Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Any chance of getting a working transparent proxy again?

    Scheduled Pinned Locked Moved Cache/Proxy
    31 Posts 9 Posters 7.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S Offline
      Steve Evans
      last edited by

      Having another go at this, taking things slowly and making sure I've not overlooked anything.

      I'm seeing the following in cache.log on startup.

      2015/04/07 22:04:13 kid1| Starting Squid Cache version 3.4.10 for i386-portbld-freebsd10.1...
2015/04/07 22:04:14| pinger: Initialising ICMP pinger ...
2015/04/07 22:04:14|  icmp_sock: (1) Operation not permitted
2015/04/07 22:04:14| pinger: Unable to start ICMP pinger.
2015/04/07 22:04:14|  icmp_sock: (1) Operation not permitted
2015/04/07 22:04:14| pinger: Unable to start ICMPv6 pinger.
2015/04/07 22:04:14| FATAL: pinger: Unable to open any ICMP sockets.
2015/04/07 22:04:16 kid1| Starting Squid Cache version 3.4.10 for i386-portbld-freebsd10.1...
2015/04/07 22:04:16| pinger: Initialising ICMP pinger ...
2015/04/07 22:04:16|  icmp_sock: (1) Operation not permitted
2015/04/07 22:04:16| pinger: Unable to start ICMP pinger.
2015/04/07 22:04:16|  icmp_sock: (1) Operation not permitted
2015/04/07 22:04:16| pinger: Unable to start ICMPv6 pinger.
2015/04/07 22:04:16| FATAL: pinger: Unable to open any ICMP sockets.

      Is this normal. Do I need to disable IPv6?

      Steve

      1 Reply Last reply Reply Quote 0
      • S Offline
        Supermule Banned
        last edited by

        I did this… not getting through to HTTP sites but only HTTPS as expected.

        Unchecked Suppress Squid Version -> clicked save.

        Rebooted.

        Now it worked with HTTP sites like it should.

        Squid version is 2.7.9 pkg v.4.3.6

        EDIT: pretty scary shit. It works for a short time, then it stops working again.

        And nothing in the logs at all!

        1 Reply Last reply Reply Quote 0
        • KOMK Offline
          KOM
          last edited by

          Squid2 was crap from what I understand.  Have you tried Squid3?

          1 Reply Last reply Reply Quote 0
          • S Offline
            Supermule Banned
            last edited by

            Yes. But I cant get the damned ClamAV working….

            V3 doesnt have the same issue.

            1 Reply Last reply Reply Quote 0
            • KOMK Offline
              KOM
              last edited by

              When using Squid3, I just ignored or disabled the AV crap.  We already have a better solution running on the desktops, and it just slowed everything down when running on the router.

              1 Reply Last reply Reply Quote 0
              • S Offline
                Supermule Banned
                last edited by

                It annoys me when disabled it still shows in services as not running together with the ICAP crap….

                Can someone tell me how to get rid of that so it doesnt trick my OCD all the time?? :D

                1 Reply Last reply Reply Quote 0
                • KOMK Offline
                  KOM
                  last edited by

                  If you know PHP you could take a look through /usr/local/www/status_services.php and do something with that.

                  And yes, I fully agree that any services that are not enabled should not even show in the Service Status widget.  I don't know if they can programmatically distinguish between an enabled service that's stopped versus a disabled service.  Either way, it bugs me too that my eye keeps tripping on those little red icons.

                  1 Reply Last reply Reply Quote 0
                  • S Offline
                    Supermule Banned
                    last edited by

                    TRUE THAT!!

                    1 Reply Last reply Reply Quote 0
                    • P Offline
                      peter808
                      last edited by

                      So coming back to my original post (and believing in the strenght of the devs :) ) :

                      is there any chance of getting a working transparent proxy again?

                      1 Reply Last reply Reply Quote 0
                      • M Offline
                        maex
                        last edited by

                        This bugs me for some quite some time, too.
                        Enabling transparent works for a couple of calls to websites - then it dies…
                        Scarry is the right description...

                        3.1.20 pkg 2.1.2 on pfsense 2.1.5
                        I have to say that the previous package (whichever that was!?) was running just fine!

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.