SquidGuard Group ACL not working
-
The owner / groups needs to be "squid:squid" so squidGuard is able to write to this file.
The whitelist is included as type dstdom_regex, so the entries have to be regular expressions.
So you have at least to escape the dots and add the $ to the line end to match the end of the domain. And to be on safe side, just need to change the entries, that they start either with beginning of line or with a dot. Otherwise an entry like "facebook.com$" matches "badfacebook.com"
I changed your list, removed redundant entries and ordered the remaining by alphabet:
(^|\.)anaf\.ro$ (^|\.)decl\.anaf\.mfinante\.gov\.ro$ (^|\.)facebook\.com$ (^|\.)microsoft\.com$ (^|\.)update\.microsoft\.com\.akadns\.net$ (^|\.)update\.microsoft\.com\.nsatc\.net$ (^|\.)windowsupdate\.com$ (^|\.)wustat\.windows\.com$ -
@coffeelover Thank you for your time and patience.
I have done the modifications whitelist + changing sguidGuard.log permissions and ownership. I will see in the morning if squid stops crashing.
The whitelist file was functioning properly, for those sites the certificate was not changed with the one from our internal CA.
I will report back!
Have a nice day! :-) -
@coffeelover
Hi ..in the morinig..same problem:
For sure it is not a cron job because in WE, when nobody (but me :/ ) is at the office squid does not crash.
I think some user is trying to access a site which crashes squid, but i can find who or what.
Any ideeas?
Thanks again.Aug 4 07:57:37 radiusd 28195 (48) Login OK: [DSP03] (from client T2600G-52TS_01 port 0 via TLS tunnel) Aug 4 07:57:37 radiusd 28195 (49) Login OK: [DSP03] (from client T2600G-52TS_01 port 3 cli f4-4d-30-6b-80-ce) Aug 4 08:41:47 php-fpm 338 /status_logs.php: Session timed out for user 'admin' from: 192.168.16.10 (Local Database) Aug 4 08:41:50 php-fpm 338 /status_logs.php: Successful login for user 'admin' from: 192.168.16.10 (Local Database) Aug 4 09:00:36 kernel pid 56671 (squid), jid 0, uid 100: exited on signal 6 Aug 4 09:00:37 kernel pid 84027 (squid), jid 0, uid 100: exited on signal 6 Aug 4 09:00:39 kernel pid 89031 (squid), jid 0, uid 100: exited on signal 6 Aug 4 09:00:40 kernel pid 92708 (squid), jid 0, uid 100: exited on signal 6 Aug 4 09:00:41 kernel pid 95868 (squid), jid 0, uid 100: exited on signal 6 Aug 4 09:00:42 kernel pid 98402 (squid), jid 0, uid 100: exited on signal 6 Aug 4 09:01:31 Squid_Alarm 21806 Squid has exited. Reconfiguring filter. Aug 4 09:01:31 Squid_Alarm 22203 Attempting restart... Aug 4 09:01:34 Squid_Alarm 24558 Reconfiguring filter... Aug 4 09:01:35 check_reload_status Reloading filter Aug 4 09:01:36 php-fpm 339 /rc.filter_configure_sync: [squid] Installed but not started. Not installing 'nat' rules. Aug 4 09:01:36 php-fpm 339 /rc.filter_configure_sync: [squid] Installed but not started. Not installing 'pfearly' rules. Aug 4 09:01:36 php-fpm 339 /rc.filter_configure_sync: [squid] Installed but not started. Not installing 'filter' rules. Aug 4 09:35:20 php-fpm 338 /pkg_edit.php: [squid] Clear disk cache forced via GUI. Clearing cache now... Aug 4 09:35:20 php-fpm 338 /pkg_edit.php: [squid] Stopping any running proxy monitors Aug 4 09:35:21 php-fpm 338 /pkg_edit.php: [squid] Creating cache dir '/var/squid/cache' ... Aug 4 09:35:21 php-fpm 338 /pkg_edit.php: [squid] Creating Squid cache subdirs in /var/squid/cache ... Aug 4 09:35:25 php-fpm 338 /pkg_edit.php: [squid] Starting service... Aug 4 09:35:26 php-fpm 338 /pkg_edit.php: [squid] Starting a proxy monitor script Aug 4 09:35:27 check_reload_status Syncing firewall Aug 4 09:35:27 php-fpm 338 /pkg_edit.php: [squid] - squid_resync function call pr:1 bp: rpc:no Aug 4 09:35:28 php-fpm 338 /pkg_edit.php: [squid] Adding cronjobs ... Aug 4 09:35:28 php-fpm 338 /pkg_edit.php: [squid] Antivirus features disabled. Aug 4 09:35:28 php-fpm 338 /pkg_edit.php: [squid] Removing freshclam cronjob. Aug 4 09:35:28 php-fpm 338 /pkg_edit.php: [squid] Stopping any running proxy monitors Aug 4 09:35:29 php-fpm 338 /pkg_edit.php: [squid] Reloading for configuration sync... Aug 4 09:35:29 php-fpm 338 /pkg_edit.php: [squid] Starting a proxy monitor script Aug 4 09:35:30 check_reload_status Reloading filter -
@coffeelover said in SquidGuard Group ACL not working:
debug_options 1,5 6,5 ALL,1
I think the only option to find the cause is to increase the debug level.
