Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    2.2 i386 (upgrade) - appears squid 2.7.9 package is broken

    Scheduled Pinned Locked Moved Cache/Proxy
    19 Posts 12 Posters 8.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      jesus_seba
      last edited by

      Hello,

      I had the same issue this morning. From an existing installation of pfSense 2.1 + Squid, I copied the following files onto my upgraded pfSense 2.2 system:

      /lib/libz.so.5
      /lib/libcrypto.so.6
      /usr/lib/libssl.so.6

      Squid works fine now.

      Hope this helps.

      1 Reply Last reply Reply Quote 0
      • V
        vbentley
        last edited by

        I have been using Squid3 on 2.1.x but it doesn't appear to work reliably on my 2.6GHz Celeron with 1GB RAM running 2.2 (i386) with transparent proxying switched on.

        I have also experienced problems daily with the webgui not responding but fortunately I can ssh into the console and option 16) Restart PHP-FPM usually gets the webgui operational again. If I uninstall Squid3 the webgui appears to run fine.

        I liked Squid3 but I need transparent proxying more. I hope it still works in 2.7.9 .

        Trademark Attribution and Credit
        pfSense® and pfSense Certified® are registered trademarks of Electric Sheep Fencing, LLC in the United States and other countries.

        1 Reply Last reply Reply Quote 0
        • marcellocM
          marcelloc
          last edited by

          Squid3 pbi on i386 will be updated to fix missing transparent proxy compile option(you can confirm executing  squid  -v on console / ssh.

          On amd64 it's transparent proxy is working fine.

          Treinamentos de Elite: http://sys-squad.com

          Help a community developer! ;D

          1 Reply Last reply Reply Quote 0
          • V
            vbentley
            last edited by

            Thanks. I appreciate your effort to fix this.

            In the old days, I used conditional branching proxy.pac files and I still think that it's a better way than transparent TCP interception. I'm going to have a go setting up wpad with dhcp delivery and see how I get on with that for now.

            http://wiki.squid-cache.org/SquidFaq/ConfiguringBrowsers#Fully_Automatic_Configuration

            Trademark Attribution and Credit
            pfSense® and pfSense Certified® are registered trademarks of Electric Sheep Fencing, LLC in the United States and other countries.

            1 Reply Last reply Reply Quote 0
            • KOMK
              KOM
              last edited by

              WPAD Autoconfigure for Squid

              1 Reply Last reply Reply Quote 0
              • C
                cwf_netman
                last edited by

                @jesus_seba:

                Hello,

                I had the same issue this morning. From an existing installation of pfSense 2.1 + Squid, I copied the following files onto my upgraded pfSense 2.2 system:

                /lib/libz.so.5
                /lib/libcrypto.so.6
                /usr/lib/libssl.so.6

                Squid works fine now.

                Hope this helps.

                Any chance of the pfSense dev team getting a 2.2.1 update out soon with these missing files included? A lot of us are still using Squid 2.x with pfSense because it works well and stable on older hardware.

                1 Reply Last reply Reply Quote 0
                • jimpJ
                  jimp Rebel Alliance Developer Netgate
                  last edited by

                  Those files aren't missing. Those are old versions. pfSense 2.2 uses (for example) libz.so.6, libcrypto.so.7 and libssl.so.7.

                  If something is looking for the old versions, it must not have been compiled properly.

                  Maybe the PBI that was installed was still the old 2.1 PBI?

                  Uninstall all of the squid related packages, check "pbi_info" from the shell and "pbi_delete" any squid packages that still show up, then install it again.

                  Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                  Need help fast? Netgate Global Support!

                  Do not Chat/PM for help!

                  1 Reply Last reply Reply Quote 0
                  • V
                    vbentley
                    last edited by

                    I have regressed my main firewall back to 2.1.5 today and edited the config.xml by hand and with diff/patch from known good backups. It's working fine again now.

                    I am planning to get 'new' hardware next week so that I can build the config from scratch on a 64bit version of 2.2 .

                    One thing I have learned from this experience is that I need to build my own test scripts for what's important for my installation. I completely forgot to test something that was important to my site during the entire 2.2RC period despite testing a load of other stuff on a 2.2RC machine before release day.

                    Trademark Attribution and Credit
                    pfSense® and pfSense Certified® are registered trademarks of Electric Sheep Fencing, LLC in the United States and other countries.

                    1 Reply Last reply Reply Quote 0
                    • NetViciousN
                      NetVicious
                      last edited by

                      squid 3 on i386 seems not to being recompiled for transparent proxy at the moment isn't it?

                      And squid2 pbi seems to be wrong too.

                      Any other solution?

                      I downgraded until we got a solution for this problem.

                      ..//\/ e t . \/ i c i o u s ..

                      1 Reply Last reply Reply Quote 0
                      • C
                        Cino
                        last edited by

                        @NetVicious:

                        squid 3 on i386 seems not to being recompiled for transparent proxy at the moment isn't it?

                        based on a few other threads, looks like the pbi for i386 came out yesterday.

                        1 Reply Last reply Reply Quote 0
                        • marcellocM
                          marcelloc
                          last edited by

                          @Cino:

                          looks like the pbi for i386 came out yesterday.

                          Yes, it fixed most compile issues for i386.

                          Treinamentos de Elite: http://sys-squad.com

                          Help a community developer! ;D

                          1 Reply Last reply Reply Quote 0
                          • S
                            Steve Evans
                            last edited by

                            I've just installed 3.4.10_2 pkg 0.2.6 and I'm seeing the following config using "squid -v".

                            '--disable-ipf-transparent' '--disable-ipfw-transparent' '--enable-pf-transparent'
                            

                            This is the same as before.  :(

                            Steve

                            1 Reply Last reply Reply Quote 0
                            • S
                              Steve Evans
                              last edited by

                              Is the phi that came out yesterday for squid 2 or 3?

                              Steve

                              1 Reply Last reply Reply Quote 0
                              • marcellocM
                                marcelloc
                                last edited by

                                @Steve:

                                This is the same as before.  :(

                                The transparent pf is what we need  '–enable-pf-transparent' to get transparent proxy working.

                                Are you still with issues?

                                @Steve:

                                Is the phi that came out yesterday for squid 2 or 3?

                                squid3

                                Treinamentos de Elite: http://sys-squad.com

                                Help a community developer! ;D

                                1 Reply Last reply Reply Quote 0
                                • S
                                  Steve Evans
                                  last edited by

                                  Yes, still not working. My previous investigation of this showed the redirection wasn't working, but then you spotted the compile options.

                                  Confused.

                                  Steve

                                  1 Reply Last reply Reply Quote 0
                                  • belleraB
                                    bellera
                                    last edited by

                                    https://redmine.pfsense.org/issues/4293

                                    1 Reply Last reply Reply Quote 0
                                    • M
                                      mansi
                                      last edited by

                                      Perfecto, gracias!!!

                                      1 Reply Last reply Reply Quote 0
                                      • First post
                                        Last post
                                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.