Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Squid3-dev ICAP Protocol Error on 32-bit

    Scheduled Pinned Locked Moved Cache/Proxy
    30 Posts 17 Posters 54.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      Topper727
      last edited by

      I have this problem on the 64 bit version RC 2.2 and I just go to the antivirus page and click save again and then the system comes back up .. but wish it stop messing up

      Dell 2950 g3 server
      Intel(R) Xeon(R) CPU E5430 @ 2.66GHz
      Current: 2000 MHz, Max: 2667 MHz
      8 CPUs: 2 package(s) x 4 core(s)
      8152 MiB and 600meg 10k drive
      Pfsense 2.4 .. Hoping to get the phpvirtualbox going again.

      1 Reply Last reply Reply Quote 0
      • A
        Antonio_Grande
        last edited by

        Friends, help, please, how to solve a problem with this error ICAP?
        Configuring a clamav bypass=1 is disabling the antivirus integration!
        PFsense 2.1.5 x64, squid 3.3.10

        1 Reply Last reply Reply Quote 0
        • marcellocM
          marcelloc
          last edited by

          Did you read the topic first?

          https://forum.pfsense.org/index.php?topic=77264.msg485524#msg485524

          Treinamentos de Elite: http://sys-squad.com

          Help a community developer! ;D

          1 Reply Last reply Reply Quote 0
          • A
            Antonio_Grande
            last edited by

            @marcelloc:

            Did you read the topic first?
            https://forum.pfsense.org/index.php?topic=77264.msg485524#msg485524

            Friend, yes, I read it. But to my regret, I didn't understand part of instructions:
            fix config warnings alerts
            wait first freshclam to finish
            Please, explain more in detail which needs to be made here.
            Thanks!

            1 Reply Last reply Reply Quote 0
            • BismarckB
              Bismarck
              last edited by

              Antonio, don't waste your time in pfSense 2.1.5 x64 i-cap ist still broken there, since it has never worked before.

              I guess you need to upgrade to pfSense 2.2 x64 to get it work, if I get marcelloc right?

              fix config warnings alerts = look in Status: System logs: General for errors and fix it

              wait first freshclam to finish = execute freshclam in the console/shell and watch via top till its finished

              Good luck.

              1 Reply Last reply Reply Quote 0
              • A
                Antonio_Grande
                last edited by

                Error in system log (PFsense 2.1.5 x64, squid 3.3.10):

                kernel: pid 85487 (c-icap), uid 9595: exited on signal 11
                

                It is possible to fix it, or it really nonremovable error in 2.1.5 x64 in ICAP?
                I don't like 2.2. With it I have many more problems with Squid+SquidGuard+Lightsquid. May be later, build of PFsense will be stable and I update it.

                1 Reply Last reply Reply Quote 0
                • marcellocM
                  marcelloc
                  last edited by

                  @Antonio_Grande:

                  It is possible to fix it, or it really nonremovable error in 2.1.5 x64 in ICAP?

                  Unfortunatelly no. the icap error are related to freebsd 8.x and icap, not pfsense itself. the same compile args and config options works fine on freebsd 8.x 32bit version.

                  An workaround for pfsense 2.1.x 64bits if you are not using ssl interception is to use clamav on dansguardian ou havp.

                  Treinamentos de Elite: http://sys-squad.com

                  Help a community developer! ;D

                  1 Reply Last reply Reply Quote 0
                  • J
                    jvamos
                    last edited by

                    I am receiving ICAP errors with squid3 on amd64 pfSense 2.2 but only on http sites. I think I must have something misconfigured because HTTPS is fine. How does one use HAVP with squid, I feel like I have too many redundant proxies with HAVP and Dansguardian.

                    1 Reply Last reply Reply Quote 0
                    • J
                      jonesr
                      last edited by

                      I was having a similar problem until I saw this: https://forum.pfsense.org/index.php?topic=87424.msg480232#msg480232

                      fresh 2.2 install
                          Install squid3
                      …
                          chech squid tabs, save, fix config options pointed by gui alerts
                          On antivirus tab, save config twice as first time it will load sample files and second check config options.
                          via console wait (repeating ps ax | grep -i fresclam  or tail -f /var/log/clamav/freshclam.log) clamav database first slow update
                          enable transparent mode(do not select loopback on any squid option)
                          stop and start squid via gui to force c-icap to restart too after first freshclam.
                      …

                      Edited original post to describe my steps. The key part is the "save twice" on the AV tab. Fix the problems presented, each has its solution right in the message. I am now able to browse HTTP sites without the ICAP errors.

                      pfSense AMD64 VGA - Assume latest version.
                      Suricata, pfBlockerNG, SquidGuard, squid3.

