Squid + squid guard stops randomly



  • hi guys,
    i have
    PFS 1.2.3-RELEASE built on Sun Dec 6
    squidGuard 1.3-2
    squid 2.7.8_1

    thing is that i noticed that squidguard does not filter traffic, but it happens randomly … usually after one or two days...

    under system services it shows that service is running properly, but id does not, then i just klick on restart service and it filter traffic again, for day or two...
    i cant get this...

    i have similar setup on another machine and i works fine....
    maybe it is machine?
    amd 3ghz
    2x 2gb ddr2
    320gb sata hdd
    thanks



  • Is the box rebooting or does the uptime coincide when this occurs?


  • Rebel Alliance Developer Netgate

    Or does your WAN IP change at all around when this happens?



  • nothing of stated,
    machine does not reboot, and WAN have static public IP…

    machine continues to work, squid guard is working (al least pfs is marking squid guard as working) but does not filter web content.
    Then i have to manually go to, status services, and click restart service button, and then works for day or two...
    completely strange behaving ...
    any suggestions, where to look for problem?
    thanks



  • now i have reinstall all packages i have on PFS (squid, squid guard, lightsquid, freeradius…)
    and after reboot, non of services come up, and i cant start them up manually, i think it is related to this http://forum.pfsense.org/index.php/topic,20690.0.html



  • hm
    if i try to uninstall or reinstall squid guard i get this error on bottom of page

    any suggestions before i completely wipe this, and make clean install?
    Also, if i had to reinstall do you recommend vr. 2.0 or 1.2.3?


  • Rebel Alliance Developer Netgate

    Stay with 1.2.3, especially if you are having issues.

    Looks like squidguard's .xml file(s) might be missing. Not sure how that would have happened.

    If you can't reinstall the package, you may need to backup your config, and reinstall/restore.



  • i will manually enter complete configuration, that is not problem.

    thanks for advice, i will try and let you know



  • Just to leave feedback,
    PFS completely removed and reinstalled, packages installed, squid and squid guard works like charm (for now :))…
    a didnt want to restore backup config, so i enter complete configuration manually (all static routes, firewall, nat etc)
    I hope that this reinstall fix things...

    Will let you know for couple of days



  • same problem returns…

    is it possible that someone of users behind pfs have some application that can confuse proxy filter, so that it stops with filtering?

    i dont know what to do any more



  • ok guys
    i see im not alone with this problem
    (http://forum.pfsense.org/index.php/topic,27597.0.html, etc…)
    squid and squid guard are running but not filtering any web traffic after restarting services, works for day or two, and then filtering stops again...

    also i installed one test pfs 2.0 beta4 (amd x64) to test squid and squidguard, and it cant run squid and squidguard, services are installed but cant run...

    can we expect fix for 1.2.3, or should we wait for 2.0 to be fixed ?

    thanks


  • Rebel Alliance Developer Netgate

    It works fine for most people on 1.2.3. I would not expect 2.0 to be more stable at the moment.

    The problem with squid's on x64 is different entirely, and has nothing to do with the original post here. There are a couple threads from yesterday about it (check system logs for signal 6 errors) but either way, if you're on 2.0 and having issues, start a new thread in the 2.0 board and don't keep tacking on to this one since that is definitely a separate issue.



  • yes i was searching, and find out that, there is some problems with squidguard on 1.2.3,
    and that there is problem on 2.0, but also it is not related to problem i have here.

    im running 1.2.3
    and 2.0 beta4 in test phase…

    i have two different problems on same package :(

    thanks for answer



  • I'm running 2.0 beta 4 and sguidguard has worked everyday since I installed it over 10 days ago. I also had no issue when I was on 1.23 prior to installing 2.0.



  • what date install do you use?
    i couldnt even install amd x64 version from 13 aug. 2010…

    than i download older version from 28. jul 2010 and installation passed with no probs.
    also i cant believe that i have issue with machines? with different machines? but again, maybe hardware is problem, both machines are amd 64.

    thanks for reply



  • Currently on: 2.0-BETA4
    built on Tue Aug 10 02:57:56 EDT 2010
    FreeBSD 8.1-RELEASE



  • hm, 32 or 64?
    it seems 32bit versions work fine.



  • 32



  • 32? :)

    ok, i was talking that i have problems with 64bit version, and everyone who use 32bit version say they have no problems, so i follow, and reinstal to 32bit version…

    on install i had same stack up like with 64bit version
    message:
    BIOS DRIVE C: IS DISK 0

    and than installation hangs for a 10 min or so...

    i thought that on end of installation i will get same error as with 64bit version (that is why i switched to 28.jul install), but installation finished fine...

    installation of squid passed ok, only ehen i reboot pfs, it started uninstalation ???
    ok, reinstalled again, also install squidguard, and now both packages work.