-
@coffeelover Hi, but in what file should i put the line? Thanks.
-
You have to put this line in general -> show advanced options -> "Custom Options (Before Auth)"
-
@coffeelover Thank for this.
I have done it and of course today in the morning, it crashed...
This is the cache.log. In access.log i see nothing special, i have tested all the sites and they do not crash squid..
Maybe you see something useful in the log, i didn't.. :/
Thank you again for your time coffelover :-)2020/08/10 09:03:47| SendEcho ERROR: sending to ICMPv6 packet to [2a00:1450:4013:c07::bd]: (65) No route to host 2020/08/10 09:05:43| SendEcho ERROR: sending to ICMPv6 packet to [2a00:1450:4013:c08::bd]: (65) No route to host 2020/08/10 09:05:59 kid1| Starting new redirector helpers... 2020/08/10 09:05:59 kid1| helperOpenServers: Starting 4/16 'squidGuard' processes 2020/08/10 09:07:30| SendEcho ERROR: sending to ICMPv6 packet to [2a00:1450:4013:c01::bd]: (65) No route to host 2020/08/10 09:09:31| SendEcho ERROR: sending to ICMPv6 packet to [2a00:1450:4013:c07::bd]: (65) No route to host 2020/08/10 09:09:34| SendEcho ERROR: sending to ICMPv6 packet to [2a00:1450:4013:c00::bd]: (65) No route to host 2020/08/10 09:09:34| SendEcho ERROR: sending to ICMPv6 packet to [2a00:1450:4013:c04::bd]: (65) No route to host 2020/08/10 09:10:45 kid1| Error negotiating SSL connection on FD 51: error:00000001:lib(0):func(0):reason(1) (1/0) 2020/08/10 09:10:47 kid1| Error negotiating SSL connection on FD 48: error:00000001:lib(0):func(0):reason(1) (1/0) 2020/08/10 09:10:49 kid1| Error negotiating SSL connection on FD 48: error:00000001:lib(0):func(0):reason(1) (1/0) 2020/08/10 09:10:52 kid1| Error negotiating SSL connection on FD 69: error:00000001:lib(0):func(0):reason(1) (1/0) 2020/08/10 09:10:56 kid1| Error negotiating SSL connection on FD 153: error:00000001:lib(0):func(0):reason(1) (1/0) 2020/08/10 09:10:58 kid1| Error negotiating SSL connection on FD 167: error:00000001:lib(0):func(0):reason(1) (1/0) 2020/08/10 09:11:45 kid1| assertion failed: http.cc:1533: "!Comm::MonitorsRead(serverConnection->fd)" 2020/08/10 09:11:46 kid1| Current Directory is /usr/local/www 2020/08/10 09:11:46 kid1| Starting Squid Cache version 4.10 for amd64-portbld-freebsd11.3... 2020/08/10 09:11:46 kid1| Service Name: squid 2020/08/10 09:11:46 kid1| Process ID 25066 2020/08/10 09:11:46 kid1| Process Roles: worker 2020/08/10 09:11:46 kid1| With 57276 file descriptors available 2020/08/10 09:11:46 kid1| Initializing IP Cache... 