The firewall has enountered an error

abdo22

Crash report begins. Anonymous machine information:

amd64
11.2-RELEASE-p4
FreeBSD 11.2-RELEASE-p4 #55 2a8cfe96146(RELENG_2_4_4): Mon Oct 22 20:42:08 EDT 2018 root@buildbot3:/crossbuild/ce-master/obj/amd64/9kCJYnqE/crossbuild/ce-master/pfSense/tmp/FreeBSD-src/sys/pfSense
Crash report details:

PHP Errors:
[23-Oct-2018 14:06:22 ] PHP Warning: file_put_contents(/usr/local/etc/c-icap/c-icap.conf): failed to open stream: Operation not permitted in /usr/local/pkg/squid_antivirus.inc on line 310

i am using Version 2.4.5-DEVELOPMENT (amd64)
i am reporting this problem
if any one know how to fix this please respond
i cant use HTTPS/SSL Interception once it is activated
i cant access any web site i have to deactivate it so i can surf the web

abdo22

a new error occurred and it is
file_put_contents(/usr/local/etc/c-icap/c-icap.conf): failed to open stream: Operation not permitted in /usr/local/pkg/squid_antivirus.inc on line 653

jimp

Something must have messed up that particular file.

Run this from a shell prompt:

rm -rf /usr/local/etc/c-icap/

Make extra sure you have that exactly correct, no extra spaces.

abdo22

@jimp
Thank you for your reply
I did what you have told me but I got an error
First
rm: /usr/local/etc/c-icap.config : operation not permitted
Second
m: /usr/local/etc/c-icap/ : Directory is not empty

jimp

If you received that error, you did not copy the command exactly as written in my last post. Try again.

abdo22

@jimp
i have copied the command you gave me
alt text

Grimson

jimp clearly told you to run it from a shell prompt, so either local console or ssh and not from the WebUI.

abdo22

@grimson
I did it too but I couldn't screenshot it
Same error
I think I need to make factory reset or install fresh copy

jimp

There could be a problem with the disk or filesystem. It might be stuck in read-only mode. You might need to reboot it and force a disk check.

From ssh or the console, choose the reboot option and then the option on the next screen to force a disk check. That may hopefully take care of it.

abdo22

@jimp
when updating to 2.4.4 stable version
i have encountered this bug
c-icap was not working for some time and i had to modify it manually
i followed the instructions in this post
https://forum.netgate.com/topic/133774/2-4-x-squid-clamav-fix-for-c-icap-0-5-x-not-starting
but i had to use this command
chflags schg /usr/local/etc/c-icap/c-icap.conf
to keep file intact after i have modified it
there is a probability that is command might be what is causing the problem

jimp

Yes, because that command told it not to let anything change that file. That's why you shouldn't apply hackish fixes to things.

You can probably work around it by doing chflags noschg on the file to negate what was done to it before.

abdo22

@jimp
you are right
you command ( chflags noschg ) fixed it
now i could run ( rm -rf /usr/local/etc/c-icap/ )
thanks alot for your support