Squid3 - New GUI with sync, normal and reverse proxy

aGeekhere · Sep 9, 2015, 12:01 AM

I installed version 0.3.0 today and ended my life. Computers with setted proxy manually, can not load pages. I had to take out the proxy settings of the LAN and did not want to do that.
Is there any way for me to go back to version 0.2.9? :'(
hugs!

Did you delete the squid cache?

default666 · Sep 10, 2015, 6:13 AM

squid 0.3.0 beta

cache cleared

acl > blacklist - not working
acl > banned host adresses - not working
authentication - not working

reinstalled
transparent mode - not working
port change - not working

updated to 0.3.1 - same sh.

doktornotor · Sep 9, 2015, 12:26 PM

@rataosinho:

Is there any way for me to go back to version 0.2.9? :'(

Sure. Revert these patches via System Patches:
https://github.com/doktornotor/pfsense-packages/commit/a928e6df410383d00c19318b5c20459c50249a5a
https://github.com/doktornotor/pfsense-packages/commit/3f881d1e7c55ea875017764e3c6c8522fb344b84

I can assure you that reverting that will fix absolutely none of the issues you are having. Nothing changed in the Squid binaries, nothing changed in blacklists, banned hosts or anything like that, nothing changed in authentication.

P.S. For complete job, do not forget to revert https://github.com/pfsense/pfsense-packages/pull/1053 as well and chmod the pinger binary back to 0755 to get it nicely broken again.

default666 · Sep 10, 2015, 4:25 AM

Sure. Revert these patches via System Patches:

Used this instruction: https://doc.pfsense.org/index.php/System_Patches

Patch can NOT be reverted cleanly.

Output of full patch revert test:
/usr/bin/patch --directory=/usr/local/www/ -f -p1 -i /var/patches/55f0f3997bde1.patch --check --reverse --ignore-whitespace

Hmm...  Looks like a unified diff to me...
The text leading up to this was:
--------------------------
|From a928e6df410383d00c19318b5c20459c50249a5a Mon Sep 17 00:00:00 2001
|From: doktornotor 
|Date: Fri, 4 Sep 2015 22:17:03 +0200
|Subject: [PATCH] squid3 - use install_cron_job() instead of reimplementing it
|
|Also, use platform_booting() for boot check.
|---
| config/squid3/34/squid.inc | 90 +++++++++-------------------------------------
| 1 file changed, 17 insertions(+), 73 deletions(-)
|
|diff --git a/config/squid3/34/squid.inc b/config/squid3/34/squid.inc
|index 2705ceb..481b010 100755
|--- a/config/squid3/34/squid.inc
|+++ b/config/squid3/34/squid.inc
--------------------------
No file to patch.  Skipping...
Hunk #1 ignored at 772.
1 out of 1 hunks ignored while patching config/squid3/34/squid.inc
done

doktornotor · Sep 10, 2015, 10:38 AM

You have the paths wrong, very obviously.

marcelloc · Sep 10, 2015, 8:37 PM

@aGeekHere:

whats new in 0.2.9?

You can click o package version to see it's changelog.

aGeekhere · Sep 11, 2015, 12:30 AM

You can click o package version to see it's changelog.

get 404 error

link
https://github.com/pfsense/pfsense-packages/commits/master/config/34

doktornotor · Sep 12, 2015, 8:02 AM

Kindly test with latest Squid3 version (0.3.2). You either need to uninstall first, or reinstall it twice.

xbipin · Sep 12, 2015, 11:02 AM

i tried updating squid3 with this 0.3.2 but it kept failing so i uninstalled it now it doesnt install at all

Removing squid3 components…
Tabs items... done.
Menu items... done.
Services... done.
Loading package instructions...
Deinstall commands... done.
Removing package instructions...done.
Auxiliary files... done.
Package XML... done.
Configuration... done.
Beginning package installation for squid3 .Saving updated package information... done.
Downloading squid3 and its dependencies...
Checking for package installation... Loading package configuration... failed!

Installation aborted.Removing package...
Starting package deletion for squid-3.4.10_2-i386...done.
Removing squid3 components...
Configuration... done.
done.
Failed to install package.