2020/08/10 09:11:46 kid1| DNS Socket created at [::], FD 5 2020/08/10 09:11:46 kid1| DNS Socket created at 0.0.0.0, FD 9 2020/08/10 09:11:46 kid1| Adding nameserver 127.0.0.1 from /etc/resolv.conf 2020/08/10 09:11:46 kid1| Adding nameserver 192.168.16.12 from /etc/resolv.conf 2020/08/10 09:11:46 kid1| Adding nameserver 192.168.16.1 from /etc/resolv.conf 2020/08/10 09:11:46 kid1| Adding domain suciupopa.ro from /etc/resolv.conf 2020/08/10 09:11:46 kid1| helperOpenServers: Starting 5/128 'security_file_certgen' processes 2020/08/10 09:11:46 kid1| helperOpenServers: Starting 8/16 'squidGuard' processes 2020/08/10 09:11:46 kid1| Logfile: opening log /var/squid/logs/access.log 2020/08/10 09:11:46 kid1| WARNING: log name now starts with a module name. Use 'stdio:/var/squid/logs/access.log' 2020/08/10 09:11:46 kid1| Unlinkd pipe opened on FD 42 2020/08/10 09:11:46 kid1| Store logging disabled 2020/08/10 09:11:46 kid1| Swap maxSize 102400 + 65536 KB, estimated 12918 objects 2020/08/10 09:11:46 kid1| Target number of buckets: 645 2020/08/10 09:11:46 kid1| Using 8192 Store buckets 2020/08/10 09:11:46 kid1| Max Mem size: 65536 KB 2020/08/10 09:11:46 kid1| Max Swap size: 102400 KB 2020/08/10 09:11:46 kid1| Rebuilding storage in /var/squid/cache (clean log) 2020/08/10 09:11:46 kid1| Using Least Load store dir selection 2020/08/10 09:11:46 kid1| Current Directory is /usr/local/www 2020/08/10 09:11:46 kid1| Finished loading MIME types and icons. 2020/08/10 09:11:46 kid1| HTCP Disabled. 2020/08/10 09:11:46 kid1| Pinger socket opened on FD 48 2020/08/10 09:11:46 kid1| NETDB state reloaded; 703 entries, 47 msec 2020/08/10 09:11:46 kid1| Squid plugin modules loaded: 0 2020/08/10 09:11:46 kid1| Adaptation support is off. 2020/08/10 09:11:46 kid1| Accepting SSL bumped HTTP Socket connections at local=192.168.16.22:3128 remote=[::] FD 45 flags=9 2020/08/10 09:11:46 kid1| Accepting HTTP Socket connections at local=127.0.0.1:3128 remote=[::] FD 46 flags=9 2020/08/10 09:11:46 kid1| Done reading /var/squid/cache swaplog (0 entries) 2020/08/10 09:11:46 kid1| Store rebuilding is 0.00% complete 2020/08/10 09:11:46 kid1| Finished rebuilding storage from disk. 2020/08/10 09:11:46 kid1| 0 Entries scanned 2020/08/10 09:11:46 kid1| 0 Invalid entries. 2020/08/10 09:11:46 kid1| 0 With invalid flags. 2020/08/10 09:11:46 kid1| 0 Objects loaded. 2020/08/10 09:11:46 kid1| 0 Objects expired. 2020/08/10 09:11:46 kid1| 0 Objects cancelled. 2020/08/10 09:11:46 kid1| 0 Duplicate URLs purged. 2020/08/10 09:11:46 kid1| 0 Swapfile clashes avoided. 2020/08/10 09:11:46 kid1| Took 0.07 seconds ( 0.00 objects/sec). 2020/08/10 09:11:46 kid1| Beginning Validation Procedure 2020/08/10 09:11:46 kid1| Completed Validation Procedure 2020/08/10 09:11:46 kid1| Validated 0 Entries 2020/08/10 09:11:46 kid1| store_swap_size = 0.00 KB 2020/08/10 09:11:46| pinger: Initialising ICMP pinger ... 2020/08/10 09:11:46| pinger: ICMP socket opened. 2020/08/10 09:11:46| pinger: ICMPv6 socket opened 2020/08/10 09:11:46 kid1| assertion failed: http.cc:1533: "!Comm::MonitorsRead(serverConnection->fd)" 2020/08/10 09:11:47 kid1| Current Directory is /usr/local/www 2020/08/10 09:11:47 kid1| Starting Squid Cache version 4.10 for amd64-portbld-freebsd11.3... 