Pfsense 2.2.6 Squid3 nao inicia - Urgente
-
só a carater de teste. Desabilite o ENABLE SSL FILTERING na guia SSL Main-in-the-middle filtering
rode o squid -k parse novamente
Pode ser algum problema no certificado
-
Desabilitei e o squid deu o start porem o squidguard nao e também nao esta bloqueando nada.
[2.2.6-RELEASE][admin@fw.nacional.com.br]/root: squid -k parse
2016/01/29 15:04:06| Startup: Initializing Authentication Schemes ... 2016/01/29 15:04:06| Startup: Initialized Authentication Scheme 'basic' 2016/01/29 15:04:06| Startup: Initialized Authentication Scheme 'digest' 2016/01/29 15:04:06| Startup: Initialized Authentication Scheme 'negotiate' 2016/01/29 15:04:06| Startup: Initialized Authentication Scheme 'ntlm' 2016/01/29 15:04:06| Startup: Initialized Authentication. 2016/01/29 15:04:06| Processing Configuration File: /usr/local/etc/squid/squid.conf (depth 0) 2016/01/29 15:04:06| Processing: http_port 192.168.1.1:3128 ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=10MB cert=/usr/pbi/squid-amd64/local/etc/squid/serverkey.pem capath=/usr/pbi/squid-amd64/local/share/certs/ cipher=EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:HIGH:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS dhparams=/etc/dh-parameters.2048 options=NO_SSLv2,NO_SSLv3,SINGLE_DH_USE 2016/01/29 15:04:06| Processing: http_port 127.0.0.1:3128 intercept ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=10MB cert=/usr/pbi/squid-amd64/local/etc/squid/serverkey.pem capath=/usr/pbi/squid-amd64/local/share/certs/ cipher=EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:HIGH:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS dhparams=/etc/dh-parameters.2048 options=NO_SSLv2,NO_SSLv3,SINGLE_DH_USE 2016/01/29 15:04:06| Starting Authentication on port 127.0.0.1:3128 2016/01/29 15:04:06| Disabling Authentication on port 127.0.0.1:3128 (interception enabled) 2016/01/29 15:04:06| Processing: https_port 127.0.0.1:3129 intercept ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=10MB cert=/usr/pbi/squid-amd64/local/etc/squid/serverkey.pem capath=/usr/pbi/squid-amd64/local/share/certs/ cipher=EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:HIGH:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS dhparams=/etc/dh-parameters.2048 options=NO_SSLv2,NO_SSLv3,SINGLE_DH_USE 2016/01/29 15:04:06| Starting Authentication on port 127.0.0.1:3129 2016/01/29 15:04:06| Disabling Authentication on port 127.0.0.1:3129 (interception enabled) 2016/01/29 15:04:06| Processing: icp_port 0 2016/01/29 15:04:06| Processing: dns_v4_first on 2016/01/29 15:04:06| Processing: pid_filename /var/run/squid/squid.pid 2016/01/29 15:04:06| Processing: cache_effective_user proxy 2016/01/29 15:04:06| Processing: cache_effective_group proxy 2016/01/29 15:04:06| Processing: error_default_language pt-br 2016/01/29 15:04:06| Processing: icon_directory /usr/pbi/squid-amd64/local/etc/squid/icons 2016/01/29 15:04:06| Processing: visible_hostname Nacional 2016/01/29 15:04:06| Processing: cache_mgr comercial@infohelpte.com.br 2016/01/29 15:04:06| Processing: access_log /var/squid/logs/access.log 2016/01/29 15:04:06| Processing: cache_log /var/squid/logs/cache.log 2016/01/29 15:04:06| Processing: cache_store_log none 2016/01/29 15:04:06| Processing: netdb_filename /var/squid/logs/netdb.state 2016/01/29 15:04:06| Processing: pinger_enable on 2016/01/29 15:04:06| Processing: pinger_program /usr/pbi/squid-amd64/local/libexec/squid/pinger 2016/01/29 15:04:06| Processing: sslcrtd_program /usr/pbi/squid-amd64/local/libexec/squid/ssl_crtd -s /var/squid/lib/ssl_db -M 4MB -b 2048 2016/01/29 15:04:06| Processing: sslcrtd_children 5 2016/01/29 15:04:06| Processing: sslproxy_capath /usr/pbi/squid-amd64/local/share/certs/ 2016/01/29 15:04:06| Processing: sslproxy_options NO_SSLv2,NO_SSLv3,SINGLE_DH_USE 2016/01/29 15:04:06| Processing: sslproxy_cipher EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:HIGH:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS 2016/01/29 15:04:06| Processing: sslproxy_cert_error allow all 2016/01/29 15:04:06| Processing: sslproxy_cert_adapt setValidBefore all 2016/01/29 15:04:06| Processing: logfile_rotate 0 2016/01/29 15:04:06| Processing: debug_options rotate=0 2016/01/29 15:04:06| Processing: shutdown_lifetime 3 seconds 2016/01/29 15:04:06| Processing: acl localnet src 192.168.1.0/24 2016/01/29 15:04:06| Processing: forwarded_for on 2016/01/29 15:04:06| Processing: httpd_suppress_version_string on 2016/01/29 15:04:06| Processing: uri_whitespace strip 2016/01/29 15:04:06| Processing: acl dynamic urlpath_regex cgi-bin \? 