Squid not normal work update to new verison

yon

today udate pf to the new verison , then squid just not normal work. how i do fix it ?
2.4.1-DEVELOPMENT (amd64)
built on Tue Aug 22 12:41:22 CDT 2017

![Screenshot of Package_ Squid_ Monitor.jpg](/public/imported_attachments/1/Screenshot of Package_ Squid_ Monitor.jpg)
![Screenshot of Package_ Squid_ Monitor.jpg_thumb](/public/imported_attachments/1/Screenshot of Package_ Squid_ Monitor.jpg_thumb)

yon

i think should the new squid pkg has chang config file. i try re-saved the config and change it , it work now again.

just need save steup config .

:)

daweeze02

Same here, updated to 2.4RC and squid stopped working. I have opened the config file and resaved it but it did not fix anything, filtering still is not working

yon

yes, work not stable in v2.4.1 for me. you try use copy the defaut config and edit it.

change the ip to yourself


# This file is automatically generated by pfSense
# Do not edit manually !

http_port 192.168.100.254:3128
icp_port 8
digest_generation off
dns_v4_first off
pid_filename /var/run/squid/squid.pid
cache_effective_user squid
cache_effective_group proxy
error_default_language zh-cn
icon_directory /usr/local/etc/squid/icons
visible_hostname yon.net
cache_mgr admin@yon.net
access_log /var/squid/logs/access.log
cache_log /var/squid/logs/cache.log
cache_store_log none
netdb_filename /var/squid/logs/netdb.state
pinger_enable on
pinger_program /usr/local/libexec/squid/pinger

logfile_rotate 30
debug_options rotate=30
shutdown_lifetime 3 seconds
# Allow local network(s) on interface(s)
acl localnet src  192.168.100.0/24
forwarded_for delete
via off
uri_whitespace strip
dns_nameservers 8.8.8.8  

cache_mem 512 MB
maximum_object_size_in_memory 512 KB
memory_replacement_policy heap GDSF
cache_replacement_policy heap LFUDA
minimum_object_size 0 KB
maximum_object_size 4 MB
cache_dir diskd /var/squid/cache 5000 32 256
offline_mode off
cache_swap_low 90
cache_swap_high 95
cache allow all
# Add any of your own refresh_pattern entries above these.
refresh_pattern ^ftp:    1440  20%  10080
refresh_pattern ^gopher:  1440  0%  1440
refresh_pattern -i (/cgi-bin/|\?) 0  0%  0
refresh_pattern .    0  20%  4320

#Remote proxies

# Setup some default acls
# ACLs all, manager, localhost, and to_localhost are predefined.
acl allsrc src all
acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901 2253 3128 3129 1025-65535 
acl sslports port 443 563 2253 22100

acl purge method PURGE
acl connect method CONNECT

# Define protocols used for redirects
acl HTTP proto HTTP
acl HTTPS proto HTTPS
acl allowed_subnets src all
acl unrestricted_hosts src "/var/squid/acl/unrestricted_hosts.acl"
acl whitelist dstdom_regex -i "/var/squid/acl/whitelist.acl"
http_access allow manager localhost

http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !safeports
http_access deny CONNECT !sslports

# Always allow localhost connections
http_access allow localhost

request_body_max_size 0 KB
delay_pools 1
delay_class 1 2
delay_parameters 1 -1/-1 -1/-1
delay_initial_bucket_level 100
# Do not throttle unrestricted hosts
delay_access 1 deny unrestricted_hosts
delay_access 1 allow allsrc

# Reverse Proxy settings

deny_info TCP_RESET allsrc

# Custom options before auth

# These hosts do not have any restrictions
http_access allow unrestricted_hosts
# Always allow access to whitelist domains
http_access allow whitelist
acl noauth src 192.168.100.0/24
auth_param basic program /usr/local/libexec/squid/basic_ncsa_auth /var/etc/squid.passwd
auth_param basic children 20
auth_param basic realm 璐︽埛鐧诲綍 Login
auth_param basic credentialsttl 10080 minutes
acl password proxy_auth REQUIRED
# Custom options after auth

http_access allow unrestricted_hosts
http_access allow noauth
http_access allow password localnet
http_access allow password allowed_subnets
# Default block all to be sure
http_access deny allsrc

icap_enable on
icap_send_client_ip on
icap_send_client_username on
icap_client_username_encode off
icap_client_username_header X-Authenticated-User
icap_preview_enable on
icap_preview_size 1024

icap_service service_avi_req reqmod_precache icap://127.0.0.1:1344/squid_clamav bypass=off
adaptation_access service_avi_req allow all
icap_service service_avi_resp respmod_precache icap://127.0.0.1:1344/squid_clamav bypass=on
adaptation_access service_avi_resp allow all

yon

i have to back to v4.0rc, so v2.4.1 newest version ipv6 down.