2020/08/10 09:11:47 kid1| Service Name: squid 2020/08/10 09:11:47 kid1| Process ID 27819 2020/08/10 09:11:47 kid1| Process Roles: worker 2020/08/10 09:11:47 kid1| With 57276 file descriptors available 2020/08/10 09:11:47 kid1| Initializing IP Cache... 2020/08/10 09:11:47 kid1| DNS Socket created at [::], FD 5 2020/08/10 09:11:47 kid1| DNS Socket created at 0.0.0.0, FD 9 2020/08/10 09:11:47 kid1| Adding nameserver 127.0.0.1 from /etc/resolv.conf 2020/08/10 09:11:47 kid1| Adding nameserver 192.168.16.12 from /etc/resolv.conf 2020/08/10 09:11:47 kid1| Adding nameserver 192.168.16.1 from /etc/resolv.conf 2020/08/10 09:11:47 kid1| Adding domain suciupopa.ro from /etc/resolv.conf 2020/08/10 09:11:47 kid1| helperOpenServers: Starting 5/128 'security_file_certgen' processes 2020/08/10 09:11:47 kid1| helperOpenServers: Starting 8/16 'squidGuard' processes 2020/08/10 09:11:47 kid1| Logfile: opening log /var/squid/logs/access.log 2020/08/10 09:11:47 kid1| WARNING: log name now starts with a module name. Use 'stdio:/var/squid/logs/access.log' 2020/08/10 09:11:47 kid1| Unlinkd pipe opened on FD 42 2020/08/10 09:11:47 kid1| Store logging disabled 2020/08/10 09:11:47 kid1| Swap maxSize 102400 + 65536 KB, estimated 12918 objects 2020/08/10 09:11:47 kid1| Target number of buckets: 645 2020/08/10 09:11:47 kid1| Using 8192 Store buckets 2020/08/10 09:11:47 kid1| Max Mem size: 65536 KB 2020/08/10 09:11:47 kid1| Max Swap size: 102400 KB 2020/08/10 09:11:47 kid1| Rebuilding storage in /var/squid/cache (dirty log) 2020/08/10 09:11:47 kid1| Using Least Load store dir selection 2020/08/10 09:11:47 kid1| Current Directory is /usr/local/www 2020/08/10 09:11:47 kid1| Finished loading MIME types and icons. 2020/08/10 09:11:47 kid1| HTCP Disabled. 2020/08/10 09:11:47| pinger: Initialising ICMP pinger ... 2020/08/10 09:11:47| pinger: ICMP socket opened. 2020/08/10 09:11:47| pinger: ICMPv6 socket opened 2020/08/10 09:11:47 kid1| Pinger socket opened on FD 48 2020/08/10 09:11:47 kid1| NETDB state reloaded; 703 entries, 47 msec 2020/08/10 09:11:47 kid1| Squid plugin modules loaded: 0 2020/08/10 09:11:47 kid1| Adaptation support is off. 2020/08/10 09:11:47 kid1| Accepting SSL bumped HTTP Socket connections at local=192.168.16.22:3128 remote=[::] FD 45 flags=9 2020/08/10 09:11:47 kid1| Accepting HTTP Socket connections at local=127.0.0.1:3128 remote=[::] FD 46 flags=9 2020/08/10 09:11:47 kid1| Done reading /var/squid/cache swaplog (0 entries) 2020/08/10 09:11:47 kid1| Store rebuilding is 0.00% complete 2020/08/10 09:11:47 kid1| Finished rebuilding storage from disk. 2020/08/10 09:11:47 kid1| 0 Entries scanned 2020/08/10 09:11:47 kid1| 0 Invalid entries. 2020/08/10 09:11:47 kid1| 0 With invalid flags. 2020/08/10 09:11:47 kid1| 0 Objects loaded. 2020/08/10 09:11:47 kid1| 0 Objects expired. 2020/08/10 09:11:47 kid1| 0 Objects cancelled. 2020/08/10 09:11:47 kid1| 0 Duplicate URLs purged. 2020/08/10 09:11:47 kid1| 0 Swapfile clashes avoided. 2020/08/10 09:11:47 kid1| Took 0.07 seconds ( 0.00 objects/sec). 