2016/01/29 15:04:06| Processing: cache deny dynamic 2016/01/29 15:04:06| Processing: cache_mem 1024 MB 2016/01/29 15:04:06| Processing: maximum_object_size_in_memory 512 KB 2016/01/29 15:04:06| Processing: memory_replacement_policy heap GDSF 2016/01/29 15:04:06| Processing: cache_replacement_policy heap LFUDA 2016/01/29 15:04:06| Processing: minimum_object_size 0 KB 2016/01/29 15:04:06| Processing: maximum_object_size 4 MB 2016/01/29 15:04:06| Processing: cache_dir ufs /var/squid/cache 100 256 256 2016/01/29 15:04:06| Processing: offline_mode off 2016/01/29 15:04:06| Processing: cache_swap_low 90 2016/01/29 15:04:06| Processing: cache_swap_high 95 2016/01/29 15:04:06| Processing: cache allow all 2016/01/29 15:04:06| Processing: refresh_pattern ^ftp: 1440 20% 10080 2016/01/29 15:04:06| Processing: refresh_pattern ^gopher: 1440 0% 1440 2016/01/29 15:04:06| Processing: refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 2016/01/29 15:04:06| Processing: refresh_pattern . 0 20% 4320 2016/01/29 15:04:06| Processing: acl allsrc src all 2016/01/29 15:04:06| Processing: acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901 3128 3129 1025-65535 2016/01/29 15:04:06| Processing: acl sslports port 443 563 2016/01/29 15:04:06| Processing: acl purge method PURGE 2016/01/29 15:04:06| Processing: acl connect method CONNECT 2016/01/29 15:04:06| Processing: acl HTTP proto HTTP 2016/01/29 15:04:06| Processing: acl HTTPS proto HTTPS 2016/01/29 15:04:06| Processing: acl allowed_subnets src 192.168.1.0/24 2016/01/29 15:04:06| Processing: acl whitelist dstdom_regex -i "/var/squid/acl/whitelist.acl" 2016/01/29 15:04:06| Processing: acl blacklist dstdom_regex -i "/var/squid/acl/blacklist.acl" 2016/01/29 15:04:06| Processing: http_access allow manager localhost 2016/01/29 15:04:06| Processing: http_access deny manager 2016/01/29 15:04:06| Processing: http_access allow purge localhost 2016/01/29 15:04:06| Processing: http_access deny purge 2016/01/29 15:04:06| Processing: http_access deny !safeports 2016/01/29 15:04:06| Processing: http_access deny CONNECT !sslports 2016/01/29 15:04:06| Processing: request_body_max_size 0 KB 2016/01/29 15:04:06| Processing: delay_pools 1 2016/01/29 15:04:06| Processing: delay_class 1 2 2016/01/29 15:04:06| Processing: delay_parameters 1 -1/-1 -1/-1 2016/01/29 15:04:06| Processing: delay_initial_bucket_level 100 2016/01/29 15:04:06| Processing: delay_access 1 allow allsrc 2016/01/29 15:04:06| Processing: always_direct allow whitelist 2016/01/29 15:04:06| Processing: ssl_bump none whitelist 2016/01/29 15:04:06| Processing: url_rewrite_program /usr/pbi/squidguard-amd64/bin/squidGuard -c /usr/pbi/squidguard-amd64/etc/squidGuard/squidGuard.conf 2016/01/29 15:04:06| Processing: url_rewrite_bypass off 2016/01/29 15:04:06| Processing: url_rewrite_children 16 startup=8 idle=4 concurrency=0 2016/01/29 15:04:06| Processing: http_access allow whitelist 2016/01/29 15:04:06| Processing: http_access deny blacklist 2016/01/29 15:04:06| Processing: always_direct allow all 2016/01/29 15:04:06| Processing: ssl_bump server-first all 2016/01/29 15:04:06| Processing: http_access allow allowed_subnets 2016/01/29 15:04:06| Processing: http_access allow localnet 2016/01/29 15:04:06| Processing: http_access deny allsrc 2016/01/29 15:04:06| Initializing https proxy context 2016/01/29 15:04:06| Initializing http_port 192.168.1.1:3128 SSL context 2016/01/29 15:04:06| Using certificate in /usr/pbi/squid-amd64/local/etc/squid/serverkey.pem 2016/01/29 15:04:06| Initializing http_port 127.0.0.1:3128 SSL context 2016/01/29 15:04:06| Using certificate in /usr/pbi/squid-amd64/local/etc/squid/serverkey.pem 2016/01/29 15:04:06| Initializing https_port 127.0.0.1:3129 SSL context 2016/01/29 15:04:06| Using certificate in /usr/pbi/squid-amd64/local/etc/squid/serverkey.pem [2.2.6-RELEASE][admin@fw.nacional.com.br]/root: squid -k parse
-
ok, como estao suas regras no squidguard?
-
O Squid parou novamente.
-
foi o squidguard que parou
como estao suas regras no squidguard?
-
Está tudo parado novamente.
Tanto Squid e o SquidGuard
Eu dou o Start no squid ele habilita por 1 minutos e para novamente.
Quanto ao SquidGuard enviei o print no post anterior.
-
no post anterior nao tem print com as regras
-
Segue
-
Existe alguma forma de zera o pfsense como do zero sem perder as configurações da placa de rede?
Ou se tem alguma versão do pfsense que não esteja com esse tipo de problema, aonde posso fazer as regras de bloqueios de http/https conforme o video e o link abaixo:
https://www.youtube.com/watch?v=neXcYtFDRLA
https://forum.pfsense.org/index.php?topic=62263.0.html
-
preciso da aba target categories e group ACL
-
Nao configurei GRUPO ACL
-
Existe alguma forma de zera o pfsense como do zero sem perder as configurações da placa de rede?
Ou se tem alguma versão do pfsense que não esteja com esse tipo de problema, aonde posso fazer as regras de bloqueios de http/https conforme o video e o link abaixo:
https://www.youtube.com/watch?v=neXcYtFDRLA
https://forum.pfsense.org/index.php?topic=62263.0.html
-
Ou se tem alguma versão do pfsense que não esteja com esse tipo de problema
O problema com certeza não é a versão do pfSense.