Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Transparent proxy not working after upgrade to 2.2

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    45 Posts 12 Posters 17.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      Brandhor
      last edited by

      @marcelloc:

      I've did once again a clean install, check steps I did to get it working without hacks.

      https://forum.pfsense.org/index.php?topic=87424.msg480232#msg480232

      unfortunately a reinstall is not an option for me since it's 300km away

      1 Reply Last reply Reply Quote 0
      • marcellocM
        marcelloc
        last edited by

        Can you try removing all packages  and reapply 2.2 firmware update?

        Treinamentos de Elite: http://sys-squad.com

        Help a community developer! ;D

        1 Reply Last reply Reply Quote 0
        • B
          Brandhor
          last edited by

          @marcelloc:

          Can you try removing all packages  and reapply 2.2 firmware update?

          I'll try tonight, should I also remove the packages configuration from config.xml?

          1 Reply Last reply Reply Quote 0
          • marcellocM
            marcelloc
            last edited by

            I don't think so.  As you posted, it doesn't looks like a package issue.

            Treinamentos de Elite: http://sys-squad.com

            Help a community developer! ;D

            1 Reply Last reply Reply Quote 0
            • B
              Brandhor
              last edited by

              I tried to reapply the update but it's still not working

              1 Reply Last reply Reply Quote 0
              • T
                TieT
                last edited by

                for what it's worth:
                I'm using squid on 2.2 in transparent mode and its working.
                But I'm not caching anything.

                Can you output the contents of the squid.conf

                1 Reply Last reply Reply Quote 0
                • B
                  Brandhor
                  last edited by

                  @TieT:

                  for what it's worth:
                  I'm using squid on 2.2 in transparent mode and its working.
                  But I'm not caching anything.

                  Can you output the contents of the squid.conf

                  well it's not a squid issue but here it is http://pastebin.com/2htk2jg1

                  1 Reply Last reply Reply Quote 0
                  • T
                    TieT
                    last edited by

                    Here is mine

                    # Do not edit manually !
                    http_port 192.168.1.254:3128
                    http_port 127.0.0.1:3128 transparent
                    icp_port 0
                    
                    pid_filename /var/run/squid.pid
                    cache_effective_user proxy
                    cache_effective_group proxy
                    error_directory /usr/pbi/squid-i386/etc/squid/errors/English
                    icon_directory /usr/pbi/squid-i386/etc/squid/icons
                    visible_hostname fw1.home
                    cache_mgr tielens.t@gmail.com
                    access_log /var/squid/logs/access.log
                    cache_log /var/squid/logs/cache.log
                    cache_store_log none
                    logfile_rotate 7
                    shutdown_lifetime 3 seconds
                    # Allow local network(s) on interface(s)
                    acl localnet src  192.168.1.0/255.255.255.0
                    uri_whitespace strip
                    
                    cache_mem 10 MB
                    maximum_object_size_in_memory 32 KB
                    memory_replacement_policy heap GDSF
                    cache_replacement_policy heap LFUDA
                    cache_dir diskd /var/squid/cache 500 16 256
                    minimum_object_size 0 KB
                    maximum_object_size 5 KB
                    offline_mode off
                    cache_swap_low 90
                    cache_swap_high 95
                    
                    # No redirector configured
                    
                    squid.conf...skipping...
                    # Do not edit manually !
                    http_port 192.168.1.254:3128
                    http_port 127.0.0.1:3128 transparent
                    icp_port 0
                    
                    pid_filename /var/run/squid.pid
                    cache_effective_user proxy
                    cache_effective_group proxy
                    error_directory /usr/pbi/squid-i386/etc/squid/errors/English
                    icon_directory /usr/pbi/squid-i386/etc/squid/icons
                    visible_hostname fw1.home
                    cache_mgr TieT
                    access_log /var/squid/logs/access.log
                    cache_log /var/squid/logs/cache.log
                    cache_store_log none
                    logfile_rotate 7
                    shutdown_lifetime 3 seconds
                    # Allow local network(s) on interface(s)
                    acl localnet src  192.168.1.0/255.255.255.0
                    uri_whitespace strip
                    
