Any chance of getting a working transparent proxy again?

[peter808]

@tester_02:

I played around quite a bit and held off upgrading from 2.1.5 until just this week.  I've tried many times and always had to roll back to 2.1.5
vmware workstation environment, 64bit pfsense.
Uninstalled squid/squidguard.  Then ran the update.

Did I get you right that squid transparent mode only seems to be running on pfsense 2.15?

So what did you mean with "ran the upgrade"? You upgraded to the recent 2.2 after all, anyway?

[notaduck]

Well i have it running on 2.2.1
have you disabled icmp?

[peter808]

yep.

[kejianshi]

"Any chance of getting a working transparent proxy again?"

Seems to depend on who you ask.

[Steve Evans]

Having another go at this, taking things slowly and making sure I've not overlooked anything.

I'm seeing the following in cache.log on startup.

2015/04/07 22:04:13 kid1| Starting Squid Cache version 3.4.10 for i386-portbld-freebsd10.1...
2015/04/07 22:04:14| pinger: Initialising ICMP pinger ...
2015/04/07 22:04:14|  icmp_sock: (1) Operation not permitted
2015/04/07 22:04:14| pinger: Unable to start ICMP pinger.
2015/04/07 22:04:14|  icmp_sock: (1) Operation not permitted
2015/04/07 22:04:14| pinger: Unable to start ICMPv6 pinger.
2015/04/07 22:04:14| FATAL: pinger: Unable to open any ICMP sockets.
2015/04/07 22:04:16 kid1| Starting Squid Cache version 3.4.10 for i386-portbld-freebsd10.1...
2015/04/07 22:04:16| pinger: Initialising ICMP pinger ...
2015/04/07 22:04:16|  icmp_sock: (1) Operation not permitted
2015/04/07 22:04:16| pinger: Unable to start ICMP pinger.
2015/04/07 22:04:16|  icmp_sock: (1) Operation not permitted
2015/04/07 22:04:16| pinger: Unable to start ICMPv6 pinger.
2015/04/07 22:04:16| FATAL: pinger: Unable to open any ICMP sockets.

Is this normal. Do I need to disable IPv6?

Steve

[Supermule]

I did this… not getting through to HTTP sites but only HTTPS as expected.

Unchecked Suppress Squid Version -> clicked save.

Rebooted.

Now it worked with HTTP sites like it should.

Squid version is 2.7.9 pkg v.4.3.6

EDIT: pretty scary shit. It works for a short time, then it stops working again.

And nothing in the logs at all!

[KOM]

Squid2 was crap from what I understand.  Have you tried Squid3?

[Supermule]

Yes. But I cant get the damned ClamAV working….

V3 doesnt have the same issue.

[KOM]

When using Squid3, I just ignored or disabled the AV crap.  We already have a better solution running on the desktops, and it just slowed everything down when running on the router.

[Supermule]

It annoys me when disabled it still shows in services as not running together with the ICAP crap….

Can someone tell me how to get rid of that so it doesnt trick my OCD all the time?? :D

[KOM]

If you know PHP you could take a look through /usr/local/www/status_services.php and do something with that.

And yes, I fully agree that any services that are not enabled should not even show in the Service Status widget.  I don't know if they can programmatically distinguish between an enabled service that's stopped versus a disabled service.  Either way, it bugs me too that my eye keeps tripping on those little red icons.

[Supermule]

TRUE THAT!!

[peter808]

So coming back to my original post (and believing in the strenght of the devs :) ) :

is there any chance of getting a working transparent proxy again?

[maex]

This bugs me for some quite some time, too.
Enabling transparent works for a couple of calls to websites - then it dies…
Scarry is the right description...

3.1.20 pkg 2.1.2 on pfsense 2.1.5
I have to say that the previous package (whichever that was!?) was running just fine!