2020/08/10 09:11:47 kid1| Beginning Validation Procedure 2020/08/10 09:11:47 kid1| Completed Validation Procedure 2020/08/10 09:11:47 kid1| Validated 0 Entries 2020/08/10 09:11:47 kid1| store_swap_size = 0.00 KB 2020/08/10 09:11:48| SendEcho ERROR: sending to ICMPv6 packet to [2a01:111:f100:9001::1761:945a]: (65) No route to host 2020/08/10 09:11:48 kid1| assertion failed: http.cc:1533: "!Comm::MonitorsRead(serverConnection->fd)" 2020/08/10 09:11:48 kid1| Current Directory is /usr/local/www 2020/08/10 09:11:48 kid1| Starting Squid Cache version 4.10 for amd64-portbld-freebsd11.3... 2020/08/10 09:11:48 kid1| Service Name: squid 2020/08/10 09:11:48 kid1| Process ID 31602 2020/08/10 09:11:48 kid1| Process Roles: worker 2020/08/10 09:11:48 kid1| With 57276 file descriptors available 2020/08/10 09:11:48 kid1| Initializing IP Cache... 2020/08/10 09:11:48 kid1| DNS Socket created at [::], FD 5 2020/08/10 09:11:48 kid1| DNS Socket created at 0.0.0.0, FD 9 2020/08/10 09:11:48 kid1| Adding nameserver 127.0.0.1 from /etc/resolv.conf 2020/08/10 09:11:48 kid1| Adding nameserver 192.168.16.12 from /etc/resolv.conf 2020/08/10 09:11:48 kid1| Adding nameserver 192.168.16.1 from /etc/resolv.conf 2020/08/10 09:11:48 kid1| Adding domain suciupopa.ro from /etc/resolv.conf 2020/08/10 09:11:48 kid1| helperOpenServers: Starting 5/128 'security_file_certgen' processes 2020/08/10 09:11:48 kid1| helperOpenServers: Starting 8/16 'squidGuard' processes 2020/08/10 09:11:48 kid1| Logfile: opening log /var/squid/logs/access.log 2020/08/10 09:11:48 kid1| WARNING: log name now starts with a module name. Use 'stdio:/var/squid/logs/access.log' 2020/08/10 09:11:48 kid1| Unlinkd pipe opened on FD 42 2020/08/10 09:11:48 kid1| Store logging disabled 2020/08/10 09:11:48 kid1| Swap maxSize 102400 + 65536 KB, estimated 12918 objects 2020/08/10 09:11:48 kid1| Target number of buckets: 645 2020/08/10 09:11:48 kid1| Using 8192 Store buckets 2020/08/10 09:11:48 kid1| Max Mem size: 65536 KB 2020/08/10 09:11:48 kid1| Max Swap size: 102400 KB 2020/08/10 09:11:48 kid1| Rebuilding storage in /var/squid/cache (dirty log) 2020/08/10 09:11:48 kid1| Using Least Load store dir selection 2020/08/10 09:11:48 kid1| Current Directory is /usr/local/www 2020/08/10 09:11:48 kid1| Finished loading MIME types and icons. 2020/08/10 09:11:48 kid1| HTCP Disabled. 2020/08/10 09:11:48 kid1| Pinger socket opened on FD 48 2020/08/10 09:11:49| pinger: Initialising ICMP pinger ... 2020/08/10 09:11:49| pinger: ICMP socket opened. 2020/08/10 09:11:49| pinger: ICMPv6 socket opened 2020/08/10 09:11:49 kid1| NETDB state reloaded; 703 entries, 59 msec 2020/08/10 09:11:49 kid1| Squid plugin modules loaded: 0 2020/08/10 09:11:49 kid1| Adaptation support is off. 2020/08/10 09:11:49 kid1| Accepting SSL bumped HTTP Socket connections at local=192.168.16.22:3128 remote=[::] FD 45 flags=9 2020/08/10 09:11:49 kid1| Accepting HTTP Socket connections at local=127.0.0.1:3128 remote=[::] FD 46 flags=9 2020/08/10 09:11:49 kid1| Done reading /var/squid/cache swaplog (0 entries) 2020/08/10 09:11:49 kid1| Store rebuilding is 0.00% complete 2020/08/10 09:11:49 kid1| Finished rebuilding storage from disk. 2020/08/10 09:11:49 kid1| 0 Entries scanned 2020/08/10 09:11:49 kid1| 0 Invalid entries. 