Squid 3.3.4 package for pfsense with ssl filtering

workingman

Grab the libs from the first post and copy to /usr/local/lib

squid should run.. I'm just having weird issues where it looks like pf is blocking my squid port.

msi

Thanks @workingman, the thread just got a bit long (aka TL;DR) ;-)

So squid >3.3 is yet quite of a moving target. Anyhow thanks to the packager(s) for all their time put into this fine proxy.

Update:

Since I'm on 2.1 (I have due to H/W support) with PBIs I put the libs under /usr/pbi/squid-amd64/lib
Although the libs work, the build dates suggest they are from FreeBSD 8.1 (base of 2.0.x), I consider

getting those libs from a patched 8.3 for my 2.1

stanthewizard

Hello

Since 2.1 RC1
Latest Squid doesn't works anymore:

Aug 6 08:54:33 (squid-1): I don't handle this error well!
Aug 6 08:54:33 squid[64384]: Squid Parent: (squid-1) process 71825 exited with status 1
Aug 6 08:54:36 squid[64384]: Squid Parent: (squid-1) process 76944 started
Aug 6 08:54:38 (squid-1): I don't handle this error well!
Aug 6 08:54:38 squid[64384]: Squid Parent: (squid-1) process 76944 exited with status 1
Aug 6 08:54:38 squid[64384]: Squid Parent: (squid-1) process 76944 will not be restarted due to repeated, frequent failures
Aug 6 08:54:38 squid[64384]: Exiting due to repeated, frequent failures

Is there a turnaround ?

marcelloc

Squid was updated to 3.3.8 but I'm having no time to test if it was working properly or not.

stanthewizard

It's working
juste had to save the settings (with no change)
Service restarted and didn't crashed

workingman

Pretty sure I just figured out why my port was CLOSED.

I had Allow IPv6 disabled under System -> Advanced -> Networking

After checking that box and restarting squid:

tcp4 0 0 192.168.56.254.3128 . LISTEN

Finally… a-testing I will go.

itman6770

hi
i want to install squid tahat support icap and integrate with anti virus.but i dont now.
can you help?

marcelloc

@itman6770:

hi
i want to install squid tahat support icap and integrate with anti virus.but i dont now.
can you help?

It's still under development on squid3-dev

packeteer

I was wondering if Dansguardian is suppose to be working on this version of squid?

I am on PFSense 2.1(AMD64). DG works with Squid3 but not the dev version.

For some reason DG is unable to connect with Squid3dev.

Squid3dev works perfectly on its own.

marcelloc

I use dansguardian with squid3-dev.

What errors are you getting?

packeteer

@marcelloc:

I use dansguardian with squid3-dev.

What errors are you getting?

Dansguardian: error connecting to proxy. Same error as Legion on page 2.

I have it upstream to a proxy server on port 3128.

works fine with squid3.

Thnx

marcelloc

Check if squid is listening(netstat -an | grep -i listen) on the port you have configured on dansguardian.

packeteer

@marcelloc:

Check if squid is listening(netstat -an | grep -i listen) on the port you have configured on dansguardian.

It is closed.

marcelloc

@packeteer:

It is closed.

Next step is to check why squid is not starting…

packeteer

@marcelloc:

@packeteer:

It is closed.

Next step is to check why squid is not starting…

The service is running, just doesn't listen to the port.

marcelloc

@packeteer:

The service is running, just doesn't listen to the port.

Enable ipv6 on pfsense and then killall and start squid daemon.

It's something on squid 3.3 version, I have a squid 3.3 version on my repo without ipv6 that works fine.

If you do not want to enable ipv6 on your server, install squid 3.3.4 form my repo using pkg_delete and pkg_add from console/ssh

packeteer

@marcelloc:

@packeteer:

The service is running, just doesn't listen to the port.

Enable ipv6 on pfsense and then killall and start squid daemon.

It's something on squid 3.3 version, I have a squid 3.3 version on my repo without ipv6 that works fine.

If you do not want to enable ipv6 on your server, install squid 3.3.4 form my repo using pkg_delete and pkg_add from console/ssh

Thank you very much! Enabling ipv6 works.

;D

ataru75

MULTIWAN

Hello, you work the proxy-dev ver. 3.3.8 with the multi-WAN? Before working with version 2.7.9 using this guide http://forum.pfsense.org/index.php?topic=60977.0, now I installed version 3.3.8-dev and it does not work. With the release of squid that is found in this post (3.3.4) will it work?
thanks
greetings

marcelloc

Did you upgraded pfsense too?

What version are you using?

dld121

If you are getting missing libs erros like Shared object "libgssapi.so.10" not found, required by "squid"',
Copy it from my personal repo or from any freebsd with the same version.
These are libs that are not included on pfsense base install bu required to sasl.
save it to /usr/local/lib
amd64
http://e-sac.siteseguro.ws/pfsense/8/amd64/All/ldd/

i386
http://e-sac.siteseguro.ws/pfsense/8/All/ldd/

Shared object "libheimntlm.so.10" not found,