                    cache_mem 10 MB
                    maximum_object_size_in_memory 32 KB
                    memory_replacement_policy heap GDSF
                    cache_replacement_policy heap LFUDA
                    cache_dir diskd /var/squid/cache 500 16 256
                    minimum_object_size 0 KB
                    maximum_object_size 5 KB
                    offline_mode off
                    cache_swap_low 90
                    cache_swap_high 95
                    
                    # No redirector configured
                    
                    # Setup some default acls
                    acl all src 0.0.0.0/0.0.0.0
                    acl localhost src 127.0.0.1/255.255.255.255
                    acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901  3128 1025-65535
                    acl sslports port 443 563
                    acl manager proto cache_object
                    acl purge method PURGE
                    
                    
                    1 Reply Last reply Reply Quote 0
                    • marcellocM
                      marcelloc
                      last edited by

                      Just to be sure, Are you selecting interfaces on squid general tab?

                      I'm asking because other users had this "issue".

                      Treinamentos de Elite: http://sys-squad.com

                      Help a community developer! ;D

                      1 Reply Last reply Reply Quote 0
                      • B
                        Brandhor
                        last edited by

                        @marcelloc:

                        Just to be sure, Are you selecting interfaces on squid general tab?

                        I'm asking because other users had this "issue".

                        yeah I had that issue as well after upgrading the other day but I fixed it soon after

                        1 Reply Last reply Reply Quote 0
                        • B
                          Brandhor
                          last edited by

                          I tried to load a config.xml that looks as much as possible like a fresh installation and also did a checksum of all files and compared them but I don't think there was anything wrong with them

                          the only clue I have is the CLOSED:SYN_SENT state but it's not much

                          1 Reply Last reply Reply Quote 0
                          • T
                            TieT
                            last edited by

                            That means, you have send a sync request but no one answers (connection is closed)

                            Did you set a virtual IP on the WAN or LAN ?

                            1 Reply Last reply Reply Quote 0
                            • B
                              Brandhor
                              last edited by

                              @TieT:

                              That means, you have send a sync request but no one answers (connection is closed)

                              Did you set a virtual IP on the WAN or LAN ?

                              no

                              1 Reply Last reply Reply Quote 0
                              • K
                                Koenig
                                last edited by

                                I have this issue as well.

                                Foud this in the log:
                                php-fpm[83033]: /pkg_edit.php: The command '/usr/pbi/squid-i386/sbin/squid -k shutdown' returned exit code '1', the output was 'Shared object "libz.so.5" not found, required by "libmd5.so.1"'

                                1 Reply Last reply Reply Quote 0
                                • marcellocM
                                  marcelloc
                                  last edited by

                                  @Koenig:

                                  Foud this in the log:
                                  php-fpm[83033]: /pkg_edit.php: The command '/usr/pbi/squid-i386/sbin/squid -k shutdown' returned exit code '1', the output was 'Shared object "libz.so.5" not found, required by "libmd5.so.1"'

                                  Is this setup a migration from 2.1 or any 2.2RC version?

                                  Not getting it on amd64. :-\

                                  Treinamentos de Elite: http://sys-squad.com

                                  Help a community developer! ;D

                                  1 Reply Last reply Reply Quote 0
                                  • D
                                    doktornotor Banned
                                    last edited by

                                    @Koenig:

                                    Foud this in the log:
                                    php-fpm[83033]: /pkg_edit.php: The command '/usr/pbi/squid-i386/sbin/squid -k shutdown' returned exit code '1', the output was 'Shared object "libz.so.5" not found, required by "libmd5.so.1"'

                                    That thing gets removed. https://github.com/pfsense/pfsense/blob/master/etc/pfSense.obsoletedfiles