2020/08/10 09:11:49 kid1| 0 With invalid flags. 2020/08/10 09:11:49 kid1| 0 Objects loaded. 2020/08/10 09:11:49 kid1| 0 Objects expired. 2020/08/10 09:11:49 kid1| 0 Objects cancelled. 2020/08/10 09:11:49 kid1| 0 Duplicate URLs purged. 2020/08/10 09:11:49 kid1| 0 Swapfile clashes avoided. 2020/08/10 09:11:49 kid1| Took 0.08 seconds ( 0.00 objects/sec). 2020/08/10 09:11:49 kid1| Beginning Validation Procedure 2020/08/10 09:11:49 kid1| Completed Validation Procedure 2020/08/10 09:11:49 kid1| Validated 0 Entries 2020/08/10 09:11:49 kid1| store_swap_size = 0.00 KB 2020/08/10 09:11:49| SendEcho ERROR: sending to ICMPv6 packet to [2a01:111:f100:9001::1761:945a]: (65) No route to host 2020/08/10 09:11:49 kid1| assertion failed: http.cc:1533: "!Comm::MonitorsRead(serverConnection->fd)" 2020/08/10 09:11:49 kid1| Current Directory is /usr/local/www 2020/08/10 09:11:49 kid1| Starting Squid Cache version 4.10 for amd64-portbld-freebsd11.3... 2020/08/10 09:11:49 kid1| Service Name: squid 2020/08/10 09:11:49 kid1| Process ID 39820 2020/08/10 09:11:49 kid1| Process Roles: worker 2020/08/10 09:11:49 kid1| With 57276 file descriptors available 2020/08/10 09:11:49 kid1| Initializing IP Cache... 2020/08/10 09:11:49 kid1| DNS Socket created at [::], FD 5 2020/08/10 09:11:49 kid1| DNS Socket created at 0.0.0.0, FD 9 2020/08/10 09:11:49 kid1| Adding nameserver 127.0.0.1 from /etc/resolv.conf 2020/08/10 09:11:49 kid1| Adding nameserver 192.168.16.12 from /etc/resolv.conf 2020/08/10 09:11:49 kid1| Adding nameserver 192.168.16.1 from /etc/resolv.conf 2020/08/10 09:11:49 kid1| Adding domain suciupopa.ro from /etc/resolv.conf 2020/08/10 09:11:49 kid1| helperOpenServers: Starting 5/128 'security_file_certgen' processes 2020/08/10 09:11:49 kid1| helperOpenServers: Starting 8/16 'squidGuard' processes 2020/08/10 09:11:49 kid1| Logfile: opening log /var/squid/logs/access.log 2020/08/10 09:11:49 kid1| WARNING: log name now starts with a module name. Use 'stdio:/var/squid/logs/access.log' 2020/08/10 09:11:50 kid1| Unlinkd pipe opened on FD 42 2020/08/10 09:11:50 kid1| Store logging disabled 2020/08/10 09:11:50 kid1| Swap maxSize 102400 + 65536 KB, estimated 12918 objects 2020/08/10 09:11:50 kid1| Target number of buckets: 645 2020/08/10 09:11:50 kid1| Using 8192 Store buckets 2020/08/10 09:11:50 kid1| Max Mem size: 65536 KB 2020/08/10 09:11:50 kid1| Max Swap size: 102400 KB 2020/08/10 09:11:50 kid1| Rebuilding storage in /var/squid/cache (dirty log) 2020/08/10 09:11:50 kid1| Using Least Load store dir selection 2020/08/10 09:11:50 kid1| Current Directory is /usr/local/www 2020/08/10 09:11:50 kid1| Finished loading MIME types and icons. 