Problema con squidguard+squid3+pfsense 2.2.4

periko

Yo hablo de pfsense….si es virtual mucho mas rapido solo saca un respaldo excepto los paquetes.

earth2380

tranquilo voy a volverlo a instalar desde cero en vmware solo estoy haciendo pruebas el pfsense de mi red esta en una maquina fisica, beno entonces dime que pasos debo seguir instalo y despues…........

periko

jajajaja tranquilo….?
Yo estoy relajado...

Que pasas seguir? pues instalo sin nada de paquetes y metes 1ro squid y lo pones a trabajar para empezar...

earth2380

jjejjjje es una forma de decir

ok listo, ya te comento aunque squid3 va afuncionar ya lo hice mas de 5 veces jijijijiji

periko

Dale, tienes la version 32 y 64 bits pero sera una de las ultimas cosas que yo me preocuparia…
Te recomiendo abrir la consola ssh para ver logs si las cosas se ponen feas.

earth2380

instale y el squid trabajando sin problemas proxy+transprente+ssl , navegcion y todo

despues de 20 minutos de prueba funciona bien el squid3 voy a instalar el squidguard

supuestamente este paquete trabaja con squid2 y3

alguna sugerencia de como seguir el orden para iniciarlo????

periko

SSL, te refieres a que estas filtrando https?

esta cacheando squid?

periko

Antes de meter a el otro conectate a tu consola via ssh, y ejecutas:

tail -n 30 /var/squid/log/cache.log

Muestras el contenido aqui de favor.

bellera

@earth2380:

me ayudan configurandolo porque lo he modificado de muchas maneras y nada no funciona no levantan ni squid3 ni squidguard por cierto es pfsense 64 bit

# squid config options
# ------------------------------------------------------------------------------

$pf_version=substr(trim(file_get_contents("/etc/version")),0,3);

define('REDIRECTOR_OPTIONS_REM',   '# squidGuard options');
define('REDIRECT_CHILDREN_OPT',    'url_rewrite_children');
if ($pf_version >= 2.2) { 
   define('REDIRECTOR_PROGRAM_OPT',   'url_rewrite_program');
   define('REDIRECT_BYPASS_OPT',      'url_rewrite_bypass');
   define('REDIRECTOR_PROCESS_COUNT', '16 startup=8 idle=4 concurrency=0');
} else {
   define('REDIRECTOR_PROGRAM_OPT',   'redirect_program');
   define('REDIRECT_BYPASS_OPT',      'redirector_bypass');
   define('REDIRECTOR_PROCESS_COUNT', '5');
}

# ------------------------------------------------------------------------------
# squidguard config options

No estoy seguro de que ese código sea correcto, pues mira la versión de pfSense y no la de squid. Si squid es un 3.x en lugar de 2.x la sintaxis tiene que ser url_rewrite_program …

O sea que, tranquilamente, en lugar de:

if ($pf_version >= 2.2) { 
   define('REDIRECTOR_PROGRAM_OPT',   'url_rewrite_program');
   define('REDIRECT_BYPASS_OPT',      'url_rewrite_bypass');
   define('REDIRECTOR_PROCESS_COUNT', '16 startup=8 idle=4 concurrency=0');
} else {
   define('REDIRECTOR_PROGRAM_OPT',   'redirect_program');
   define('REDIRECT_BYPASS_OPT',      'redirector_bypass');
   define('REDIRECTOR_PROCESS_COUNT', '5');
}

dejar sólo

define('REDIRECTOR_PROGRAM_OPT',   'url_rewrite_program');
define('REDIRECT_BYPASS_OPT',      'url_rewrite_bypass');
define('REDIRECTOR_PROCESS_COUNT', '16 startup=8 idle=4 concurrency=0');

tal como expliqué en https://forum.pfsense.org/index.php?topic=73740.0 y está en Documentación.

