Upgrade to pfsense 2.2 ->Installation of squidGuard-squid3 FAILED(for me Solved)

Mikegyver42

Did you have squidguard installed on 2.1.5 and just upgraded? After upgraded you only had to reinstall squidguard or something else also?

In my case i had squidguard installed on 2.1.5 and after upgrading to pfsense 2.2 squidguard seems to be not installed and it is impossible to install it.

n3by

Hello,

I have upgraded from 2.1.5 to 2.2 and first I uninstall all the package; after reinstall I have this problems:

LightSquid - not working

Proxy Squid: Realtime stat (sqstat) help

Squid RealTime stat 1.20 for the proxy server (unknown) (192.168.1.1:3128)
SqStat error

Error (1): Cannot get data. Server answered: HTTP/1.1 403 Forbidden

of course log looks like:

php-fpm[11421]: /pkg_edit.php: The command 'ln -s /usr/local/bin/perl /usr/bin/perl' returned exit code '1', the output was 'ln: /usr/bin/perl: File exists'

probably cause in: /usr/bin perl looks broken at Squid installation - No idea how to fix it, reinstall pkg did not help.
Any idea how to manual remote reinstall perl ?

and more:

I appreciate any help.
I have no access to console at this box so I have to do it remote if possible.

thank you

marcelloc

If you need squid itself out of pbi dir, you can install via pkg

Please, test it out of production environment.

pkg install perl5

Cino

@marcelloc:

If you need squid itself out of pbi dir, you can install via pkg

Please, test it out of production environment.
pkg install perl5

+1 I've open a bug report for this a week or so ago.. but manually installing per5 does the trick.

Dont expect sqstat to work if you have ipv6 enabled. The code is very code and doesn't conform to IPv6, only IPv4 addresses. I've noticed this a couple of years ago when I started to used Squid3 (which supports IPv6, just not in the WebGUI).

n3by

Thank you for help, my problem was that I tried to do that remote not from pfSense console keyboard and I had no chance because I can't confirm installation when prompt from www.

Any way after I bring that pfSense box to my desk and hooked to monitor and keyboard and installed perl I was still unable to use LightSquid because of some other errors.

In the end all was messed and squid did not worked any more; I reinstall a clean 2.2 from CD but after full 2.2 config restore I saved before at first boot pfSense 2.2 freeze. ::)

I reinstalled new 2.1.5 with latest 2.1.5 config saved and all it is working now.

No more 2.2 upgrading - testing for the moment I already lost 48h of my life with this new version… I have to sleep now. 8)

foresthus

I installed 2.1.5 again because of the problems are not solved

:(

aityahiaidir

i have solved problem see this topic :

https://forum.pfsense.org/index.php?topic=87379.0

moh10ly

I solved it too, check out the fix by snapshots.
http://www.moh10ly.com/blog/pfsense/package-installation-issue

Steve Evans

Hi aityahiaidir and moh10ly,

You both did this the hard way.

Under System/Advanced under the Miscellaneous tab you'll find the attached. Just hit the checkbox and try the install again.

Steve

![Screen Shot 2015-01-25 at 20.41.43.png](/public/imported_attachments/1/Screen Shot 2015-01-25 at 20.41.43.png)
![Screen Shot 2015-01-25 at 20.41.43.png_thumb](/public/imported_attachments/1/Screen Shot 2015-01-25 at 20.41.43.png_thumb)

edanpedragosa

The squid squidguard install problem also happened on my server and here's what I did to resolve the issue:

1. Went to System | Advanced | Miscellaneous and scrolled down to the end of the page and ticked
Do NOT check package signature
Enable this option to allow pfSense to install any package without checking its signature.

2. Reinstall Squid3, then squidguard-squid3

3. Re-downloaded blacklists from my previous source.

4. Saved and applied configuration

5. Squid and Squidguard is back to working condition.

I'm still checking what happened to the Captive Portal as it does not seem to work now…

Just sharing...

marcelloc

You mean captive portal itself or squid package integration with captive?

edanpedragosa

No, Captive Portal is a separate issue with the 2.2 upgrade.

It seems that it no longer works on my setup.

xtrgeo

I finally managed to make squidguard an squid 3 to work after the upgrade.

So, for those having problem when upgrading from 2.1.5 to 2.2 with squid3 and squidguard3 installed:

1. After the updtae finishes, squid and squidguard does not start.

2. Uninstall both packages (don't worry,settings are not lost)

3. Reinstall squid3 and squidguard

4. If clamd service looks disable, try to run on command promt freshclam

5 .This should update clam database and enable the service. It might need some minutes for the service to appear as running.

6. If you are behind a proxy you have to manually edit the file /usr/pbi/squid-amd64/local/etc/freshclam.conf and write there your proxy ip and port

7. After all that you have to update the blacklist database of squidguard in case of having one

8. Finally follow the instructions of marcello and go through every tab from left to right in both squid and squidguard, by pressing save to each.

9. Take care of the paths in antivirus tab in squid! In file squidclamav.conf and c-icap.conf

That's how it worked for me!

As for lightsquid, it work with the directions of this post https://forum.pfsense.org/index.php?topic=86584.msg474777#msg474777

But the problem with sqstat remains…

aityahiaidir

@Steve:

Hi aityahiaidir and moh10ly,

You both did this the hard way.

Under System/Advanced under the Miscellaneous tab you'll find the attached. Just hit the checkbox and try the install again.

Steve

thanks for the tip, it's good knowledge

foresthus

Thnx 4 the instructions. I will try it out this week and will leave my results here.

cu soon

MaxHeadroom

Hi,

tested with second pfsense using squidGuard-devel worked without check "Do NOT check package signature "

regards

Max

KOM

You don't even have to uninstall. During my tests over the weekend, Squid3 refused to start consistently until I reinstalled the entire package using the small PKG button. After reinstall, everything was working. A reinstall appears to do a remove and then an install, so you're just saving a few clicks.

voxeljorz

This thread helped me. Thanks.

MaxHeadroom

Hi,

i found out why squid3 could not start after upgrade to pfsense 2.2. because of the old package
HAVP (wil not be installed any more)

*) squid3 has the "Custom Settings->Integrations" field where the old HAVP config is still there.

Solution: remove all entries ->Save ( if you want SquidGuard dont forget to reapply it via tab proxy filter & don't forget to save)

wubrown

If all of the above suggestions fail !! - My final solution..

After reinstalling both Squid3 and SquidGuard with certificate checking turned off, resaving every config tab for both packages, reloading blacklist DB, checking all settings had transferred over in the upgrade from 2.1.5 -> 2.2. Still SquidGuard service would not start. No filtering was occurring.

The solution was on the Squid General Settings tab. I needed to reselect the LAN option in the proxy interface drop down list. LAN was already at the top of the list and appeared to be selected. Clicking on it to turn blue and then doing the same with the Transparent Proxy Interface selection, then clicking save. SquidGuard started filtering and the service stayed on. So although most other settings carried over during the upgrade, one or both of the interface selections in the drop down lists did not.

That was obscure. May others not waste as many hours as I did trying to find that!