2020/08/10 09:11:50 kid1| HTCP Disabled. 2020/08/10 09:11:50| pinger: Initialising ICMP pinger ... 2020/08/10 09:11:50| pinger: ICMP socket opened. 2020/08/10 09:11:50| pinger: ICMPv6 socket opened 2020/08/10 09:11:50 kid1| Pinger socket opened on FD 48 2020/08/10 09:11:50 kid1| NETDB state reloaded; 703 entries, 48 msec 2020/08/10 09:11:50 kid1| Squid plugin modules loaded: 0 2020/08/10 09:11:50 kid1| Adaptation support is off. 2020/08/10 09:11:50 kid1| Accepting SSL bumped HTTP Socket connections at local=192.168.16.22:3128 remote=[::] FD 45 flags=9 2020/08/10 09:11:50 kid1| Accepting HTTP Socket connections at local=127.0.0.1:3128 remote=[::] FD 46 flags=9 2020/08/10 09:11:50 kid1| Done reading /var/squid/cache swaplog (0 entries) 2020/08/10 09:11:50 kid1| Store rebuilding is 0.00% complete 2020/08/10 09:11:50 kid1| Finished rebuilding storage from disk. 2020/08/10 09:11:50 kid1| 0 Entries scanned 2020/08/10 09:11:50 kid1| 0 Invalid entries. 2020/08/10 09:11:50 kid1| 0 With invalid flags. 2020/08/10 09:11:50 kid1| 0 Objects loaded. 2020/08/10 09:11:50 kid1| 0 Objects expired. 2020/08/10 09:11:50 kid1| 0 Objects cancelled. 2020/08/10 09:11:50 kid1| 0 Duplicate URLs purged. 2020/08/10 09:11:50 kid1| 0 Swapfile clashes avoided. 2020/08/10 09:11:50 kid1| Took 0.07 seconds ( 0.00 objects/sec). 2020/08/10 09:11:50 kid1| Beginning Validation Procedure 2020/08/10 09:11:50 kid1| Completed Validation Procedure 2020/08/10 09:11:50 kid1| Validated 0 Entries 2020/08/10 09:11:50 kid1| store_swap_size = 0.00 KB 2020/08/10 09:11:50 kid1| assertion failed: http.cc:1533: "!Comm::MonitorsRead(serverConnection->fd)" 2020/08/10 09:11:50 kid1| Current Directory is /usr/local/www 2020/08/10 09:11:50 kid1| Starting Squid Cache version 4.10 for amd64-portbld-freebsd11.3... 2020/08/10 09:11:50 kid1| Service Name: squid 2020/08/10 09:11:50 kid1| Process ID 42924 2020/08/10 09:11:50 kid1| Process Roles: worker 2020/08/10 09:11:50 kid1| With 57276 file descriptors available 2020/08/10 09:11:50 kid1| Initializing IP Cache... 2020/08/10 09:11:50 kid1| DNS Socket created at [::], FD 5 2020/08/10 09:11:50 kid1| DNS Socket created at 0.0.0.0, FD 9 2020/08/10 09:11:50 kid1| Adding nameserver 127.0.0.1 from /etc/resolv.conf 2020/08/10 09:11:50 kid1| Adding nameserver 192.168.16.12 from /etc/resolv.conf 2020/08/10 09:11:50 kid1| Adding nameserver 192.168.16.1 from /etc/resolv.conf 2020/08/10 09:11:50 kid1| Adding domain suciupopa.ro from /etc/resolv.conf 2020/08/10 09:11:50 kid1| helperOpenServers: Starting 5/128 'security_file_certgen' processes 2020/08/10 09:11:50 kid1| helperOpenServers: Starting 8/16 'squidGuard' processes 2020/08/10 09:11:50 kid1| Logfile: opening log /var/squid/logs/access.log 2020/08/10 09:11:50 kid1| WARNING: log name now starts with a module name. Use 'stdio:/var/squid/logs/access.log' 2020/08/10 09:11:51 kid1| Unlinkd pipe opened on FD 42 2020/08/10 09:11:51 