Si squid cae tras instalar squidGuard es que la sintaxis de squid.conf (la configuración de squid) queda mal.

earth2380

usuario periko, si eso creo que se llama Man-in-the-middle ,todavia no llego ha esa parte necesito que funcione el squidguard para hacer filtrado https

con respecto a esto "tail -n 30 /var/squid/log/cache.log" dice que no existe

earth2380

usuario bellera, ese es el archivo original de squidguard ese lo modifique de muchas maneras incluido el de "documentacion" y supuestamentamente arranca sale servicios activos pero a los sgundos los dos dejan de funcionar ,intentare nuevamente hacerlo auque ya lo hice

earth2380

"bellera"al activar squidguard la caja de integracion en squid3 queda asi con tu sugerencia de modificacion

url_rewrite_program /usr/pbi/squidguard-amd64/bin/squidGuard -c /usr/pbi/squidguard-amd64/etc/squidGuard/squidGuard.conf;url_rewrite_bypass off;url_rewrite_children 16 startup=8 idle=4 concurrency=0

despes de hacer varias pruebas mas definitivamente no se integra bien squidguard con squid3

periko

No existe ese archivo?
Si predistes el cache?
Ahora no necesitas meter nada a mano para squidguard, una vez prendido el mete lo necesario a la config de squid a no ser que hayan cambido esa parte de pfsense?
Saludos.

earth2380

saludos

volvi a dejar el archivo "/usr/local/pkg/squidguard_configurator.inc" como estaba sin la modificacion de "bellera" osea original en la caja de integracion squid3 me sale esto:

url_rewrite_program /usr/pbi/squidguard-amd64/bin/squidGuard -c /usr/pbi/squidguard-amd64/etc/squidGuard/squidGuard.conf;url_rewrite_bypass off;url_rewrite_children 16 startup=8 idle=4 concurrency=0

bueno dejando a un lado esto hay alguna solucion???????al problema de integracion????

porque definitivmente al activar squidguard me tira abajo el servicio squid3

periko

Ocupamos ver el log de squid. ese error te va a salir en el cache.log, otra cosa tambien ejecuta:

squid -k parse

Ya que no arranca, ejecutalo y sacas aqui el resultado a ver que dice.

Saludos.

elbocha01

Por lo que mencionas, me da a la sensacion de que tenes que poner las black list, las actualizas y debe de levantar ambos servicios. yo tube un problema parecido y donde actualise las blacklist se soluciono. cualquier cosa publica la solucion asi nos quedamos tranquilos.

yo uso estas http://www.shallalist.de/Downloads/shallalist.tar.gz, copias y pegas en download y espera que complete XD

si funciona squid solo, el problema lo tenes en squidguard, y el mayor problema de squidguard son las blacklist XD

pdt : todo desde cero.

chidgear

Intenta lo que dice elbocha01, solo que, también, no olvides crear una categoría con uno o dos urls puesto que, sin esta, el squidguard sigue tronando en la mayoria de los casos (En mi caso, la categoria es una "lista blanca" donde puse google y la url del lugar donde trabajo).

Saludos! 8)

earth2380

saludos a todos los que estan ayudandome con el problema despues de varios dias de ausencia retomo el caso…................por motivos personales .............estube offline..........

bueno el caso es que cache.log me vota esto y segun lei el problema esta en un archivo que no encuentra corrijanmen si es asi............y donde lo encuentro

2015/08/04 23:21:53 kid1| Starting Squid Cache version 3.4.10 for amd64-portbld-freebsd10.1...
2015/08/04 23:21:53 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/04 23:21:53 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/04 23:21:53| pinger: Initialising ICMP pinger …
2015/08/04 23:26:46 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/04 23:26:46 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/04 23:26:46| pinger: Initialising ICMP pinger …
2015/08/04 23:26:48 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/04 23:26:48 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/04 23:26:48| pinger: Initialising ICMP pinger …
2015/08/04 23:26:50 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/04 23:26:50 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/04 23:26:50| pinger: Initialising ICMP pinger …
2015/08/04 23:27:47 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/04 23:27:47 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/04 23:27:47| pinger: Initialising ICMP pinger …
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/04 23:27:48 kid1| WARNING: redirector #Hlpr0 exited
FATAL: The redirector helpers are crashing too rapidly, need help!

