1 Reply Last reply Reply Quote 0
                                      • D
                                        diegoriera
                                        last edited by

                                        Marcelloc, I tryed use Squid3-dev, but had a problem to start squid.

                                        pfSense php: /pkg_mgr_install.php: The command '/usr/local/sbin/squid -f /usr/local/etc/squid/squid.conf' returned exit code '1', the output was '/libexec/ld-elf.so.1: Shared object "libgssapi.so.10" not found, required by "squid"'

                                        1 Reply Last reply Reply Quote 0
                                        • D
                                          diegoriera
                                          last edited by

                                          marceloc,

                                          Testei o Squid3-Dev, mas com ele ocorre um erro parecido.

                                          Tentando realizar ping no ponto de extremidade RPC 6001 (Exchange Information Store) no servidor 5a56cc6d-4eba-4f85-8b64-2e68abd4cbf7@domain.com.
                                          Falha ao tentar fazer ping no ponto de extremidade.

                                          Detalhes Adicionais
                                          Erro RPC lançado pelo processo de Tempo de Execução RPC. Erro 1818 CallCancelled

                                          Se faço um NAT direto para o Exchange não ocorre erro.

                                          Tentando realizar ping no ponto de extremidade RPC 6001 (Exchange Information Store) no servidor 5a56cc6d-4eba-4f85-8b64-2e68abd4cbf7@domain.com.
                                          Êxito ao fazer ping no ponto de extremidade.

                                          Detalhes Adicionais
                                          Status RPC Ok (0) retornado em 968 ms.

                                          No Log aparece isso.

                                          10.07.2013 18:32:57 207.46.14.63 TCP_MISS_ABORTED/200 https://mail.domain.com/rpc/rpcproxy.dll? - 10.1.0.5
                                          10.07.2013 18:32:27 207.46.14.63 TCP_MISS/401 https://mail.domain.com/rpc/rpcproxy.dll? - 10.1.0.5
                                          10.07.2013 18:32:26 207.46.14.63 TCP_MISS/401 https://mail.domain.com/rpc/rpcproxy.dll? - 10.1.0.5
                                          10.07.2013 18:32:23 207.46.14.63 TCP_MISS/200 https://mail.domain.com/rpc/rpcproxy.dll? - 10.1.0.5
                                          10.07.2013 18:32:23 207.46.14.63 TCP_MISS/401 https://mail.domain.com/rpc/rpcproxy.dll? - 10.1.0.5
                                          10.07.2013 18:32:23 207.46.14.63 TCP_MISS/200 https://mail.domain.com/Rpc/RpcProxy.dll? - 10.1.0.5
                                          10.07.2013 18:32:20 207.46.14.63 TCP_MISS/401 https://mail.domain.com/Rpc/RpcProxy.dll? - 10.1.0.5
                                          10.07.2013 18:32:20 207.46.14.63 TCP_MISS/401 https://mail.domain.com/Rpc/RpcProxy.dll? - 10.1.0.5
                                          10.07.2013 18:32:20 207.46.14.63 TCP_MISS/401 https://mail.domain.com/rpc/rpcproxy.dll? - 10.1.0.5

                                          1 Reply Last reply Reply Quote 0
                                          • T
                                            Tikimotel
                                            last edited by

                                            Please upload the pbi first before updating the package information. :'(

                                            Beginning package installation for squid3-dev .
                                            Downloading package configuration file... done.
                                            Saving updated package information... done.
                                            Downloading squid3-dev and its dependencies... 
                                            Checking for package installation... 
                                             Downloading http://files.pfsense.org/packages/amd64/8/All/squid-3.3.8-amd64.pbi ...  could not download from there or http://files.pfsense.org/packages/amd64/8/All//squid-3.3.8-amd64.pbi.
                                            of squid-3.3.8-amd64 failed!
                                            
                                            Installation aborted.Backing up libraries... 
                                            Removing package...
                                            Starting package deletion for squid-3.3.8-amd64...done.
                                            Removing squid3-dev components...
                                            Tabs items... done.
                                            Menu items... done.
                                            Services... done.
                                            Loading package instructions...
                                            Include file squid.inc could not be found for inclusion.
                                            Deinstall commands... 
                                            Not executing custom deinstall hook because an include is missing.
                                            Removing package instructions...done.
                                            Auxiliary files... done.
                                            Package XML... done.
                                            Configuration... done.
                                            Cleaning up... done.
                                            Failed to install package.
                                            
                                            Installation halted.
                                            
                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.