Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Squid proxy

    Scheduled Pinned Locked Moved pfSense Packages
    16 Posts 3 Posters 3.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • KOMK
      KOM
      last edited by

      With just Squid installed, how doesn't it work?  Timeout?  Error?

      Could you please show me your screens for Services - Proxy server - General and Services - Proxy server - Access control?

      If you use SSH to shell in, check your /var/squid/logs/access.log and cache.log and see if it has any errors or clues.

      1 Reply Last reply Reply Quote 0
      • G
        glimso
        last edited by

        I also tried to restart the process, but still not work.
        here is the screenshot of configuration. No clue in the access log…seems that after uninstall of squidguard not log in access.log  :(

        Thanks a lot

        Capture1.JPG
        Capture1.JPG_thumb
        Capture2.JPG
        Capture2.JPG_thumb

        1 Reply Last reply Reply Quote 0
        • KOMK
          KOM
          last edited by

          Sorry, how does it fail again?  Timeout or some error message right away?

          Why do you use Google DNS for proxy server?  Normally you select your forwarders under System - General Setup - DNS Servers.  Is there any change if you remove 8.8.8.8 from Use alternate DNS…?

          Perhaps your config is somehow corrupted.  You can find directions on resetting everything in this post:

          https://forum.pfsense.org/index.php?topic=78521.0

          1 Reply Last reply Reply Quote 0
          • G
            glimso
            last edited by

            We get the message right away.
            Thank you for the support.
            I'll try to reset on Monday and will let you know…

            1 Reply Last reply Reply Quote 0
            • KOMK
              KOM
              last edited by

              What message exactly are you getting?  It is more helpful if you answer all of the questions you are asked.  Why do you use Google DNS as an alternate just for the proxy?

              1 Reply Last reply Reply Quote 0
              • F
                finalcut
                last edited by

                i got this error

                pf php: /pkg_edit.php: The command '/usr/pbi/squid-amd64/sbin/squid -k reconfigure -f /usr/pbi/squid-amd64/etc/squid/squid.conf' returned exit code '1', the output was 'squid: ERROR: No running copy'

                1 Reply Last reply Reply Quote 0
                • KOMK
                  KOM
                  last edited by

                  Yeah, looks like something is broken.  I would remove Squid and then use the link I gave you to do a cleanup, then try again.

                  1 Reply Last reply Reply Quote 0
                  • G
                    glimso
                    last edited by

                    We get "unable to connect to site xxxxxxx".
                    I set the dsn just to check if this could solve this problem,
                    thinking that for some reason the proxy needed an ulterior dsn, but it didn't help.

                    I'll try the procedure you linked before.

                    1 Reply Last reply Reply Quote 0
                    • KOMK
                      KOM
                      last edited by

                      OK, now I understand why you were using a separate DNS just for the proxy.  As a suggestion, when you try something and it doesn't work, you should revert your change back or else you risk making the problem worse, or starting a new problem that will confuse you, or confusing people who are trying to help you 8)

                      Squid by itself is mainly used for caching web content, or as a base for SquidGuard, and it has very limited access control.  You typically only need to check the Transparent and Allow users on interface boxes and it just works as long as your users are on the same subnet as your pfSense server.  A default install of Squid will not block anything, last time I checked.

                      SquidGuard is the filtering component and it is more complex.  Try to get basic Squid working first, and then move on to SquidGuard.

                      1 Reply Last reply Reply Quote 0
                      • G
                        glimso
                        last edited by

                        Goodmorning all!

                        thanks to KOM we managed to get Squid and SquidGuard works!

                        we followed the steps to remove the proxy and its settings, then reinstalled it.

                        a minimal configuration and now it works smoothly!

                        our steps:

                        • removed Squid and SquidGuard following the instructions https://forum.pfsense.org/index.php?topic=78521.0
                        • installed Squid (2.x)
                        • enable Transparent Proxy and let checked Allow User on Interface
                        • verified that Squid works adding a site in the blacklist
                        • installed SquidGuard
                        • added a blacklist
                        • started the service
                        • profit

                        thanks again for your support!

                        1 Reply Last reply Reply Quote 0
                        • KOMK
                          KOM
                          last edited by

                          Glad to hear you got it working.

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.