Squid Cache (Version 3.4.10): Terminated abnormally.
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
CPU Usage: 1.113 seconds = 0.850 user + 0.263 sys
Maximum Resident Size: 157744 KB
Page faults with physical i/o: 8
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"

2015/08/04 23:27:51 kid1| Starting Squid Cache version 3.4.10 for amd64-portbld-freebsd10.1...
2015/08/04 23:27:51 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/04 23:27:51 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/04 23:27:51| pinger: Initialising ICMP pinger …
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/04 23:27:52 kid1| WARNING: redirector #Hlpr0 exited
FATAL: The redirector helpers are crashing too rapidly, need help!

Squid Cache (Version 3.4.10): Terminated abnormally.
CPU Usage: 0.224 seconds = 0.149 user + 0.075 sys
Maximum Resident Size: 92800 KB
Page faults with physical i/o: 0
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"

Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/04 23:27:55 kid1| Starting Squid Cache version 3.4.10 for amd64-portbld-freebsd10.1...
2015/08/04 23:27:55 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/04 23:27:55 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/04 23:27:56| pinger: Initialising ICMP pinger …
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/04 23:27:56 kid1| WARNING: redirector #Hlpr0 exited
FATAL: The redirector helpers are crashing too rapidly, need help!

Squid Cache (Version 3.4.10): Terminated abnormally.
CPU Usage: 0.240 seconds = 0.190 user + 0.050 sys
Maximum Resident Size: 92624 KB
Page faults with physical i/o: 0
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"

Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/04 23:27:59 kid1| Starting Squid Cache version 3.4.10 for amd64-portbld-freebsd10.1...
2015/08/04 23:27:59 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/04 23:27:59 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/04 23:28:00| pinger: Initialising ICMP pinger …
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/04 23:28:00 kid1| WARNING: redirector #Hlpr0 exited
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
FATAL: The redirector helpers are crashing too rapidly, need help!

Squid Cache (Version 3.4.10): Terminated abnormally.
CPU Usage: 0.248 seconds = 0.195 user + 0.053 sys
Maximum Resident Size: 92496 KB
Page faults with physical i/o: 0
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"Shared object "libldap-2.4.so.2" not found, required by "squidGuard"

Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/04 23:28:03 kid1| Starting Squid Cache version 3.4.10 for amd64-portbld-freebsd10.1...
2015/08/04 23:28:03 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/04 23:28:03 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/04 23:28:04| pinger: Initialising ICMP pinger …
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/04 23:28:04 kid1| WARNING: redirector #Hlpr0 exited
FATAL: The redirector helpers are crashing too rapidly, need help!

Squid Cache (Version 3.4.10): Terminated abnormally.
CPU Usage: 0.230 seconds = 0.151 user + 0.079 sys
Maximum Resident Size: 92656 KB
Page faults with physical i/o: 0
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"Shared object "libldap-2.4.so.2" not found, required by "squidGuard"

Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"Shared object "libldap-2.4.so.2" not found, required by "squidGuard"

Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/04 23:28:08 kid1| Starting Squid Cache version 3.4.10 for amd64-portbld-freebsd10.1...
2015/08/04 23:28:08 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/04 23:28:08 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/04 23:28:08| pinger: Initialising ICMP pinger …
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/04 23:28:09 kid1| WARNING: redirector #Hlpr0 exited
FATAL: The redirector helpers are crashing too rapidly, need help!

Squid Cache (Version 3.4.10): Terminated abnormally.
CPU Usage: 0.237 seconds = 0.128 user + 0.109 sys
Maximum Resident Size: 92656 KB
Page faults with physical i/o: 0
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"Shared object "libldap-2.4.so.2" not found, required by "squidGuard"

Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/04 23:28:24 kid1| Starting Squid Cache version 3.4.10 for amd64-portbld-freebsd10.1...
2015/08/04 23:28:24 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/04 23:28:24 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/04 23:28:24| pinger: Initialising ICMP pinger …
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/04 23:28:25 kid1| WARNING: redirector #Hlpr0 exited
FATAL: The redirector helpers are crashing too rapidly, need help!

