Squid3 - New GUI with sync, normal and reverse proxy

ismaelnoble

@hackersoft:

I am still experiencing the same problem.

I've got the time last week to reinstall pfsense amd-64 and the same problem exists.

So my solution right now is to reboot pfsense everyday using CRON @ 1 am. That way pfsense will be alive the next working day.

I'm suspecting one of the packages installed is messing it up at 12 midnight so I do a cron to reboot the machine @ 1am daily.

To heimdal, you can install the CRON package then add a cron task:

0 1 * * * root /sbin/reboot

I hope the fix will be released soon.

for some wierd reason im getting this too, a look at the logs doesnt show much so its been one of those evil bugs that dont leave any traces. i did mitigate it by simply seting up a cron job that runs squid at 12.15 am …

currently i have squid, squidguard, ntopng and freeradius setup and running its just this but that is "bugging" me

dkrizic

@Cino:

@dalex:

Hello.
I need IPv6 support, so i think Squid3 is my only option.

squid 3 does support IPv6, but it doesn't listen on an IPv6 address tho. So clients would need to connect to ipv4:3128. You can however in advance options add an IPv6 interface e.g http_port [xxxx.xxxx.xxxx.xxxx.xxx.xxx]:3182

How can I use IPv6 with the Reverse Proxy? I currently listen on IPv4/80 and IPv4/443 and would like to additionally listen on IPv6.

hell bomb

Interesting error, while AV is enabled while navigating to most websites (not all websites) I get TAG_NONE/500 Status error. Any suggestions?

SisterOfMercy

@varazir:

How do I add this list http://winhelp2002.mvps.org/hosts.txt to squid3? or do I need squidGuard ?

Wouldn't pfBlockerNG work better in this case?

aGeekhere

whats new in 0.2.9?

S. Kirschner

@aGeekHere:

whats new in 0.2.9?

Hm , its still the same version.

Here are the build options of 0.2.9

Squid Cache: Version 3.4.10
configure options:  '--with-default-user=squid' '--bindir=/usr/local/sbin' '--sbindir=/usr/local/sbin' '--datadir=/usr/local/etc/squid' '--libexecdir=/usr/local/libexec/squid'
 '--localstatedir=/var' '--sysconfdir=/usr/local/etc/squid' '--with-logdir=/var/log/squid' '--with-pidfile=/var/run/squid/squid.pid' '--with-swapdir=/var/squid/cache' '--enable-auth'
 '--enable-build-info' '--enable-loadable-modules' '--enable-removal-policies=lru heap' '--disable-epoll' '--disable-linux-netfilter' '--disable-linux-tproxy' '--disable-translation'
 '--disable-arch-native' '--enable-eui' '--enable-cache-digests' '--enable-delay-pools' '--enable-ecap' '--disable-esi' '--enable-follow-x-forwarded-for' '--enable-htcp'
 '--enable-icap-client' '--enable-icmp' '--enable-ident-lookups' '--enable-ipv6' '--enable-kqueue' '--with-large-files' '--enable-http-violations' '--without-nettle' '--enable-snmp' '--enable-ssl'
 '--enable-ssl-crtd' '--disable-stacktraces' '--disable-ipf-transparent' '--disable-ipfw-transparent' '--enable-pf-transparent' '--with-nat-devpf' '--disable-forw-via-db' '--enable-wccp'
 '--enable-wccpv2' '--enable-auth-basic=DB MSNT MSNT-multi-domain NCSA PAM POP3 RADIUS fake getpwnam LDAP NIS' '--enable-auth-digest=file'
 '--enable-external-acl-helpers=file_userip time_quota unix_group LDAP_group' '--enable-auth-negotiate=kerberos wrapper' '--enable-auth-ntlm=fake smb_lm'
 '--enable-storeio=ufs aufs diskd' '--enable-disk-io=AIO Blocking IpcIo Mmapped DiskThreads DiskDaemon' '--enable-log-daemon-helpers=file' '--enable-url-rewrite-helpers=fake'
 '--enable-storeid-rewrite-helpers=file' '--with-openssl=/usr' '--prefix=/usr/local' '--mandir=/usr/local/man' '--infodir=/usr/local/info/' '--build=amd64-portbld-freebsd10.1' 
'build_alias=amd64-portbld-freebsd10.1' 'CC=cc' 'CFLAGS=-O2 -pipe  -I/usr/local/include -I/usr/local/include -I/usr/include -fstack-protector -DLDAP_DEPRECATED -fno-strict-aliasing'
 'LDFLAGS= -L/usr/local/lib -L/usr/local/lib -pthread -Wl,-rpath,/usr/lib:/usr/local/lib -L/usr/lib -fstack-protector' 'LIBS=' 'CPPFLAGS=' 'CXX=c++'
 'CXXFLAGS=-O2 -pipe -I/usr/local/include -I/usr/local/include -I/usr/include -fstack-protector -DLDAP_DEPRECATED -fno-strict-aliasing  -Wno-unused-private-field' 'CPP=cpp' 'PKG_CONFIG=pkgconf' --enable-ltdl-convenience

aGeekhere

well I updated,all went well, just had to remove the cache after the install or else i get page loading issues.

magicduck

Hi there.

