Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Squid 3.3.4 package for pfsense with ssl filtering

    Scheduled Pinned Locked Moved Cache/Proxy
    305 Posts 72 Posters 311.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      msi
      last edited by

      Thanks @workingman, the thread just got a bit long (aka TL;DR) ;-)

      So squid >3.3 is yet quite of a moving target. Anyhow thanks to the packager(s) for all their time put into this fine proxy.

      Update:

      • Since I'm on 2.1 (I have due to H/W support) with PBIs  I put the libs under /usr/pbi/squid-amd64/lib

      • Although the libs work, the build dates suggest they are from FreeBSD 8.1 (base of 2.0.x), I consider

      getting those libs from a patched 8.3 for my 2.1

      1 Reply Last reply Reply Quote 0
      • S
        stanthewizard
        last edited by

        Hello

        Since 2.1 RC1
        Latest Squid doesn't works anymore:

        Aug 6 08:54:33 (squid-1): I don't handle this error well!
        Aug 6 08:54:33 squid[64384]: Squid Parent: (squid-1) process 71825 exited with status 1
        Aug 6 08:54:36 squid[64384]: Squid Parent: (squid-1) process 76944 started
        Aug 6 08:54:38 (squid-1): I don't handle this error well!
        Aug 6 08:54:38 squid[64384]: Squid Parent: (squid-1) process 76944 exited with status 1
        Aug 6 08:54:38 squid[64384]: Squid Parent: (squid-1) process 76944 will not be restarted due to repeated, frequent failures
        Aug 6 08:54:38 squid[64384]: Exiting due to repeated, frequent failures

        Is there a turnaround ?

        1 Reply Last reply Reply Quote 0
        • marcellocM
          marcelloc
          last edited by

          Squid was updated to 3.3.8 but I'm having no time to test if it was working properly or not.

          Treinamentos de Elite: http://sys-squad.com

          Help a community developer! ;D

          1 Reply Last reply Reply Quote 0
          • S
            stanthewizard
            last edited by

            It's working
            juste had to save the settings (with no change)
            Service restarted and didn't crashed

            1 Reply Last reply Reply Quote 0
            • W
              workingman
              last edited by

              Pretty sure I just figured out why my port was CLOSED.

              I had Allow IPv6 disabled under System -> Advanced -> Networking

              After checking that box and restarting squid:

              tcp4      0      0 192.168.56.254.3128  .                    LISTEN

              Finally… a-testing I will go.

              1 Reply Last reply Reply Quote 0
              • I
                itman6770
                last edited by

                hi
                i want to install squid tahat support icap and integrate with anti virus.but i dont now.
                can you help?

                1 Reply Last reply Reply Quote 0
                • marcellocM
                  marcelloc
                  last edited by

                  @itman6770:

                  hi
                  i want to install squid tahat support icap and integrate with anti virus.but i dont now.
                  can you help?

                  It's still under development on squid3-dev

                  Treinamentos de Elite: http://sys-squad.com

                  Help a community developer! ;D

                  1 Reply Last reply Reply Quote 0
                  • P
                    packeteer
                    last edited by

                    I was wondering if Dansguardian is suppose to be working on this version of squid?

                    I am on PFSense 2.1(AMD64). DG works with Squid3 but not the dev version.

                    For some reason DG is unable to connect with Squid3dev.

                    Squid3dev works perfectly on its own.

                    1 Reply Last reply Reply Quote 0
                    • marcellocM
                      marcelloc
                      last edited by

                      I use dansguardian with squid3-dev.

                      What errors are you getting?

                      Treinamentos de Elite: http://sys-squad.com

                      Help a community developer! ;D

                      1 Reply Last reply Reply Quote 0
                      • P
                        packeteer
                        last edited by

                        @marcelloc:

                        I use dansguardian with squid3-dev.

                        What errors are you getting?

                        Dansguardian: error connecting to proxy. Same error as Legion on page 2.

                        I have it upstream to a proxy server on port 3128.

                        works fine with squid3.

                        Thnx

                        1 Reply Last reply Reply Quote 0
                        • marcellocM
                          marcelloc
                          last edited by

                          Check if squid is listening(netstat -an | grep -i listen) on the port you have configured on dansguardian.