Squid Cache (Version 3.4.10): Terminated abnormally.
CPU Usage: 0.262 seconds = 0.208 user + 0.054 sys
Maximum Resident Size: 92656 KB
Page faults with physical i/o: 0
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"Shared object "libldap-2.4.so.2" not found, required by "squidGuard"

Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/04 23:28:28 kid1| Starting Squid Cache version 3.4.10 for amd64-portbld-freebsd10.1...
2015/08/04 23:28:28 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/04 23:28:28 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/04 23:28:29| pinger: Initialising ICMP pinger …
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/04 23:28:30 kid1| WARNING: redirector #Hlpr0 exited
FATAL: The redirector helpers are crashing too rapidly, need help!

Squid Cache (Version 3.4.10): Terminated abnormally.
CPU Usage: 0.302 seconds = 0.242 user + 0.060 sys
Maximum Resident Size: 98496 KB
Page faults with physical i/o: 0
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"

Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/04 23:28:33 kid1| Starting Squid Cache version 3.4.10 for amd64-portbld-freebsd10.1...
2015/08/04 23:28:33 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/04 23:28:33 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/04 23:28:34| pinger: Initialising ICMP pinger …
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/04 23:28:34 kid1| WARNING: redirector #Hlpr0 exited
FATAL: The redirector helpers are crashing too rapidly, need help!

Squid Cache (Version 3.4.10): Terminated abnormally.
CPU Usage: 0.260 seconds = 0.162 user + 0.097 sys
Maximum Resident Size: 92480 KB
Page faults with physical i/o: 0
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"Shared object "libldap-2.4.so.2" not found, required by "squidGuard"

Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/04 23:28:38 kid1| Starting Squid Cache version 3.4.10 for amd64-portbld-freebsd10.1...
2015/08/04 23:28:38 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/04 23:28:38 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/04 23:28:39| pinger: Initialising ICMP pinger …
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/04 23:28:39 kid1| WARNING: redirector #Hlpr0 exited
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"

FATAL: The redirector helpers are crashing too rapidly, need help!

Squid Cache (Version 3.4.10): Terminated abnormally.
CPU Usage: 0.302 seconds = 0.183 user + 0.119 sys
Maximum Resident Size: 92656 KB
Page faults with physical i/o: 0
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"Shared object "libldap-2.4.so.2" not found, required by "squidGuard"

Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/04 23:28:42 kid1| Starting Squid Cache version 3.4.10 for amd64-portbld-freebsd10.1...
2015/08/04 23:28:42 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/04 23:28:42 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/04 23:28:43| pinger: Initialising ICMP pinger …
2015/08/05 00:00:00| pinger: Initialising ICMP pinger ...
2015/08/05 00:52:01 kid1| Shutdown: NTLM authentication.
2015/08/05 00:52:01 kid1| Shutdown: Negotiate authentication.
2015/08/05 00:52:01 kid1| Shutdown: Digest authentication.
2015/08/05 00:52:01 kid1| Shutdown: Basic authentication.
CPU Usage: 0.823 seconds = 0.573 user + 0.250 sys
Maximum Resident Size: 102064 KB
Page faults with physical i/o: 0
2015/08/05 18:47:45 kid1| Starting Squid Cache version 3.4.10 for amd64-portbld-freebsd10.1...
2015/08/05 18:47:45 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/05 18:47:45 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/05 18:47:47| pinger: Initialising ICMP pinger …
2015/08/05 18:59:27 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/05 18:59:27 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/05 18:59:27| pinger: Initialising ICMP pinger …
2015/08/05 18:59:28 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/05 18:59:28 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/05 18:59:29| pinger: Initialising ICMP pinger …
2015/08/05 19:10:47 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/05 19:10:47 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/05 19:10:47| pinger: Initialising ICMP pinger …
2015/08/05 19:10:48 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/05 19:10:48 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/05 19:10:48| pinger: Initialising ICMP pinger …
2015/08/05 19:15:02 kid1| Shutdown: NTLM authentication.
2015/08/05 19:15:02 kid1| Shutdown: Negotiate authentication.
2015/08/05 19:15:02 kid1| Shutdown: Digest authentication.
2015/08/05 19:15:02 kid1| Shutdown: Basic authentication.
CPU Usage: 1.444 seconds = 0.583 user + 0.861 sys
Maximum Resident Size: 157696 KB
Page faults with physical i/o: 8
2015/08/05 19:16:22 kid1| Starting Squid Cache version 3.4.10 for amd64-portbld-freebsd10.1...
2015/08/05 19:16:22 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/05 19:16:22 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/05 19:16:23| pinger: Initialising ICMP pinger …
2015/08/05 22:20:26 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/05 22:20:26 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/05 22:20:27| pinger: Initialising ICMP pinger …
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/05 22:20:28 kid1| WARNING: redirector #Hlpr0 exited
FATAL: The redirector helpers are crashing too rapidly, need help!

