Squid and Squidguard Service stops at 7:55am every morning
-
Completely new to the PFSense Firewall and not from the Linux world.
Running PFSense version 2.1 Release (i386)Each morning at 7:55am PFSense restarts all the packages. Don't know where this is scheduled (Not under firewall - Schedules) or why it needs to restart each day but it does. When this occurs it stops the Squid and SquidGuard Services but does not restart them so I have to go in and start the services otherwise no one has access to the Internet.
I think the setup has always been like this. Squid and SquidGuard was already installed when I got here but never used. So I have implemented the Proxy Server to try and manage staff Internet access.
The logs
Nov 5 07:55:30 check_reload_status: Rewriting resolv.conf
Nov 5 07:55:38 php: rc.newwanip: ROUTING: setting default route to 202.65.32.6
Nov 5 07:55:44 php: rc.newwanip: Resyncing OpenVPN instances for interface WAN.
Nov 5 07:55:44 php: rc.newwanip: Creating rrd update script
Nov 5 07:55:46 php: rc.newwanip: pfSense package system has detected an ip change 202.65.43.190 -> 202.65.43.190 … Restarting packages.
Nov 5 07:55:46 check_reload_status: Starting packages
Nov 5 07:55:46 check_reload_status: Reloading filter
Nov 5 07:55:48 php: rc.start_packages: Restarting/Starting all packages.
Nov 5 07:55:49 php: rc.start_packages: Reloading Squid for configuration sync
Nov 5 07:55:50 php: rc.start_packages: Reloading Squid for configuration sync
Nov 5 07:55:50 php: rc.start_packages: Reloading Squid for configuration sync
Nov 5 07:55:50 php: rc.start_packages: Not calling package sync code for dependency squid of squid because some include files are missing.
Nov 5 07:55:51 php: rc.start_packages: Reloading Squid for configuration sync
Nov 5 07:55:51 php: rc.start_packages: Reloading Squid for configuration sync
Nov 5 07:55:52 php: rc.start_packages: Reloading Squid for configuration sync
Nov 5 07:55:52 php: rc.start_packages: Reloading Squid for configuration sync
Nov 5 07:55:57 squid[38821]: Squid Parent: child process 61967 exited with status 0
Nov 5 07:55:58 php: rc.start_packages: The command '/usr/local/etc/rc.d/squid.sh stop' returned exit code '1', the output was '2014/11/05 07:55:53| aclParseAclLine: WARNING: empty ACL: acl throttle_exts urlpath_regex -i "/var/squid/acl/throttle_exts.acl"'
Nov 5 07:56:00 kernel: pflog0: promiscuous mode disabledAfter I start the Squid Services
Nov 5 08:00:20 php: /status_services.php: The command '/usr/local/etc/rc.d/squid.sh stop' returned exit code '1', the output was '2014/11/05 08:00:15| aclParseAclLine: WARNING: empty ACL: acl throttle_exts urlpath_regex -i "/var/squid/acl/throttle_exts.acl" squid: ERROR: No running copy'
Nov 5 08:00:22 squid[56323]: Squid Parent: child process 56805 started
Nov 5 08:16:05 kernel: pflog0: promiscuous mode enabledI have checked State Killing on Gateway Failure and this is Ticked.
I am guessing this is the problem but have no idea about editing and/or fixing a file on the PFSense Firewall!
Nov 5 07:55:50 php: rc.start_packages: Not calling package sync code for dependency squid of squid because some include files are missing.If someone can help it would be greatly appreciated?
-
You should look at the Service Watchdog package. It can monitor your running services, alert you if there is a problem, and restart the service.
As for the problem, are you running this on an appliance, a server or a virtual machine? What are your specs for Squid as far as HD cache size RAM cache etc? If you shell in and run squid -z, what output does it give you?
-
Thanks for your reply KOM, We do not have the Service Watchdog package installed. Also read the Watchdog package is fairly new and does have some known bugs. Since I am new to PFSense don't want to start installing packages when I don't understand them too well.
We are running a very small Linux server.
Hard disk cache size: 100mb
Hard disk cache system: ufs
Hard disk cache location: /var/squid/cache
Memory cache size: 8mb
Minimum object size: 0
Maximum object size: 4
Maximum object size in RAM: 32
Level 1 subdirectories: 16
Memory replacement policy: Heap GDSF
Cache replacement policy: Heap LFUDA
Low-water-mark in %: 90
High-water-mark in %: 90
When I run squid -z it returns:
2014/11/05 15:14:24| aclParseAclLine: WARNING: empty ACL: acl throttle_exts urlp
ath_regex -i "/var/squid/acl/throttle_exts.acl"
2014/11/05 15:14:24| Squid is already running! Process ID 56805 -
Are you running this on an appliance, a server or a virtual machine?
Considering how you're running 2.1, I might recommend that you backup your existing configuration and then upgrade the software. No use fighting old bugs that have since been fixed in newer versions.
-
Running a Linux Server.
Ok, I will need to read up on upgrading to the latest version.
-
What do you mean, you're running a Linux server??? pfSense is FreeBSD-based. Did you mean to say that you're running pfSense in a virtual machine under Linux, like KVM, VirtualBox or Proxmox? The reason I'm masking is because the appliance versions often have limited RAM and disk, and running Squid/SquidGuard on them can sometimes have strange effects.
-
FreeBSD-based. Going to look at upgrading in the first instance. Thanks for your help
