Squid3 / squidguard problems

KOM

Shell in and run

squidclient -h LAN_IP -p 3128 mgr:info

Check the Median Service Times section and look for anything that seems out of place, like a long DNS count.

fraglord

I cannot even get that far as the access is denied

Sending HTTP request … done.
HTTP/1.1 403 Forbidden
Server: squid
Mime-Version: 1.0
Date: Sat, 16 May 2015 00:16:23 GMT
Content-Type: text/html
Content-Length: 3091
X-Squid-Error: ERR_ACCESS_DENIED 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from localhost
X-Cache-Lookup: NONE from localhost:3128
Via: 1.1 localhost (squid)
Connection: close
....
....

I also tried to add a user and also to add my lan subnet in the ACLs tab but not help as well. Tho that is not even neccessary according to the guide above.What's wrong here? :P

fraglord

And if I enable squidguard, the whole machine becomes un responsive and locks up after a while. Console is filled with errors:

Enter an option: swap_pager: indefinite wait buffer: bufobj: 0, blkno: 54203, size: 4096
swap_pager: indefinite wait buffer: bufobj: 0, blkno: 54075, size: 4096
swap_pager: indefinite wait buffer: bufobj: 0, blkno: 460, size: 45056
swap_pager: indefinite wait buffer: bufobj: 0, blkno: 482, size: 4096
swap_pager: indefinite wait buffer: bufobj: 0, blkno: 484, size: 8192
swap_pager: out of swap space
swap_pager_getswapspace(16): failed
swap_pager_getswapspace(16): failed
swap_pager_getswapspace(16): failed
swap_pager_getswapspace(16): failed
swap_pager_getswapspace(12): failed

There is a swap partition but it seems no used as it shows permanently 0% usage :o

swapinfo
Device 1K-blocks Used Avail Capacity
/dev/label/swap0 1048572 0 1048572 0%

KOM

I cannot even get that far as the access is denied

I meant go to the console and pick option 8 for shell, then run the command I gave you above.

swap_pager_getswapspace(16): failed

Something seems to be consuming your swap space in a short amount of time, perhaps due to a memory leak. Did you modify your squid hard disk cache and memory cache settings from default?

fraglord

Yes that is the output already from console / shell.

Well I started with the default settings of squid and then later on increased some cache settings. But there is no difference if I use default settings or not, as soon as I enable squidguard the machine becomes unreachable within a very short time while swap usage remeins at 0%.

KOM

I don't know what else to look for. I haven't seen that error before.

killmasta93

well…right now squid3 has its good days and bad days but if I were you just wait for pfBlockerNG 2.0 it has DNSBL which blocks ads,malware and more. So far its working great. ;D

fraglord

Yes I checked for pfBlockerNG 2.0 already but unfortunately it is not available yet so I decided to give squid a try but with the result above…

killmasta93

pfBlockerNG 2.0 might come out next month. :o

fraglord

I read that somewhere in february too ;D
Meanwhile I am reviewing my setup and that raises a question which interface(s) are the right ones to select in the general section and the transparent proxy section? There is my "normal" WAN internet connection, two OpenVPN connections to my VPN provider and as usual LAN and localhost.
If I select "LAN" for both sections and enable transparent mode, as the howto suggests, I find that all my firewall rules for pbr are ignored and ALL connections use the default gateway that is set under system -> gateways although different machines supposed to be a different gateway to go online. If squid is disabled this works fine but when enabled not anymore..

killmasta93

hmm…Allright lets troubleshoot...Have you tried first installing squid3 reboot, then configure it. After that Install squidGuard configure it click save then apply make sure the services are running. Dont install anything else just those two maybe start again fresh to see if the problem persists. Im running right now Squid3,squidGuard,Sarge,PfblockerNG dev. But In that order i installed them too and its working great.

fraglord

Thanks for your reply. I came across various other posts that describe the same problem as mentioned above: squid uses always th systems default gateway in a multi-WAN setup. This is an ongoing issue since pfsense 2.0 and not certain if it is even adressed and will be fixed :(
I will try my luck then in the multi-WAN section of this forum.
BTW since you using squidguard and pfblockerNG2 what would you recommend in terms of an effective ad blocking solution?