                                    
                                    $ ls -l /usr/lib/libz.so*
                                    lrwxr-xr-x  1 root  wheel  14 Jan 24 06:00 /usr/lib/libz.so -> /lib/libz.so.5
                                    
                                    $ ls -l /lib/libz.so.5
                                    ls: /lib/libz.so.5: No such file or directory
                                    
                                    $ ls -l /lib/libz.so.6
                                    -r--r--r--  1 root  wheel  79180 Jan 22 22:07 /lib/libz.so.6
                                    
                                    

                                    This clearly is not done properly on FULL installs, as seen from the dangling dead symlinks.

                                    Cf. that with nanobsd:

                                    
                                    $ ls -l /usr/lib/libz.so*
                                    lrwxr-xr-x  1 root  wheel  14 Jan 22 22:07 /usr/lib/libz.so -> /lib/libz.so.6
                                    
                                    $ ls -l /lib/libz.so.6
                                    -r--r--r--  1 root  wheel  79180 Jan 22 22:07 /lib/libz.so.6
                                    
                                    

                                    @marcelloc:

                                    Is this setup a migration from 2.1 or any 2.2RC version?
                                    Not getting it on amd64. :-\

                                    Apparently an upgrade process bug on full installs, rendering the updated library pretty much useless as it cannot be found. Just a few examples:

                                    
                                    /usr/lib/libcrypto.so -> /lib/libcrypto.so.6
                                    $ ls -l /lib/libcrypto.so.6
                                    ls: /lib/libcrypto.so.6: No such file or directory
                                    
                                    /usr/lib/libmd.so -> /lib/libmd.so.5
                                    $ ls -l  /lib/libmd.so.5
                                    ls: /lib/libmd.so.5: No such file or directory
                                    
                                    $ ls -l /usr/lib/libusb.so*
                                    lrwxr-xr-x  1 root  wheel     11 Jan 24 06:00 /usr/lib/libusb.so -> libusb.so.2
                                    -r--r--r--  1 root  wheel  65068 Jan 22 22:07 /usr/lib/libusb.so.3
                                    
                                    /usr/lib/libufs.so -> /lib/libufs.so.5
                                    $ ls -l /lib/libufs.so.5
                                    ls: /lib/libufs.so.5: No such file or directory
                                    
                                    

                                    Badly, badly broken.  >:( => https://redmine.pfsense.org/issues/4328

                                    1 Reply Last reply Reply Quote 0
                                    • T
                                      TieT
                                      last edited by

                                      I think this can be resolved by creating a link between those libs.
                                      and restarting squid.

                                      ln -s /lib/libz.so.5 /usr/lib/libz.so.6
                                      

                                      (if the file is in /lib of course)
                                      You can do a search to make sure

                                      
                                      su
                                      find / -name libz.so.*
                                      

                                      I had the same problem with squid and snort a while back
                                      let me know what happens  ;)

                                      1 Reply Last reply Reply Quote 0
                                      • D
                                        doktornotor Banned
                                        last edited by

                                        @TieT:

                                        I think this can be resolved by creating a link between those libs.
                                        and restarting squid.

                                        ln /lib/libz.so.6 /lib/libz.so.5
                                        

                                        Uh no, this is completely wrong "fix".

                                        1 Reply Last reply Reply Quote 0
                                        • T
                                          TieT
                                          last edited by

                                          Uh no, this is completely wrong "fix".

                                          So you're saying it won't work untill 2.2.1 is rolled out ?

                                          1 Reply Last reply Reply Quote 0
                                          • D
                                            doktornotor Banned
                                            last edited by

                                            You are fixing the wrong thing! That .5 vs .6 actually has a meaning - the new version of the library does not have a backward-compatible ABI! If you want to fix something, then fix the dead /usr/lib/*.so symlinks so that they point to proper file. Don't create "compatibility" symlinks pretending a deliberately removed outdated ABI library is still there.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.