    Now i have to run it for couple of days to see is there same problem that i have with 1.2.3. version.

    So definitely there is bug with 2.0 BETA 4 64bit install...

    coldfusion, thanks for reply



  • squidguard was filtering until first restart
    i think that now i have same problem regarding to this topic http://forum.pfsense.org/index.php/topic,27597.0.html

    when i restart service i get this on log:
    Aug 20 09:54:35 Squid_Alarm[32428]: Reconfiguring filter…
    Aug 20 09:54:35 php: : The command '/sbin/pfctl -nf /tmp/rules.test.packages' returned exit code '1', the output was '/tmp/rules.test.packages:6: macro 'pptp' not defined /tmp/rules.test.packages:6: syntax error'
    Aug 20 09:54:35 php: : There was an error while parsing the package filter rules for /usr/local/pkg/squid.inc.
    Aug 20 09:54:36 php: : The command '/sbin/pfctl -nf /tmp/rules.test.packages' returned exit code '1', the output was '/tmp/rules.test.packages:13: macro 'pptp' not defined /tmp/rules.test.packages:13: syntax error'
    Aug 20 09:54:36 php: : There was an error while parsing the package filter rules for /usr/local/pkg/squid.inc.
    Aug 20 09:54:36 Squid_Alarm[38776]: Squid has resumed. Reconfiguring filter.
    Aug 20 09:54:36 php: : The command '/sbin/pfctl -nf /tmp/rules.test.packages' returned exit code '1', the output was '/tmp/rules.test.packages:6: macro 'pptp' not defined /tmp/rules.test.packages:6: syntax error'
    Aug 20 09:54:36 php: : There was an error while parsing the package filter rules for /usr/local/pkg/squid.inc.
    Aug 20 09:54:36 php: : The command '/sbin/pfctl -nf /tmp/rules.test.packages' returned exit code '1', the output was '/tmp/rules.test.packages:13: macro 'pptp' not defined /tmp/rules.test.packages:13: syntax error'
    Aug 20 09:54:36 php: : There was an error while parsing the package filter rules for /usr/local/pkg/squid.inc.
    Aug 20 09:54:47 squid[18219]: The url_rewriter helpers are crashing too rapidly, need help!
    Aug 20 09:54:47 squid[17778]: Squid Parent: child process 18219 exited due to signal 6
    Aug 20 09:54:47 kernel: pid 18219 (squid), uid 62: exited on signal 6
    Aug 20 09:54:50 squid[17778]: Squid Parent: child process 46534 started

    i dont have acl rules and destinations



  • problem found in 2.0 beta 4 32bit
    when i enable PPTP VPN, web filtering stops!

    bug? :)

    maybe same problem with 1.2.3.? i mean maybe is related?
    Because i notice, that, after pfs receive connection to vpn, squidguard stops with filtering, but it is random, not every time.

    any suggestions? comments?

    thanks



  • I have been having the same probem with suid and squid guard.  It will work for a bit, then stop working all together.  Very frustrating.  I have tried so many times and things to fix it.  I gave up.

    Good luck



  • @MrKluttz:

    I have been having the same probem with suid and squid guard.  It will work for a bit, then stop working all together.  Very frustrating.  I have tried so many times and things to fix it.  I gave up.

    Good luck

    agree, very frustrating, and i cant give up, i need that service, and i need it badly



  • Guys, I think I have a workaround for this issue. I had (hopefully HAD) the same issue. squidguard stops filtering and allows everything to go through every day or two.

    Running 1.2.3 Release. Possible solution: I've ssh'd into the pfsense box, and I´ve set cron to kill squidguard 03:00 everyday. pfsense seems to restart squidguard automatically. Seems to work fine now!

    Command: killall -9 squidguard

    Simple as that. Let me know if that fixes for you guys as well.



  • :)
    no need just install 2.0 works perfect



  • I have too problem with squid+squidguard randomly stop filtering and pass all traffic.
    (pfsense 1.2.3, squid 2.7.9_4, squidGuard 1.3_1 pkg v.1.9)

    I find in filter log this message:

    07.03.2011 06:07:45 going into emergency mode
    07.03.2011 06:07:45 overflow in vsprintf (sgLogError): Unknown error:

    in emergency mode squidguard according to documentation pass all traffic.

    I think if squidquard package is by mistake buid without this patches (or one of them):
    http://squidguard.org/Downloads/Patches/1.3/Readme.Patch-20091015
    http://squidguard.org/Downloads/Patches/1.3/Readme.Patch-20091019

    or is new similar bug.

    I apologize for my English  :)


Log in to reply