Package reinstallation failed.

xbipin · Sep 12, 2015, 11:27 AM

fresh reinstall gives this

Beginning package installation for squid3 .
Downloading package configuration file… done.
Saving updated package information... done.
Downloading squid3 and its dependencies...
Checking for package installation...
Downloading https://files.pfsense.org/packages/10/All/squid-3.4.10_2-i386.pbi ... (extracting)
Loading package configuration... done.
Configuring package components...
Loading package configuration... done.
Additional files... squid.inc failed.
Loading package instructions...
Include squid.inc is missing!
Removing package...
Starting package deletion for squid-3.4.10_2-i386...done.
Removing squid3 components...
Tabs items... done.
Menu items... done.
Services... done.
Loading package instructions...
Include file squid.inc could not be found for inclusion.
Deinstall commands...
Not executing custom deinstall hook because an include is missing.
Removing package instructions...done.
Auxiliary files... done.
Package XML... done.
Configuration... done.
done.
Failed to install package.

Installation halted.

doktornotor · Sep 12, 2015, 11:29 AM

Well, when you don't have the inc file, it won't work.


Include squid.inc is missing!
...
Include file squid.inc could not be found for inclusion.

Download the file manually if it keeps failing for you. Sorry, this package manager seriously is a piece of garbage that fails to do any recovery.

xbipin · Sep 12, 2015, 12:18 PM

i figured out the issue, the isp connection was such that it used to drop the connection to pfsense server very often so install always used to miss those files due to timeout to server, i switched over to another connection and then it installed fine

doktornotor · Sep 12, 2015, 12:29 PM

Yeah, this happens on download failures… sadly, it manages to get itself into a state where it can be neither installed nor uninstalled rather often. Why it doesn't try to refetch the file instead of spitting "Oh noes, we are missing required include, kaboom" goes beyond me.

aGeekhere · Sep 13, 2015, 9:39 AM

Kindly test with latest Squid3 version (0.3.2). You either need to uninstall first, or reinstall it twice.

Sure.

Same issue with a reinstall (twice).

Will try again on a new update.

doktornotor · Sep 13, 2015, 10:51 AM

@aGeekHere:

Same issue with a reinstall (twice).

There won't be any new update from me, sorry. Not really even sure what "same issue" are you talking about. Backup config, wipe the messed up box, reinstall, restore config and start from scratch, perhaps.

aGeekhere · Sep 13, 2015, 11:19 PM

The "same issue" is that the link to show squid's changes in the package manger is incorrect and gives

get 404 error

link
https://github.com/pfsense/pfsense-packages/commits/master/config/34

Anyway it is only minor, Found the correct link anyway
https://github.com/pfsense/pfsense-packages/tree/master/config/squid3/34

doktornotor · Sep 14, 2015, 12:37 AM

@aGeekHere:

The "same issue" is that the link to show squid's changes in the package manger is incorrect

Not fixable in package, plus not really sure why it matters.

Alex_RQ · Sep 15, 2015, 1:55 AM

Hello ALL,

Recently switched from NON-Transparent proxy to Transparent. Figured out that URL-Filter (squidGuard) doesn't work for HTTPS sites. So, even if I block all the sites in squidGuard configuration user still able to browse ANY HTTPS site (I made sure that user gets ERROR page for HTTP, so squidGurd works for NON-encrypted traffic).
In NON-Transparent mode it DOES work and users gets regular "Unable to connect" (FireFox) or "This webpage is not available" (Chrome). I assume this is normal behavior.

We run squid3 v0.3.1 (with clamav integrated) and squidGuard v1.9.15 on pfSense 2.2.4-RELEASE (amd64).

1. Is it a known issue with TRANSPARENT mode? Is it possible to fix it somehow? BTW, we do NOT use SSL interception.

2. The second question would be "Where can I get a changelog (the list of new features / fixed issues) for the latest squid3 v0.3.2?".

Thank you in advance.

clusty · Oct 9, 2015, 2:25 AM

Hello,

Something very doubtful is happening: every 1-2 updates completely breaks squid. It seem like it stops caching any traffic in transparent mode.
Multiple reinstallations does not seem to fix it.

Is it a very buggy?

aGeekhere · Oct 9, 2015, 3:24 AM

I have found that squid gets stuck (just sits there pulling full bandwidth) with adobe cc updates,

the error

09.10.2015 14:17:23	192.168.1.244	TCP_CLIENT_REFRESH_MISS_ABORTED/206	http://swupdl.adobe.com/updates/oobe/aam20/win/PhotoshopCameraRaw8-8.0/9.2.89/setup.zip	-	203.213.33.73

Have to disable squid in order for the update to download.