Squid breaks internet

tucansam

Running 2.1.2-RELEASE here, have tried squid and squid3 many times over the last few months. Some web pages work fine, most of the time I get this:

–

ERROR

The requested URL could not be retrieved

While trying to process the request:

GET /125482/no-weld-multi-monitor-stand-crafted-from-sturdy-metal-framing/ HTTP/1.1
Host: www.howtogeek.com
Connection: keep-alive
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.154 Safari/537.36
X-Client-Data: CLG1yQEIhbbJAQiitskBCKm2yQEIxLbJAQiehsoBCLmIygEI2IjKAQiYk8oB
DNT: 1
Referer: http://www.google.com/imgres?imgurl=http%3A%2F%2Fwww.howtogeek.com%2Fgeekers%2Fup%2Fsshot5065bfc17f231.jpg&imgrefurl=http%3A%2F%2Fwww.howtogeek.com%2F125482%2Fno-weld-multi-monitor-stand-crafted-from-sturdy-metal-framing%2F&h=250&w=650&tbnid=MfTSQk5MIZ6NZM%3A&zoom=1&docid=tXZW5I1Lxiep_M&ei=ZLRQU5SvL4bL8wHatIHgBg&tbm=isch&ved=0CHwQMygWMBY&iact=rc&uact=3&dur=256&page=1&start=0&ndsp=32
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8

The following error was encountered:

Invalid Request
Some aspect of the HTTP Request is invalid. Possible problems:

Missing or unknown request method
Missing URL
Missing HTTP Identifier (HTTP/1.0)
Request is too large
Content-Length missing for POST or PUT requests
Illegal character in hostname; underscores are not allowed
Your cache administrator is webmaster.
Generated Fri, 18 Apr 2014 12:43:09 GMT by firewall.none (squid/2.7.STABLE9)

--

Sometimes pages load fine, but then suddenly start giving me this error.

I am using all default values for squid/squid3. Have to uninstall it, again, until I can figure this out.

Any advice?

axiomatic

I am seeing the same on fresh installs. I think 2.1.2 has broken something. Be patient, I'm sure smarter people than I are working on it. ;D

To elaborate further, if you go view the squid status you will see a bunch of "tcp_denied/400" messages. I tried some of the recommended fixes of editing squid.conf to "transparent" and deleting the second instance of 127.0.0.1 but to no avail.

It will get fixed in time. 8)

marcelloc

Did you tried squid3-dev?

squid3 uses old squid3.1
squid3-dev uses squid 3.3

tucansam

@marcelloc:

Did you tried squid3-dev?

squid3 uses old squid3.1
squid3-dev uses squid 3.3

Squid3 appears to be working, although web browsing seems to have gotten a little slower.

I will try squidguard next, which I have also never seemed to get to work right.

marcelloc

@tucansam:

I will try squidguard next, which I have also never seemed to get to work right.

Squidguard needs a patch to work with squid3-dev.
https://forum.pfsense.org/index.php?topic=73640.0

At least on squid documentation, squid 3.3 is faster then squid3.1.

dlogan

I just tried squid again for about the 7th time. On every pfsense install I've ever tried it on, from pfSense 1.2.3 to 2.2.2 and between squid stable and beta, no squidguard, no snort, just a proxy, only change in config is checking the transparent box, squid breaks the internet. About half the sites I click on give that same vague error.

KOM

You could try recreating the cache structure with squid -z and see if that helps. When the cache goes weird, squid goes weird.

Transparent mode is broken. Don't use transparent mode anyway as it's an ugly hack that breaks HTTPS.

https://doc.pfsense.org/index.php/WPAD_Autoconfigure_for_Squid

pfcode

Hi, Guys

My machine is an amd64 computer, pfSense 2.2.2 from live-cd, I have been trying Squid3 for weeks, there were Snort, pfBlockerNG and Squid3, 3 packages under pfSense, all clean installed, but can't surf the internet unless I turn off the Transparent HTTP Proxy mode, all I get are the following error:

ERROR
The requested URL could not be retrieved

The following error was encountered while trying to retrieve the URL: http://www.google.ca

Connection to 127.0.0.1 failed.

The system returned: (60) Operation timed out

The remote host or network may be down. Please try the request again.

Your cache administrator is admin@localhost.

Also, the Antivirus never works for me. Does Antivirus have to be worked with Transparent HTTP Proxy mode turned on?

Thanks for any helps.