kid1| Store logging disabled 2020/08/10 09:11:51 kid1| Swap maxSize 102400 + 65536 KB, estimated 12918 objects 2020/08/10 09:11:51 kid1| Target number of buckets: 645 2020/08/10 09:11:51 kid1| Using 8192 Store buckets 2020/08/10 09:11:51 kid1| Max Mem size: 65536 KB 2020/08/10 09:11:51 kid1| Max Swap size: 102400 KB 2020/08/10 09:11:51 kid1| Rebuilding storage in /var/squid/cache (dirty log) 2020/08/10 09:11:51 kid1| Using Least Load store dir selection 2020/08/10 09:11:51 kid1| Current Directory is /usr/local/www 2020/08/10 09:11:51 kid1| Finished loading MIME types and icons. 2020/08/10 09:11:51 kid1| HTCP Disabled. 2020/08/10 09:11:51| pinger: Initialising ICMP pinger ... 2020/08/10 09:11:51| pinger: ICMP socket opened. 2020/08/10 09:11:51| pinger: ICMPv6 socket opened 2020/08/10 09:11:51 kid1| Pinger socket opened on FD 48 2020/08/10 09:11:51 kid1| NETDB state reloaded; 703 entries, 47 msec 2020/08/10 09:11:51 kid1| Squid plugin modules loaded: 0 2020/08/10 09:11:51 kid1| Adaptation support is off. 2020/08/10 09:11:51 kid1| Accepting SSL bumped HTTP Socket connections at local=192.168.16.22:3128 remote=[::] FD 45 flags=9 2020/08/10 09:11:51 kid1| Accepting HTTP Socket connections at local=127.0.0.1:3128 remote=[::] FD 46 flags=9 2020/08/10 09:11:51 kid1| Done reading /var/squid/cache swaplog (0 entries) 2020/08/10 09:11:51 kid1| Store rebuilding is 0.00% complete 2020/08/10 09:11:51 kid1| Finished rebuilding storage from disk. 2020/08/10 09:11:51 kid1| 0 Entries scanned 2020/08/10 09:11:51 kid1| 0 Invalid entries. 2020/08/10 09:11:51 kid1| 0 With invalid flags. 2020/08/10 09:11:51 kid1| 0 Objects loaded. 2020/08/10 09:11:51 kid1| 0 Objects expired. 2020/08/10 09:11:51 kid1| 0 Objects cancelled. 2020/08/10 09:11:51 kid1| 0 Duplicate URLs purged. 2020/08/10 09:11:51 kid1| 0 Swapfile clashes avoided. 2020/08/10 09:11:51 kid1| Took 0.07 seconds ( 0.00 objects/sec). 2020/08/10 09:11:51 kid1| Beginning Validation Procedure 2020/08/10 09:11:51 kid1| Completed Validation Procedure 2020/08/10 09:11:51 kid1| Validated 0 Entries 2020/08/10 09:11:51 kid1| store_swap_size = 0.00 KB 2020/08/10 09:11:51 kid1| assertion failed: http.cc:1533: "!Comm::MonitorsRead(serverConnection->fd)" -
@coffeelover I have finally found the problem. I have isolated a computer from the internal network which had a "Adobe Creative Cloud" client installed ant put in autostart. Every time that program launched it would crash squid. I was not able (i dodn't have the time) to investigate all that addresses that program was trying to reach. As soon as i uninstalled the program 9'o clock squid crash disappeared!
I so over the internet similar problems with different sites but does did not manifest on my squid version.
The squid crashed befor it could write in log the offending url and only with FW logging was to cumber stone to find out.
Thank you again.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.