Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PfSense 2.2 and Squid

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    25 Posts 10 Posters 7.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • KOMK Offline
      KOM
      last edited by

      Weird.  I've installed 2.2 fresh about a dozen times and the steps I listed for Lightsquid worked every time without exception.  You say you tried on a fresh install and the symlinks were already there??

      Someone needs to get a hold of the Squid development team and have them fix this.

      Some of the pfSense packages are/were maintained by volunteers.  Lightsquid and Sarg are still two packages that have install issues and need to be tweaked to work.  The vnstat2 packages was just fixed for 2.2 today, for example.

      1 Reply Last reply Reply Quote 0
      • D Offline
        doktornotor Banned
        last edited by

        People should stop producing shitty symlink "fixes" on their boxes. Very much convinced at least half the of package "bugs" are a result of tons of similar hacks done by users that have since totally lost track of what they've actually done on their machines.

        1 Reply Last reply Reply Quote 0
        • C Offline
          Cino
          last edited by

          @doktornotor:

          People should stop producing shitty symlink "fixes" on their boxes. Very much convinced at least half the of package "bugs" are a result of tons of similar hacks done by users that have since totally lost track of what they've actually done on their machines.

          They should keep track of those kind of changes.

          bug report for lightsquid was submitted awhile ago https://redmine.pfsense.org/issues/4198 to fix the pbi's.

          1 Reply Last reply Reply Quote 0
          • D Offline
            djzort
            last edited by

            here is the code change, i even commented on it.

            https://github.com/pfsense/pfsense-packages/commit/6a6669a0919681284c05185246fc39de8dc06811

            1 Reply Last reply Reply Quote 0
            • C Offline
              Cino
              last edited by

              its the lightsquid package that needs to be fix, not the squid package.

              1 Reply Last reply Reply Quote 0
              • R Offline
                Rickinfl
                last edited by

                Yes it seems Squid is working fine. I tired both Squid and Squid3 both worked on Squid3 had to do some config tweaks, but it worked..

                It's SquidGuard that is not working. I've tried everything to get this to work.

                1 Reply Last reply Reply Quote 0
                • C Offline
                  Cino
                  last edited by

                  with squid3 install, install squidguard-dev and run this

                  
                  ln -s /usr/pbi/squidguard-devel-amd64/local/lib/libldap-2.4.so.8 /usr/local/lib/libldap-2.4.so.8
                  ln -s /usr/pbi/squidguard-devel-amd64/local/lib/libldap-2.4.so.8 /lib/libldap-2.4.so.8
                  ln -s /usr/pbi/squidguard-devel-amd64/local/lib/libdb-4.6.so.0 /usr/local/lib/libdb-4.6.so.0
                  ln -s /usr/pbi/squidguard-devel-amd64/local/lib/libdb-4.6.so.0 /usr/lib/libdb-4.6.so.0
                  
                  

                  after that, make sure you download a blacklist and apply it.

                  1 Reply Last reply Reply Quote 0
                  • R Offline
                    Rickinfl
                    last edited by

                    I've seen that before, but my question is…. If they ever do get around fixing SquidGuard will there be issues because of those LN's?

                    1 Reply Last reply Reply Quote 0
                    • C Offline
                      Cino
                      last edited by

                      There is always a risk… I've been keeping notes of what I've done to my box; so when SG if fix, I can remove the links I created.

                      1 Reply Last reply Reply Quote 0
                      • KOMK Offline
                        KOM
                        last edited by

                        SquidGuard used to work fine for me.  Now it's broken and won't work without symlink hacks?

                        1 Reply Last reply Reply Quote 0
                        • P Offline
                          phil.davis
                          last edited by

                          @KOM:

                          SquidGuard used to work fine for me.  Now it's broken and won't work without symlink hacks?

                          JimP just committed some changes to SquidGuard for pfSense 2.2 : https://github.com/pfsense/pfsense-packages/commit/1b27c346293d8a53a80dd7563d787e9e073f801a

                          It would be worth reinstalling and trying…

                          As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
                          If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

                          1 Reply Last reply Reply Quote 0
                          • marcellocM Offline
                            marcelloc
                            last edited by

                            Pbi for i386 has updates too.

                            Treinamentos de Elite: http://sys-squad.com

                            Help a community developer! ;D

                            1 Reply Last reply Reply Quote 0
                            • C Offline
                              Cino
                              last edited by

                              I removed the symlinks I had for squidguard-dev and was was able to install squidGuard for the most part with no issues… Had to reboot and also reinstall dansguardian since that wouldnt auto start on reboot...

                              1 Reply Last reply Reply Quote 0
                              • M Offline
                                MnM
                                last edited by

                                @Cino:

                                I removed the symlinks I had for squidguard-dev and was was able to install squidGuard for the most part with no issues… Had to reboot and also reinstall dansguardian since that wouldnt auto start on reboot...

                                Cino I had all sorts of trouble in 2.2 to get Squid3 (transparent proxy) and DansGuardian going
                                Would you mind sharing how did you make them work together? I have all the rules OK (pf2.1.5 works fine with squid + dansguardian) but I could never get squid3 working with Dans in 2.2.

                                Appreciated.

                                1 Reply Last reply Reply Quote 0
                                • C Offline
                                  Cino
                                  last edited by

                                  I should had mention that before but I don't use transparent squid proxy. I do have a transparent setup for Dansguardian, which is on a different subnet.

                                  This is the order I did my install a month ago… squid, squidguard... got them running... then added dansguardian into the mix

                                  I have squid listening on my lan and loopback...  dansguardian is listening on my lan and upstreams to squid via 127.0.0.1

                                  here is the nat I use for dansguardian

                                  KIDSNET TCP * * * 80 (HTTP) 127.0.0.1 8080 Dansguardian Transparent Proxy Re-Direct

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.