Squid Cache (Version 3.4.10): Terminated abnormally.
CPU Usage: 1.642 seconds = 1.044 user + 0.598 sys
Maximum Resident Size: 112960 KB
Page faults with physical i/o: 8
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"

Shared object "libldap-2.4.so.2" not found, required by "squidGuard"Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"

2015/08/05 22:20:31 kid1| Starting Squid Cache version 3.4.10 for amd64-portbld-freebsd10.1...
2015/08/05 22:20:31 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/05 22:20:31 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/05 22:20:32| pinger: Initialising ICMP pinger …
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/05 22:20:32 kid1| WARNING: redirector #Hlpr0 exited
FATAL: The redirector helpers are crashing too rapidly, need help!

Squid Cache (Version 3.4.10): Terminated abnormally.
CPU Usage: 0.286 seconds = 0.139 user + 0.148 sys
Maximum Resident Size: 92576 KB
Page faults with physical i/o: 0
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"

Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/05 22:20:35 kid1| Starting Squid Cache version 3.4.10 for amd64-portbld-freebsd10.1...
2015/08/05 22:20:35 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/05 22:20:35 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/05 22:20:36| pinger: Initialising ICMP pinger …
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/05 22:20:37 kid1| WARNING: redirector #Hlpr0 exited
FATAL: The redirector helpers are crashing too rapidly, need help!

Squid Cache (Version 3.4.10): Terminated abnormally.
CPU Usage: 0.235 seconds = 0.126 user + 0.109 sys
Maximum Resident Size: 92560 KB
Page faults with physical i/o: 0
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"

2015/08/05 22:20:40 kid1| Starting Squid Cache version 3.4.10 for amd64-portbld-freebsd10.1...
2015/08/05 22:20:40 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/05 22:20:40 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/05 22:20:41| pinger: Initialising ICMP pinger …
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/05 22:20:41 kid1| WARNING: redirector #Hlpr0 exited
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"FATAL: The redirector helpers are crashing too rapidly, need help!

Squid Cache (Version 3.4.10): Terminated abnormally.
CPU Usage: 0.245 seconds = 0.070 user + 0.175 sys
Maximum Resident Size: 92576 KB
Page faults with physical i/o: 0
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"

Shared object "libldap-2.4.so.2" not found, required by "squidGuard"Shared object "libldap-2.4.so.2" not found, required by "squidGuard"

Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/05 22:20:44 kid1| Starting Squid Cache version 3.4.10 for amd64-portbld-freebsd10.1...
2015/08/05 22:20:44 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/05 22:20:44 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/05 22:20:45| pinger: Initialising ICMP pinger …
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/05 22:20:45 kid1| WARNING: redirector #Hlpr0 exited
FATAL: The redirector helpers are crashing too rapidly, need help!

Squid Cache (Version 3.4.10): Terminated abnormally.
CPU Usage: 0.233 seconds = 0.153 user + 0.080 sys
Maximum Resident Size: 92576 KB
Page faults with physical i/o: 0
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"

Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/05 22:20:48 kid1| Starting Squid Cache version 3.4.10 for amd64-portbld-freebsd10.1...
2015/08/05 22:20:48 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/05 22:20:48 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/05 22:20:49| pinger: Initialising ICMP pinger …
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/05 22:20:49 kid1| WARNING: redirector #Hlpr0 exited
FATAL: The redirector helpers are crashing too rapidly, need help!

