Squid3 0.3.5 package

doktornotor

ClamAV is always 0.98.6 version (Recommended version: 0.98.7)

Complete non-issue (and something that's not "fixable" without recompiling the whole thing (not going to happen).

in Antivirus tab, the Advanced features buttons don't show advanced option

Yeah. That's bug in pfSense's pkg_edit.php. I'll move it back out of the "advanced" fields. (You can fix it by removing the <advancedfield>tags from /usr/local/pkg/squid_antivirus.xml; or fetch it here:

https://raw.githubusercontent.com/doktornotor/pfsense-packages/7e2a8e7fbc189b5e580beb45a98e1fad200bf5b4/config/squid3/34/squid_antivirus.xml</advancedfield>

BitPoint

Many thanks!!!
I made the change and all working properly.
Yet one note:
after upgrading, I noticed that the hard disk usage increased rapidly. So I had to stop the service and run the following commands:

rm -r /var/squid/cache/*

squid -z

and reboot the system. Now it seems to work fine.

Many many thanks.
Best regards.

doktornotor

@BitPoint:

after upgrading, I noticed that the hard disk usage increased rapidly. So I had to stop the service and run the following commands:

rm -r /var/squid/cache/*

squid -z

Uhm… not exactly sure what you mean there? ???

The size used by cache is configurable on the "Local Cache" tab under "Hard Disk Cache Size". Sure it's possible to stick a button to wipe cache there and I'll probably do that, however that's not any long-term solution for improper settings...

foetus

I'm trying out the edited version 0.3.5.1, but cannot seem to get I-CAP service to start.

I edited out the <advancedfield>tags, and entered a custom error page as needed in squidclamav.conf.
Saved every page again. No errors (especially on the AV page).

But I-Cap just mentions :
root: /usr/local/etc/rc.d/c-icap: WARNING: failed to start c_icap

tried a reboot or 2 also.
2.2.4 - x64</advancedfield>

doktornotor

I installed this on a VM. It took about 2 hours to download AV defs from the default mirror (check ps auxw for freshclam running). Until it's there, it just won't start. Obviously, this needs a configurable set of mirrors, because the default one seems completely unusable.

foetus

ps auxw shows no freshclam.
Running it manually gives me (unless I interpret this wrong, up to date):

$ freshclam
ClamAV update process started at Tue Sep 29 20:27:45 2015
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.98.6 Recommended version: 0.98.7
DON'T PANIC! Read http://www.clamav.net/support/faq
main.cvd is up to date (version: 55, sigs: 2424225, f-level: 60, builder: neo)
daily.cvd is up to date (version: 20948, sigs: 1595197, f-level: 63, builder: shurley)
bytecode.cvd is up to date (version: 268, sigs: 47, f-level: 63, builder: anvilleg)

But if it took 2 hours initially, i'll just give this some time to cook in the background. :)
Thanks for the feedback.

doktornotor

Sorry, but the c-icap thing is not exactly a priority ATM. Moved absolutely nowhere with tracing the broken chown. The log is completely useless.


php-fpm[39239]: /pkg_edit.php: Squid attempted to chown an invalid directory:

So… if I run chown() on something's that unset/empty/god knows what, it will chown everything from / ? Would sound kinda a like a huge issue with chown() in PHP.

doktornotor

This stupidity plus bunch of other issues is fixed are https://github.com/pfsense/pfsense-packages/pull/1083 ::)

technical

Squid Parent: (squid-1) process 27590 will not be restarted due to repeated, frequent failures

doktornotor

O@TechnicaL:

Squid Parent: (squid-1) process 27590 will not be restarted due to repeated, frequent failures

You need to post some steps to reproduce your problem, sorry.

doktornotor

Closing this. New thread for 0.3.6 created.