                          Treinamentos de Elite: http://sys-squad.com

                          Help a community developer! ;D

                          1 Reply Last reply Reply Quote 0
                          • P
                            packeteer
                            last edited by

                            @marcelloc:

                            Check if squid is listening(netstat -an | grep -i listen) on the port you have configured on dansguardian.

                            It is closed.

                            1 Reply Last reply Reply Quote 0
                            • marcellocM
                              marcelloc
                              last edited by

                              @packeteer:

                              It is closed.

                              Next step is to check why squid is not starting…

                              Treinamentos de Elite: http://sys-squad.com

                              Help a community developer! ;D

                              1 Reply Last reply Reply Quote 0
                              • P
                                packeteer
                                last edited by

                                @marcelloc:

                                @packeteer:

                                It is closed.

                                Next step is to check why squid is not starting…

                                The service is running, just doesn't listen to the port.

                                1 Reply Last reply Reply Quote 0
                                • marcellocM
                                  marcelloc
                                  last edited by

                                  @packeteer:

                                  The service is running, just doesn't listen to the port.

                                  Enable ipv6 on pfsense and then killall and start squid daemon.

                                  It's something on squid 3.3 version, I have a squid 3.3 version on my repo without ipv6 that works fine.

                                  If you do not want to enable ipv6 on your server, install squid 3.3.4 form my repo using pkg_delete and pkg_add from console/ssh

                                  Treinamentos de Elite: http://sys-squad.com

                                  Help a community developer! ;D

                                  1 Reply Last reply Reply Quote 0
                                  • P
                                    packeteer
                                    last edited by

                                    @marcelloc:

                                    @packeteer:

                                    The service is running, just doesn't listen to the port.

                                    Enable ipv6 on pfsense and then killall and start squid daemon.

                                    It's something on squid 3.3 version, I have a squid 3.3 version on my repo without ipv6 that works fine.

                                    If you do not want to enable ipv6 on your server, install squid 3.3.4 form my repo using pkg_delete and pkg_add from console/ssh

                                    Thank you very much! Enabling ipv6 works.

                                    ;D

                                    1 Reply Last reply Reply Quote 0
                                    • A
                                      ataru75
                                      last edited by

                                      MULTIWAN

                                      Hello, you work the proxy-dev ver. 3.3.8 with the multi-WAN? Before working with version 2.7.9 using this guide http://forum.pfsense.org/index.php?topic=60977.0, now I installed version 3.3.8-dev and it does not work. With the release of squid that is found in this post (3.3.4) will it work?
                                      thanks
                                      greetings

                                      1 Reply Last reply Reply Quote 0
                                      • marcellocM
                                        marcelloc
                                        last edited by

                                        Did you upgraded pfsense too?

                                        What version are you using?

                                        Treinamentos de Elite: http://sys-squad.com

                                        Help a community developer! ;D

                                        1 Reply Last reply Reply Quote 0
                                        • D
                                          dld121
                                          last edited by

                                          • If you are getting missing libs erros like Shared object "libgssapi.so.10" not found, required by "squid"',
                                            Copy it from my personal repo or from any freebsd with the same version.
                                            These are libs that are not included on pfsense base install bu required to sasl.
                                            save it to /usr/local/lib
                                            amd64
                                            http://e-sac.siteseguro.ws/pfsense/8/amd64/All/ldd/

                                            i386
                                            http://e-sac.siteseguro.ws/pfsense/8/All/ldd/

                                          • Shared object "libheimntlm.so.10" not found,

                                          David

                                          1 Reply Last reply Reply Quote 0
                                          • D
                                            dld121
                                            last edited by

                                            @marcelloc:

                                            @stanthewizard:

                                            sorry I don't understand

                                            On console/ssh use  pkg_delete to remove squid-3.3.4 and pkg_add to get squid 3.3.5

                                            i386 systems
                                            pkg_add -r http://e-sac.siteseguro.ws/packages/8/All/squid-3.3.5.tbz

                                            amd64 systems
                                            pkg_add -r http://e-sac.siteseguro.ws/packages/amd64/8/All/squid-3.3.5.tbz

                                            Can you provide a URL that is available from the USA?  This URL returns  "Unable to get the … and Operation timed out."

                                            The URL when Pinged gives me an IP address, but I cannot replace the "e-sac.siteseguro.ws" with an IP address and have it work.

                                            David

                                            David

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.