Squid Cache (Version 3.4.10): Terminated abnormally.
CPU Usage: 0.234 seconds = 0.094 user + 0.140 sys
Maximum Resident Size: 92176 KB
Page faults with physical i/o: 0
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"

Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"

2015/08/05 22:21:04 kid1| Starting Squid Cache version 3.4.10 for amd64-portbld-freebsd10.1...
2015/08/05 22:21:04 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/05 22:21:04 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/05 22:21:05| pinger: Initialising ICMP pinger …
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/05 22:21:05 kid1| WARNING: redirector #Hlpr0 exited

FATAL: The redirector helpers are crashing too rapidly, need help!

Squid Cache (Version 3.4.10): Terminated abnormally.
CPU Usage: 0.219 seconds = 0.146 user + 0.073 sys
Maximum Resident Size: 92368 KB
Page faults with physical i/o: 0
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"Shared object "libldap-2.4.so.2" not found, required by "squidGuard"

Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/05 22:21:09 kid1| Starting Squid Cache version 3.4.10 for amd64-portbld-freebsd10.1...
2015/08/05 22:21:09 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/05 22:21:09 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/05 22:21:09| pinger: Initialising ICMP pinger …
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/05 22:21:10 kid1| WARNING: redirector #Hlpr0 exited
FATAL: The redirector helpers are crashing too rapidly, need help!

Squid Cache (Version 3.4.10): Terminated abnormally.
CPU Usage: 0.240 seconds = 0.160 user + 0.080 sys
Maximum Resident Size: 92496 KB
Page faults with physical i/o: 0
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"Shared object "libldap-2.4.so.2" not found, required by "squidGuard"

Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/05 22:21:13 kid1| Starting Squid Cache version 3.4.10 for amd64-portbld-freebsd10.1...
2015/08/05 22:21:13 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/05 22:21:13 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/05 22:21:14| pinger: Initialising ICMP pinger …
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/05 22:21:14 kid1| WARNING: redirector #Hlpr0 exited
FATAL: The redirector helpers are crashing too rapidly, need help!

Squid Cache (Version 3.4.10): Terminated abnormally.
CPU Usage: 0.217 seconds = 0.147 user + 0.070 sys
Maximum Resident Size: 92576 KB
Page faults with physical i/o: 0
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/05 22:21:17 kid1| Starting Squid Cache version 3.4.10 for amd64-portbld-freebsd10.1...
2015/08/05 22:21:17 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/05 22:21:17 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/05 22:21:18| pinger: Initialising ICMP pinger …
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/05 22:21:18 kid1| WARNING: redirector #Hlpr0 exited

FATAL: The redirector helpers are crashing too rapidly, need help!

Squid Cache (Version 3.4.10): Terminated abnormally.
CPU Usage: 0.227 seconds = 0.133 user + 0.094 sys
Maximum Resident Size: 92576 KB
Page faults with physical i/o: 0
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/05 22:21:22 kid1| Starting Squid Cache version 3.4.10 for amd64-portbld-freebsd10.1...
2015/08/05 22:21:22 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/05 22:21:22 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/05 22:21:22| pinger: Initialising ICMP pinger …
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/05 22:21:23 kid1| WARNING: redirector #Hlpr0 exited
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"

FATAL: The redirector helpers are crashing too rapidly, need help!

Squid Cache (Version 3.4.10): Terminated abnormally.
CPU Usage: 0.213 seconds = 0.153 user + 0.060 sys
Maximum Resident Size: 92560 KB
Page faults with physical i/o: 0
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"Shared object "libldap-2.4.so.2" not found, required by "squidGuard"

Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
Shared object "libldap-2.4.so.2" not found, required by "squidGuard"
2015/08/05 22:21:56 kid1| Starting Squid Cache version 3.4.10 for amd64-portbld-freebsd10.1...
2015/08/05 22:21:56 kid1| WARNING: Squid does not accept 0.0.0.0 in DNS server specifications.
2015/08/05 22:21:56 kid1| Will be using [::1] instead, assuming you meant that DNS is running on the same machine
2015/08/05 22:21:56| pinger: Initialising ICMP pinger …

