Squid not normal work update to new verison



  • today udate pf to the new verison , then squid just not normal work. how i do fix it ?
    2.4.1-DEVELOPMENT (amd64)
    built on Tue Aug 22 12:41:22 CDT 2017

    ![Screenshot of Package_ Squid_ Monitor.jpg](/public/imported_attachments/1/Screenshot of Package_ Squid_ Monitor.jpg)
    ![Screenshot of Package_ Squid_ Monitor.jpg_thumb](/public/imported_attachments/1/Screenshot of Package_ Squid_ Monitor.jpg_thumb)



  • i think should the new squid pkg has chang config file. i try re-saved the config and change it , it work now again.

    just need save steup config .

    :)



  • Same here, updated to 2.4RC and squid stopped working.  I have opened the config file and resaved it but it did not fix anything, filtering still is not working



  • yes, work not stable in v2.4.1 for me.  you try use copy the defaut config and edit it.

    change the  ip to yourself

    
    # This file is automatically generated by pfSense
    # Do not edit manually !
    
    http_port 192.168.100.254:3128
    icp_port 8
    digest_generation off
    dns_v4_first off
    pid_filename /var/run/squid/squid.pid
    cache_effective_user squid
    cache_effective_group proxy
    error_default_language zh-cn
    icon_directory /usr/local/etc/squid/icons
    visible_hostname yon.net
    cache_mgr admin@yon.net
    access_log /var/squid/logs/access.log
    cache_log /var/squid/logs/cache.log
    cache_store_log none
    netdb_filename /var/squid/logs/netdb.state
    pinger_enable on
    pinger_program /usr/local/libexec/squid/pinger
    
    logfile_rotate 30
    debug_options rotate=30
    shutdown_lifetime 3 seconds
    # Allow local network(s) on interface(s)
    acl localnet src  192.168.100.0/24
    forwarded_for delete
    via off
    uri_whitespace strip
    dns_nameservers 8.8.8.8  
    
    cache_mem 512 MB
    maximum_object_size_in_memory 512 KB
    memory_replacement_policy heap GDSF
    cache_replacement_policy heap LFUDA
    minimum_object_size 0 KB
    maximum_object_size 4 MB
    cache_dir diskd /var/squid/cache 5000 32 256
    offline_mode off
    cache_swap_low 90
    cache_swap_high 95
    cache allow all
    # Add any of your own refresh_pattern entries above these.
    refresh_pattern ^ftp:    1440  20%  10080
    refresh_pattern ^gopher:  1440  0%  1440
    refresh_pattern -i (/cgi-bin/|\?) 0  0%  0
    refresh_pattern .    0  20%  4320
    
    #Remote proxies
    
    # Setup some default acls
    # ACLs all, manager, localhost, and to_localhost are predefined.
    acl allsrc src all
    acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901 2253 3128 3129 1025-65535 
    acl sslports port 443 563 2253 22100
    
    acl purge method PURGE
    acl connect method CONNECT
    
    # Define protocols used for redirects
    acl HTTP proto HTTP
    acl HTTPS proto HTTPS
    acl allowed_subnets src all
    acl unrestricted_hosts src "/var/squid/acl/unrestricted_hosts.acl"
    acl whitelist dstdom_regex -i "/var/squid/acl/whitelist.acl"
    http_access allow manager localhost
    
    http_access deny manager
    http_access allow purge localhost
    http_access deny purge
    http_access deny !safeports
    http_access deny CONNECT !sslports
    
    # Always allow localhost connections
    http_access allow localhost
    
    request_body_max_size 0 KB
    delay_pools 1
    delay_class 1 2
    delay_parameters 1 -1/-1 -1/-1
    delay_initial_bucket_level 100
    # Do not throttle unrestricted hosts
    delay_access 1 deny unrestricted_hosts
    delay_access 1 allow allsrc
    
    # Reverse Proxy settings
    
    deny_info TCP_RESET allsrc
    
    # Custom options before auth
    
    # These hosts do not have any restrictions
    http_access allow unrestricted_hosts
    # Always allow access to whitelist domains
    http_access allow whitelist
    acl noauth src 192.168.100.0/24
    auth_param basic program /usr/local/libexec/squid/basic_ncsa_auth /var/etc/squid.passwd
    auth_param basic children 20
    auth_param basic realm 璐︽埛鐧诲綍 Login
    auth_param basic credentialsttl 10080 minutes
    acl password proxy_auth REQUIRED
    # Custom options after auth
    
    http_access allow unrestricted_hosts
    http_access allow noauth
    http_access allow password localnet
    http_access allow password allowed_subnets
    # Default block all to be sure
    http_access deny allsrc
    
    icap_enable on
    icap_send_client_ip on
    icap_send_client_username on
    icap_client_username_encode off
    icap_client_username_header X-Authenticated-User
    icap_preview_enable on
    icap_preview_size 1024
    
    icap_service service_avi_req reqmod_precache icap://127.0.0.1:1344/squid_clamav bypass=off
    adaptation_access service_avi_req allow all
    icap_service service_avi_resp respmod_precache icap://127.0.0.1:1344/squid_clamav bypass=on
    adaptation_access service_avi_resp allow all
    
    


  • i have to back to v4.0rc, so v2.4.1 newest version ipv6 down.