I found a "bug" / "feature" when we have IPv6.
Seems that I have to add manually the IPv6 to listen on the squid (on the integration box)

Is this normal ?

Cino

@magicduck:

Hi there.

I found a "bug" / "feature" when we have IPv6.
Seems that I have to add manually the IPv6 to listen on the squid (on the integration box)

Is this normal ?

Yes its normal. Its been that way since squid3 was added as a package. I would say its a feature that needs to be added to the GUI. To enable it and grab the interface IP from the interfaces you select

rataosinho

I installed version 0.3.0 today and ended my life. Computers with setted proxy manually, can not load pages. I had to take out the proxy settings of the LAN and did not want to do that.
Is there any way for me to go back to version 0.2.9? :'(
hugs!

whitexp

@rataosinho:

I installed version 0.3.0 today and ended my life. Computers with setted proxy manually, can not load pages. I had to take out the proxy settings of the LAN and did not want to do that.
Is there any way for me to go back to version 0.2.9? :'(
hugs!

same here

aGeekhere

I installed version 0.3.0 today and ended my life. Computers with setted proxy manually, can not load pages. I had to take out the proxy settings of the LAN and did not want to do that.
Is there any way for me to go back to version 0.2.9? :'(
hugs!

Did you delete the squid cache?

default666

squid 0.3.0 beta

cache cleared

acl > blacklist - not working
acl > banned host adresses - not working
authentication - not working

reinstalled
transparent mode - not working
port change - not working

updated to 0.3.1 - same sh.

doktornotor

@rataosinho:

Is there any way for me to go back to version 0.2.9? :'(

Sure. Revert these patches via System Patches:
https://github.com/doktornotor/pfsense-packages/commit/a928e6df410383d00c19318b5c20459c50249a5a
https://github.com/doktornotor/pfsense-packages/commit/3f881d1e7c55ea875017764e3c6c8522fb344b84

I can assure you that reverting that will fix absolutely none of the issues you are having. Nothing changed in the Squid binaries, nothing changed in blacklists, banned hosts or anything like that, nothing changed in authentication.

P.S. For complete job, do not forget to revert https://github.com/pfsense/pfsense-packages/pull/1053 as well and chmod the pinger binary back to 0755 to get it nicely broken again.

default666

Sure. Revert these patches via System Patches:

Used this instruction: https://doc.pfsense.org/index.php/System_Patches

Patch can NOT be reverted cleanly.

Output of full patch revert test:
/usr/bin/patch --directory=/usr/local/www/ -f -p1 -i /var/patches/55f0f3997bde1.patch --check --reverse --ignore-whitespace

Hmm...  Looks like a unified diff to me...
The text leading up to this was:
--------------------------
|From a928e6df410383d00c19318b5c20459c50249a5a Mon Sep 17 00:00:00 2001
|From: doktornotor 
|Date: Fri, 4 Sep 2015 22:17:03 +0200
|Subject: [PATCH] squid3 - use install_cron_job() instead of reimplementing it
|
|Also, use platform_booting() for boot check.
|---
| config/squid3/34/squid.inc | 90 +++++++++-------------------------------------
| 1 file changed, 17 insertions(+), 73 deletions(-)
|
|diff --git a/config/squid3/34/squid.inc b/config/squid3/34/squid.inc
|index 2705ceb..481b010 100755
|--- a/config/squid3/34/squid.inc
|+++ b/config/squid3/34/squid.inc
--------------------------
No file to patch.  Skipping...
Hunk #1 ignored at 772.
1 out of 1 hunks ignored while patching config/squid3/34/squid.inc
done

doktornotor

You have the paths wrong, very obviously.

marcelloc

@aGeekHere:

whats new in 0.2.9?

You can click o package version to see it's changelog.

changelog.png_thumb

aGeekhere

You can click o package version to see it's changelog.

get 404 error

link
https://github.com/pfsense/pfsense-packages/commits/master/config/34

doktornotor

Kindly test with latest Squid3 version (0.3.2). You either need to uninstall first, or reinstall it twice.

xbipin

i tried updating squid3 with this 0.3.2 but it kept failing so i uninstalled it now it doesnt install at all

Removing squid3 components…
Tabs items... done.
Menu items... done.
Services... done.
Loading package instructions...
Deinstall commands... done.
Removing package instructions...done.
Auxiliary files... done.
Package XML... done.
Configuration... done.
Beginning package installation for squid3 .Saving updated package information... done.
Downloading squid3 and its dependencies...
Checking for package installation... Loading package configuration... failed!

Installation aborted.Removing package...
Starting package deletion for squid-3.4.10_2-i386...done.
Removing squid3 components...
Configuration... done.
done.
Failed to install package.

Package reinstallation failed.