Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    2.2 i386 (upgrade) - appears squid 2.7.9 package is broken

    Scheduled Pinned Locked Moved Cache/Proxy
    19 Posts 12 Posters 8.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • marcellocM
      marcelloc
      last edited by

      Try  squid3 as squid2 has been removed from ports.

      Treinamentos de Elite: http://sys-squad.com

      Help a community developer! ;D

      1 Reply Last reply Reply Quote 0
      • J
        jesus_seba
        last edited by

        Hello,

        I had the same issue this morning. From an existing installation of pfSense 2.1 + Squid, I copied the following files onto my upgraded pfSense 2.2 system:

        /lib/libz.so.5
        /lib/libcrypto.so.6
        /usr/lib/libssl.so.6

        Squid works fine now.

        Hope this helps.

        1 Reply Last reply Reply Quote 0
        • V
          vbentley
          last edited by

          I have been using Squid3 on 2.1.x but it doesn't appear to work reliably on my 2.6GHz Celeron with 1GB RAM running 2.2 (i386) with transparent proxying switched on.

          I have also experienced problems daily with the webgui not responding but fortunately I can ssh into the console and option 16) Restart PHP-FPM usually gets the webgui operational again. If I uninstall Squid3 the webgui appears to run fine.

          I liked Squid3 but I need transparent proxying more. I hope it still works in 2.7.9 .

          Trademark Attribution and Credit
          pfSense® and pfSense Certified® are registered trademarks of Electric Sheep Fencing, LLC in the United States and other countries.

          1 Reply Last reply Reply Quote 0
          • marcellocM
            marcelloc
            last edited by

            Squid3 pbi on i386 will be updated to fix missing transparent proxy compile option(you can confirm executing  squid  -v on console / ssh.

            On amd64 it's transparent proxy is working fine.

            Treinamentos de Elite: http://sys-squad.com

            Help a community developer! ;D

            1 Reply Last reply Reply Quote 0
            • V
              vbentley
              last edited by

              Thanks. I appreciate your effort to fix this.

              In the old days, I used conditional branching proxy.pac files and I still think that it's a better way than transparent TCP interception. I'm going to have a go setting up wpad with dhcp delivery and see how I get on with that for now.

              http://wiki.squid-cache.org/SquidFaq/ConfiguringBrowsers#Fully_Automatic_Configuration

              Trademark Attribution and Credit
              pfSense® and pfSense Certified® are registered trademarks of Electric Sheep Fencing, LLC in the United States and other countries.

              1 Reply Last reply Reply Quote 0
              • KOMK
                KOM
                last edited by

                WPAD Autoconfigure for Squid

                1 Reply Last reply Reply Quote 0
                • C
                  cwf_netman
                  last edited by

                  @jesus_seba:

                  Hello,

                  I had the same issue this morning. From an existing installation of pfSense 2.1 + Squid, I copied the following files onto my upgraded pfSense 2.2 system:

                  /lib/libz.so.5
                  /lib/libcrypto.so.6
                  /usr/lib/libssl.so.6

                  Squid works fine now.

                  Hope this helps.

                  Any chance of the pfSense dev team getting a 2.2.1 update out soon with these missing files included? A lot of us are still using Squid 2.x with pfSense because it works well and stable on older hardware.

                  1 Reply Last reply Reply Quote 0
                  • jimpJ
                    jimp Rebel Alliance Developer Netgate
                    last edited by

                    Those files aren't missing. Those are old versions. pfSense 2.2 uses (for example) libz.so.6, libcrypto.so.7 and libssl.so.7.

                    If something is looking for the old versions, it must not have been compiled properly.

                    Maybe the PBI that was installed was still the old 2.1 PBI?

                    Uninstall all of the squid related packages, check "pbi_info" from the shell and "pbi_delete" any squid packages that still show up, then install it again.

                    Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                    Need help fast? Netgate Global Support!

                    Do not Chat/PM for help!

                    1 Reply Last reply Reply Quote 0
                    • V
                      vbentley
                      last edited by

                      I have regressed my main firewall back to 2.1.5 today and edited the config.xml by hand and with diff/patch from known good backups. It's working fine again now.

                      I am planning to get 'new' hardware next week so that I can build the config from scratch on a 64bit version of 2.2 .

                      One thing I have learned from this experience is that I need to build my own test scripts for what's important for my installation. I completely forgot to test something that was important to my site during the entire 2.2RC period despite testing a load of other stuff on a 2.2RC machine before release day.

                      Trademark Attribution and Credit
                      pfSense® and pfSense Certified® are registered trademarks of Electric Sheep Fencing, LLC in the United States and other countries.

                      1 Reply Last reply Reply Quote 0
                      • NetViciousN
                        NetVicious
                        last edited by

                        squid 3 on i386 seems not to being recompiled for transparent proxy at the moment isn't it?

                        And squid2 pbi seems to be wrong too.

                        Any other solution?

                        I downgraded until we got a solution for this problem.

                        ..//\/ e t . \/ i c i o u s ..

                        1 Reply Last reply Reply Quote 0
                        • C
                          Cino
                          last edited by

                          @NetVicious:

                          squid 3 on i386 seems not to being recompiled for transparent proxy at the moment isn't it?

                          based on a few other threads, looks like the pbi for i386 came out yesterday.

                          1 Reply Last reply Reply Quote 0
                          • marcellocM
                            marcelloc
                            last edited by

                            @Cino:

                            looks like the pbi for i386 came out yesterday.

                            Yes, it fixed most compile issues for i386.

                            Treinamentos de Elite: http://sys-squad.com

                            Help a community developer! ;D

                            1 Reply Last reply Reply Quote 0
                            • S
                              Steve Evans
                              last edited by

                              I've just installed 3.4.10_2 pkg 0.2.6 and I'm seeing the following config using "squid -v".

                              '--disable-ipf-transparent' '--disable-ipfw-transparent' '--enable-pf-transparent'
                              

                              This is the same as before.  :(

                              Steve

                              1 Reply Last reply Reply Quote 0
                              • S
                                Steve Evans
                                last edited by

                                Is the phi that came out yesterday for squid 2 or 3?

                                Steve

                                1 Reply Last reply Reply Quote 0
                                • marcellocM
                                  marcelloc
                                  last edited by

                                  @Steve:

                                  This is the same as before.  :(

                                  The transparent pf is what we need  '–enable-pf-transparent' to get transparent proxy working.

                                  Are you still with issues?

                                  @Steve:

                                  Is the phi that came out yesterday for squid 2 or 3?

                                  squid3

                                  Treinamentos de Elite: http://sys-squad.com

                                  Help a community developer! ;D

                                  1 Reply Last reply Reply Quote 0
                                  • S
                                    Steve Evans
                                    last edited by

                                    Yes, still not working. My previous investigation of this showed the redirection wasn't working, but then you spotted the compile options.

                                    Confused.

                                    Steve

                                    1 Reply Last reply Reply Quote 0
                                    • belleraB
                                      bellera
                                      last edited by

                                      https://redmine.pfsense.org/issues/4293

                                      1 Reply Last reply Reply Quote 0
                                      • M
                                        mansi
                                        last edited by

                                        Perfecto, gracias!!!

                                        1 Reply Last reply Reply Quote 0
                                        • First post
                                          Last post
                                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.