Squid stops everytime the configs are saved

reinaldo.gomes

So, everytime I save configs in Squid or apply changes in SquidGuard, both services are stopped, and don't get started unless I do it manually. Sometimes, the interface through which I sent the save/apply commando will go unresponsive as the service goes down, until I restart the server, or bring Squid up through another interface.

Any idea about what might be happening?
pfSense: 2.3.1
Squid: 0.4.18
SquidGuard: 1.14_3

Below is the log entries (ordered from bottom to top) recorded when the issue happened:

Jun 23 15:03:58	php-fpm	268	/rc.filter_configure_sync: [squid] Installed but disabled. Not installing 'filter' rules.
Jun 23 15:03:58	php-fpm	268	/rc.filter_configure_sync: [squid] Installed but disabled. Not installing 'pfearly' rules.
Jun 23 15:03:58	xinetd	10814	Reconfigured: new=0 old=1 dropped=0 (services)
Jun 23 15:03:58	xinetd	10814	readjusting service 6969-udp
Jun 23 15:03:58	xinetd	10814	Swapping defaults
Jun 23 15:03:58	xinetd	10814	Starting reconfiguration
Jun 23 15:03:58	php-fpm	268	/rc.filter_configure_sync: [squid] Installed but disabled. Not installing 'nat' rules.
Jun 23 15:03:56	check_reload_status		Reloading filter
Jun 23 15:03:56	php-fpm	268	/rc.filter_configure_sync: [squid] Installed but disabled. Not installing 'filter' rules.
Jun 23 15:03:56	php-fpm	268	/rc.filter_configure_sync: [squid] Installed but disabled. Not installing 'pfearly' rules.
Jun 23 15:03:56	xinetd	10814	Reconfigured: new=0 old=1 dropped=0 (services)
Jun 23 15:03:56	xinetd	10814	readjusting service 6969-udp
Jun 23 15:03:56	xinetd	10814	Swapping defaults
Jun 23 15:03:56	xinetd	10814	Starting reconfiguration
Jun 23 15:03:56	php-fpm	268	/rc.filter_configure_sync: [squid] Installed but disabled. Not installing 'nat' rules.
Jun 23 15:03:56	php-fpm	267	/rc.filter_configure_sync: [squid] Installed but disabled. Not installing 'filter' rules.
Jun 23 15:03:56	php-fpm	267	/rc.filter_configure_sync: [squid] Installed but disabled. Not installing 'pfearly' rules.
Jun 23 15:03:56	xinetd	10814	Reconfigured: new=0 old=1 dropped=0 (services)
Jun 23 15:03:56	xinetd	10814	readjusting service 6969-udp
Jun 23 15:03:56	xinetd	10814	Swapping defaults
Jun 23 15:03:56	xinetd	10814	Starting reconfiguration
Jun 23 15:03:56	php-fpm	267	/rc.filter_configure_sync: [squid] Installed but disabled. Not installing 'nat' rules.
Jun 23 15:03:55	php-fpm	266	/pkg_edit.php: [squid] Removing freshclam cronjob.
Jun 23 15:03:55	php-fpm	266	/pkg_edit.php: [squid] Antivirus features disabled.
Jun 23 15:03:55	php-fpm	266	/pkg_edit.php: [squid] Removing cronjobs ...
Jun 23 15:03:55	php-fpm	266	/pkg_edit.php: [squid] - squid_resync function call pr: bp: rpc:no
Jun 23 15:03:55	check_reload_status		Reloading filter
Jun 23 15:03:55	check_reload_status		Syncing firewall
Jun 23 15:03:55	check_reload_status		Reloading filter
Jun 23 15:03:49	php-fpm	266	/pkg_edit.php: [squid] Stopping service...
Jun 23 15:03:48	php-fpm	266	/pkg_edit.php: [squid] Stopping any running proxy monitors
Jun 23 15:03:48	php-fpm	266	/pkg_edit.php: [squid] Removing freshclam cronjob.
Jun 23 15:03:48	php-fpm	266	/pkg_edit.php: [squid] Antivirus features disabled.
Jun 23 15:03:48	php-fpm	266	/pkg_edit.php: [squid] Removing cronjobs ...
Jun 23 15:03:47	php-fpm	266	/pkg_edit.php: [squid] - squid_resync function call pr:1 bp: rpc:no

ajnozari

You need to check your config, when you save Squid stops then re-starts to reload the configuration. However if something in your config isn't set properly then Squid won't start again. Try looking at any recent config changes or look in /var/squid/logs/ for any error logs and post them here for us. Alternatively you can look at taking screenshots and posting those as well.

reinaldo.gomes

@ajnozari:

You need to check your config, when you save Squid stops then re-starts to reload the configuration.

I've removed the only changes I had done in SquidGuard (target categories), and even came to the point of disabling SquidGuard. Same results.

I've disabled everything in the main config page, leaving only "Transparent HTTP Proxy" checkbox marked. Same results. There are no other customized configs in Squid whatsoever.

It seems that no matter what I do config-wise, squid will stop and won't come back again when configs are saved.

@ajnozari:

However if something in your config isn't set properly then Squid won't start again.

If that was the case, then Squid shouldn't start when I do it manually, isn't it so? Besides, Squid/SquidGuard work just fine once it's started, blocking whatever I tell it to.

@ajnozari:

Try looking at any recent config changes or look in /var/squid/logs/ for any error logs and post them here for us.

I found no errors at all, in any logs. The only events recorded when this happens (or should I say, when this doesn't happen) is the ones I posted.

Nachtfalke

Your logs look okay, i think. in generally it should work. Perhaps it can take some very long time to rebuild some blacklists or something like that or perhaps rebuilding the squid cache which makes you think it won't start automatically.

Don't know a real solution for that but perhaps as a workaround you can try the "watchdog" package and make it restart squid and the corresponding services if the are not running. watchdog checks these services every minutie and can restart them. So this is just a dirty hack for your problem but not the solution.

Perhaps clearing the squid disk cache could help and perhaps stopping all relates services (squid, squidclamav, freshclam, c-icap, squidguard) via services and then click "Save" in the squidAntiVirus secition to restart squid/clamav, then do olater click "save" on the squid config to restart these services and at least clock "save" and the "Apply" on squidguard general page to get squidguard running.
Or perhaps easier restart pfsense to make sure all services will be restarted and then try again. But clearing the disk cache could do the trick perhaps.

Regards.

RichardEb

@ajnozari:

when you save Squid stops then re-starts to reload the configuration.

Why is pfsense not using the reload function/option instead of a restart? Atm you can't make any changes in a live environment. I have to wait until everyone has finished work to make any changes.