Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Websocket error on squid / squidguard

    Scheduled Pinned Locked Moved pfSense Packages
    14 Posts 2 Posters 2.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • Y
      yanafig
      last edited by

      Help anyone?

      1 Reply Last reply Reply Quote 0
      • viktor_gV
        viktor_g Netgate
        last edited by

        Please describe your issue in more details

        What is your pfSense version? Squid, SquidGuard?
        What site?
        Same error without SquidGuard?
        Settings?

        Y 1 Reply Last reply Reply Quote 0
        • Y
          yanafig @viktor_g
          last edited by

          @viktor_g said in Websocket error on squid / squidguard:

          ngs?

          Pfsense 2.4.5-RELEASE-p1
          Squid 0.4.44_29
          Squidguard 1.16.18_6

          Website - a test website to be deployed by our company

          No error when squidguard / squid is disabled.
          No error when I test it outside our network

          viktor_gV 1 Reply Last reply Reply Quote 0
          • viktor_gV
            viktor_g Netgate @yanafig
            last edited by

            @yanafig said in Websocket error on squid / squidguard:

            @viktor_g said in Websocket error on squid / squidguard:

            ngs?

            Pfsense 2.4.5-RELEASE-p1
            Squid 0.4.44_29
            Squidguard 1.16.18_6

            Website - a test website to be deployed by our company

            No error when squidguard / squid is disabled.
            No error when I test it outside our network

            Have you seen this error when Squid is enabled but SquidGuard is disabled?

            Also please show the access.log and cache.log when you try to open this website.

            Y 2 Replies Last reply Reply Quote 0
            • Y
              yanafig
              last edited by yanafig

              Same error even if I disable squid guard.

              Access Logs

              accesslogs.jpg

              1 Reply Last reply Reply Quote 0
              • Y
                yanafig @viktor_g
                last edited by

                @viktor_g posted above are the information

                1 Reply Last reply Reply Quote 0
                • Y
                  yanafig @viktor_g
                  last edited by

                  @viktor_g Is there a way to use the "Bypass Proxy for Private Address Destination" features but not on transparent mode?

                  viktor_gV 1 Reply Last reply Reply Quote 0
                  • viktor_gV
                    viktor_g Netgate @yanafig
                    last edited by

                    @yanafig said in Websocket error on squid / squidguard:

                    @viktor_g Is there a way to use the "Bypass Proxy for Private Address Destination" features but not on transparent mode?

                    For other modes you need to add RFC1918 networks manually:
                    Screenshot from 2020-10-14 08-02-15.png

                    I see nothing special in your logs, you need to check your web application,- maybe you need to add Custom refresh_patterns.

                    You can also disable caching and check your WebApp:
                    Screenshot from 2020-10-14 08-07-06.png

                    Y 2 Replies Last reply Reply Quote 0
                    • Y
                      yanafig @viktor_g
                      last edited by

                      This post is deleted!
                      1 Reply Last reply Reply Quote 0
                      • Y
                        yanafig @viktor_g
                        last edited by

                        @viktor_g said in Websocket error on squid / squidguard:

                        @yanafig said in Websocket error on squid / squidguard:

                        @viktor_g Is there a way to use the "Bypass Proxy for Private Address Destination" features but not on transparent mode?

                        For other modes you need to add RFC1918 networks manually:
                        Screenshot from 2020-10-14 08-02-15.png

                        I see nothing special in your logs, you need to check your web application,- maybe you need to add Custom refresh_patterns.

                        You can also disable caching and check your WebApp:
                        Screenshot from 2020-10-14 08-07-06.png

                        Still doesnt work

                        1 Reply Last reply Reply Quote 0
                        • viktor_gV
                          viktor_g Netgate
                          last edited by viktor_g

                          Please use SSL/TLS for Websockets connections behind squid proxy

                          see https://stackoverflow.com/questions/38974731/websockets-not-connected-behind-proxy

                          https://en.wikipedia.org/wiki/WebSocket#Proxy_traversal

                          1 Reply Last reply Reply Quote 0
                          • viktor_gV
                            viktor_g Netgate
                            last edited by

                            You can also add on_unsupported_protocol tunnel all in the custom options field

                            Y 1 Reply Last reply Reply Quote 1
                            • Y
                              yanafig @viktor_g
                              last edited by

                              @viktor_g said in Websocket error on squid / squidguard:

                              on_unsupported_protocol tunnel al

                              I just did. Still not working. I'm a bit confused why it works outside our lan but not on our lan.

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.