ahora con el comando squid -k parse me sale esto

$ squid -k parse
2015/08/06 19:37:29| Startup: Initializing Authentication Schemes ...
2015/08/06 19:37:29| Startup: Initialized Authentication Scheme 'basic'
2015/08/06 19:37:29| Startup: Initialized Authentication Scheme 'digest'
2015/08/06 19:37:29| Startup: Initialized Authentication Scheme 'negotiate'
2015/08/06 19:37:29| Startup: Initialized Authentication Scheme 'ntlm'
2015/08/06 19:37:29| Startup: Initialized Authentication.
2015/08/06 19:37:29| Processing Configuration File: /usr/local/etc/squid/squid.conf (depth 0)
2015/08/06 19:37:29| Processing: http_port 192.168.0.1:3128 ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=10MB cert=/usr/pbi/squid-amd64/local/etc/squid/serverkey.pem capath=/usr/pbi/squid-amd64/local/share/certs/
2015/08/06 19:37:29| Processing: http_port 127.0.0.1:3128 intercept ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=10MB cert=/usr/pbi/squid-amd64/local/etc/squid/serverkey.pem capath=/usr/pbi/squid-amd64/local/share/certs/
2015/08/06 19:37:29| Starting Authentication on port 127.0.0.1:3128
2015/08/06 19:37:29| Disabling Authentication on port 127.0.0.1:3128 (interception enabled)
2015/08/06 19:37:29| Processing: https_port 127.0.0.1:3129 intercept ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=10MB cert=/usr/pbi/squid-amd64/local/etc/squid/serverkey.pem capath=/usr/pbi/squid-amd64/local/share/certs/
2015/08/06 19:37:29| Starting Authentication on port 127.0.0.1:3129
2015/08/06 19:37:29| Disabling Authentication on port 127.0.0.1:3129 (interception enabled)
2015/08/06 19:37:29| Processing: icp_port 0
2015/08/06 19:37:29| Processing: dns_v4_first off
2015/08/06 19:37:29| Processing: pid_filename /var/run/squid/squid.pid
2015/08/06 19:37:29| Processing: cache_effective_user proxy
2015/08/06 19:37:29| Processing: cache_effective_group proxy
2015/08/06 19:37:29| Processing: error_default_language es
2015/08/06 19:37:29| Processing: icon_directory /usr/pbi/squid-amd64/local/etc/squid/icons
2015/08/06 19:37:29| Processing: visible_hostname localhost
2015/08/06 19:37:29| Processing: cache_mgr admin@localhost
2015/08/06 19:37:29| Processing: access_log /var/squid/logs/access.log
2015/08/06 19:37:29| Processing: cache_log /var/squid/logs/cache.log
2015/08/06 19:37:29| Processing: cache_store_log none
2015/08/06 19:37:29| Processing: netdb_filename /var/squid/logs/netdb.state
2015/08/06 19:37:29| Processing: pinger_enable on
2015/08/06 19:37:29| Processing: pinger_program /usr/pbi/squid-amd64/local/libexec/squid/pinger
2015/08/06 19:37:29| Processing: sslcrtd_program /usr/pbi/squid-amd64/local/libexec/squid/ssl_crtd -s /var/squid/lib/ssl_db -M 4MB -b 2048
2015/08/06 19:37:29| Processing: sslcrtd_children 5
2015/08/06 19:37:29| Processing: sslproxy_capath /usr/pbi/squid-amd64/local/share/certs/
2015/08/06 19:37:29| Processing: sslproxy_flags DONT_VERIFY_PEER
2015/08/06 19:37:29| Processing: logfile_rotate 0
2015/08/06 19:37:29| Processing: debug_options rotate=0
2015/08/06 19:37:29| Processing: shutdown_lifetime 3 seconds
2015/08/06 19:37:29| Processing: acl localnet src 192.168.0.0/24
2015/08/06 19:37:29| Processing: forwarded_for on
2015/08/06 19:37:29| Processing: uri_whitespace strip
2015/08/06 19:37:29| Processing: acl dynamic urlpath_regex cgi-bin ?
2015/08/06 19:37:29| Processing: cache deny dynamic
2015/08/06 19:37:29| Processing: cache_mem 8 MB
2015/08/06 19:37:29| Processing: maximum_object_size_in_memory 32 KB