                      1 Reply Last reply Reply Quote 0
                      • J
                        jvamos
                        last edited by

                        $ repeating ps ax | grep -i freshclam  or tail -f /var/log/clamav/freshclam.log
                        grep: freshclam: No such file or directory
                        grep: or: No such file or directory
                        grep: tail: No such file or directory
                        

                        For some reason I can't freshclam

                        1 Reply Last reply Reply Quote 0
                        • marcellocM
                          marcelloc
                          last edited by

                          @jvamos:

                          $ repeating ps ax | grep -i freshclam  or tail -f /var/log/clamav/freshclam.log
                          

                          This line means

                          repeat this cmd on console every 30 seconds for example

                          ps ax | grep -i freshclam 
                          

                          or this one once

                          tail -f /var/log/clamav/freshclam.log
                          

                          Treinamentos de Elite: http://sys-squad.com

                          Help a community developer! ;D

                          1 Reply Last reply Reply Quote 0
                          • J
                            jonesr
                            last edited by

                            I think I just typed "freshclam" (without quotes) to update, as marcelloc says the other commands are to show the status of freshclam, not to execute it.

                            pfSense AMD64 VGA - Assume latest version.
                            Suricata, pfBlockerNG, SquidGuard, squid3.

                            1 Reply Last reply Reply Quote 0
                            • P
                              pfcode
                              last edited by

                              HI, Guys

                              I got errors:

                              ERROR
                              The requested URL could not be retrieved

                              The following error was encountered while trying to retrieve the URL: http://www.google.ca

                              Connection to 127.0.0.1 failed.

                              The system returned: (60) Operation timed out

                              The remote host or network may be down. Please try the request again.

                              Your cache administrator is admin@localhost.

                              ERROR
                              The requested URL could not be retrieved

                              The following error was encountered while trying to retrieve the URL: http://www.dslreports.com/forum/rogers

                              Unable to forward this request at this time.

                              This request could not be forwarded to the origin server or to any parent caches.

                              Some possible problems are:

                              An Internet connection needed to access this domains origin servers may be down.
                                  All configured parent caches may be currently unreachable.
                                  The administrator may not allow this cache to make direct connections to origin servers.

                              Your cache administrator is admin@localhost.

                              I only installed snort, pfBlokerNG, and squid3,  for Squid3, all the settings were setup by default,  changed squid.inc, changed anti-virus configs, and execute freshclam, but I got above odd errors,  can't surf internet unless turn off the transparent HTTP proxy.

                              What am I doing wrong?

                              Release: pfSense 2.4.3(amd64)
                              M/B: Supermicro A1SRi-2558F
                              HDD: Intel X25-M 160G
                              RAM: 2x8Gb Kingston ECC ValueRAM
                              AP: Netgear R7000 (XWRT), Unifi AC Pro

                              1 Reply Last reply Reply Quote 0
                              • G
                                geyson_santana
                                last edited by

                                Olá,

                                Caso alguém ainda esteja com problemas. Segue abaixo como funcionou em minha rede:

                                Pfsense 2.2.3 + Squid3 0.2.8 + SquidGuard 1.9.14 + i-cap/clamav

                                Defina em squidclamav.conf:

                                redirect http://IP_SEU_SERVIDOR/squid_clwarn.php

                                Para o caso de possuir SquidGuard, descomente a linha:

                                squidguard /usr/local/squidGuard/bin/squidGuard

                                Adicione em i-cap.conf:

                                Service squid_clamav squidclamav.so

                                Apague essa linha de i-cap.conf(Mesmo que esteja comentada):

                                ldap://cn=Directory Manager:Apassword@ldap.chtsanti.net?o=chtsanti?mermberUid?(&(objectClass=posixGroup)(cn=%s))

                                Pra mim está funcionando ok.

                                I hope it helps someone.  ;D

                                1 Reply Last reply Reply Quote 0
                                • W
                                  waqasalisha
                                  last edited by

                                  Just add domain in Whitelist with http and you`r issue will solve.

                                  1 Reply Last reply Reply Quote 0
                                  • D
                                    dmalick @MIT
                                    last edited by

                                    @mit the path is /usr/local/pkg/squid_antivirus.inc not squid.inc for latest pfsense 2.6 squid 0.4.45_9

                                    1 Reply Last reply Reply Quote 0
                                    • First post
                                      Last post
                                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.