2015/08/06 19:37:29| Processing: memory_replacement_policy heap GDSF
2015/08/06 19:37:29| Processing: cache_replacement_policy heap LFUDA
2015/08/06 19:37:29| Processing: minimum_object_size 0 KB
2015/08/06 19:37:29| Processing: maximum_object_size 10 KB
2015/08/06 19:37:29| Processing: offline_mode off
2015/08/06 19:37:29| Processing: cache allow all
2015/08/06 19:37:29| Processing: refresh_pattern ^ftp: 1440 20% 10080
2015/08/06 19:37:29| Processing: refresh_pattern ^gopher: 1440 0% 1440
2015/08/06 19:37:29| Processing: refresh_pattern -i (/cgi-bin/|?) 0 0% 0
2015/08/06 19:37:29| Processing: refresh_pattern . 0 20% 4320
2015/08/06 19:37:29| Processing: acl allsrc src all
2015/08/06 19:37:29| Processing: acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901 3128 3127 1025-65535
2015/08/06 19:37:29| Processing: acl sslports port 443 563
2015/08/06 19:37:29| Processing: acl purge method PURGE
2015/08/06 19:37:29| Processing: acl connect method CONNECT
2015/08/06 19:37:29| Processing: acl HTTP proto HTTP
2015/08/06 19:37:29| Processing: acl HTTPS proto HTTPS
2015/08/06 19:37:29| Processing: http_access allow manager localhost
2015/08/06 19:37:29| Processing: http_access deny manager
2015/08/06 19:37:29| Processing: http_access allow purge localhost
2015/08/06 19:37:29| Processing: http_access deny purge
2015/08/06 19:37:29| Processing: http_access deny !safeports
2015/08/06 19:37:29| Processing: http_access deny CONNECT !sslports
2015/08/06 19:37:29| Processing: request_body_max_size 0 KB
2015/08/06 19:37:29| Processing: delay_pools 1
2015/08/06 19:37:29| Processing: delay_class 1 2
2015/08/06 19:37:29| Processing: delay_parameters 1 -1/-1 -1/-1
2015/08/06 19:37:29| Processing: delay_initial_bucket_level 100
2015/08/06 19:37:29| Processing: delay_access 1 allow allsrc
2015/08/06 19:37:29| Processing: always_direct allow all
2015/08/06 19:37:29| Processing: ssl_bump server-first all
2015/08/06 19:37:29| Processing: always_direct allow all
2015/08/06 19:37:29| Processing: ssl_bump server-first all
2015/08/06 19:37:29| Processing: http_access allow localnet
2015/08/06 19:37:29| Processing: http_access deny allsrc
2015/08/06 19:37:29| Initializing https proxy context
2015/08/06 19:37:29| Initializing http_port 192.168.0.1:3128 SSL context
2015/08/06 19:37:29| Using certificate in /usr/pbi/squid-amd64/local/etc/squid/serverkey.pem
2015/08/06 19:37:29| Initializing http_port 127.0.0.1:3128 SSL context
2015/08/06 19:37:29| Using certificate in /usr/pbi/squid-amd64/local/etc/squid/serverkey.pem
2015/08/06 19:37:29| Initializing https_port 127.0.0.1:3129 SSL context
2015/08/06 19:37:29| Using certificate in /usr/pbi/squid-amd64/local/etc/squid/serverkey.pem

earth2380

;D ;D !SOLUCIONADO !!!! ;D ;D

gracias a todos por sus aportes y conclusiones

la solucion era lo que explica "elbocha01" y "chidgear" osea cargando las blacklist y poniendo en target categorie dos dominios como whitelist funciono de maravilla y de ahi en adelante a bloquear

ahora para que el filtrado https funcione encontre la solucion indagando por internet
hay que agregar estas dos lineas en la caja de squid3 "Custom ACLS (Before_Auth)" lo siguiente:

always_direct allow all
ssl_bump server-first all

reinician pfsense y listo

;D ;D ;D ;D ;D ;D ;D ;D

tengo la siguiente configuracion
proxy+transparente+ssl bump+squidguard+fitrado https

elbocha01

Me re alegro, mucha suerte y a bloquear :D