Squid Package Tuning
-
Sounds good, I went ahead and updated the doc wiki article.
-
Jim,
One last thing, near the bottom of the Wiki page, there is an update for AVG, here are a couple more updates that could be applied:
refresh_pattern ([^.]+.|)avg.com/..(bin) 4320 100% 43200 reload-into-ims;
refresh_pattern ([^.]+.|)spywareblaster.net/..(dtb) 4320 100% 64800 reload-into-ims;
refresh_pattern ([^.]+.|)symantecliveupdate.com/..(zip|exe) 43200 100% 43200 reload-into-ims
refresh_pattern ([^.]+.|)avast.com/..(vpu|vpaa) 4320 100% 43200 reload-into-imsI put the SpywareBlaster update to 45 days as it is not a regular update as the others
Scott.
-
I added those to the page, thanks!
-
and this one for Apple, including developer-downloads…
refresh_pattern ([^.]+.|)(download|adcdownload).(apple.|)com/.*.(pkg|dmg) 4320 100% 43200 reload-into-ims;
-
Added that one, too. Thanks!
-
Hi,
thanks for your great job.
Perhaps somebody could help me with updates for Kaspersky for Windows Workstations Updates ?
If I update on client, it connects to one of this sites:
http://dnl-01.geo.kaspersky.com
…
http://dnl-19.geo.kaspersky.comAnd McAfee seems to connect to:
update.nai.comBut I don't know, which extensions will be downloaded :(
Thanks for your help!
-
Best thing is looking at your squid-logs. There you have the full path of that update-files. Other way could be a manual download of the respective files via Webbrowser. The rest is copy/paste.
-
SWEET, this is one of my favourite features of pfsense + Squid.
Nice work, thanks for sharing!
-
Came across this this informative post while searching for troubleshooting guidance with squid and Windows Updates. The problem being that the Windows Updates are not caching, otherwise the Squid is working as intended.
As suggested in this post, I have copy/pasted the following entry to Squid > Services > Proxy server > General settings > Custom Settings -box
refresh_pattern ([^.]+.|)(download|(windows|)update|).(microsoft.|)com/.*.(cab|exe|msi|msp) 4320 100% 43200 reload-into-ims;
However it does not seem to be working and when I was removing the cache folder and executing the command "squid -k" I get the following error:
refreshAddToList: Invalid regular expression '([^.]+.|)(download|(windows|)update|).(microsoft.|)com/.*.(cab|exe|msi|msp)': empty (sub)expression
Any ideas about this?
-
same here … squid -k, report error with that pattern
some one must validate again with that refresh pattern ...
or ... simple ignore since squid still running ?thanks ...
-
Hi,
I am using the following pattern and there is no error in syslog when rebooting or reloading squid:
refresh_pattern ([^.]+.|)avg.com/.*\.(bin) 4320 100% 43200 reload-into-ims; refresh_pattern ([^.]+.|)spywareblaster.net/.*\.(dtb) 4320 100% 4320 reload-into-ims; refresh_pattern ([^.]+.|)symantecliveupdate.com/.*\.(zip|exe) 43200 100% 43200 reload-into-ims; refresh_pattern ([^.]+.|)avast.com/.*\.(vpu|vpaa) 4320 100% 43200 reload-into-ims; refresh_pattern ([^.]+.|)adobe.com/.*\.(exe|msi) 4320 100% 43200 reload-into-ims; refresh_pattern ([^.]+.|)(download|adcdownload).(apple.|)com/.*\.(pkg|dmg) 8640 100% 86400 reload-into-ims; refresh_pattern ([^.]+.|)(download|(windows|)update|).(microsoft.|)com/.*\.(cab|exe|msi|msp) 8640 100% 86400 reload-into-ims; refresh_pattern ([^.]+.|)ubuntu.com/.*\.(tar|bz|bz2|gpg|gz|zip|deb) 8640 100% 86400 reload-into-ims; range_offset_limit -1;
-
I had this errors only with squid3, since some days. With squid 2.7 and squid3 also before never had such problems.
-
I am using squid 2.7
-
yes, on sys log gui there is no error with that pattern …
please try on pfsense shell with command squid -k rotate or parse[2.0-BETA5][root@server.localan.vvt]/root(11): squid -k parse 2011/02/08 09:15:39| pattern.conf line 1: refresh_pattern ([^.]+.|)avg.com/.*\.(bin) 4320 100% 43200 reload-into-ims 2011/02/08 09:15:39| parse_refreshpattern: Invalid regular expression '([^.]+.|)avg.com/.*\.(bin)': empty (sub)expression 2011/02/08 09:15:39| pattern.conf line 2: refresh_pattern ([^.]+.|)spywareblaster.net/.*\.(dtb) 4320 100% 4320 reload-into-ims 2011/02/08 09:15:39| parse_refreshpattern: Invalid regular expression '([^.]+.|)spywareblaster.net/.*\.(dtb)': empty (sub)expression 2011/02/08 09:15:39| pattern.conf line 3: refresh_pattern ([^.]+.|)symantecliveupdate.com/.*\.(zip|exe) 43200 100% 43200 reload-into-ims 2011/02/08 09:15:39| parse_refreshpattern: Invalid regular expression '([^.]+.|)symantecliveupdate.com/.*\.(zip|exe)': empty (sub)expression 2011/02/08 09:15:39| pattern.conf line 4: refresh_pattern ([^.]+.|)avast.com/.*\.(vpu|vpaa) 4320 100% 43200 reload-into-ims 2011/02/08 09:15:39| parse_refreshpattern: Invalid regular expression '([^.]+.|)avast.com/.*\.(vpu|vpaa)': empty (sub)expression 2011/02/08 09:15:39| pattern.conf line 5: refresh_pattern ([^.]+.|)adobe.com/.*\.(exe|msi) 4320 100% 43200 reload-into-ims 2011/02/08 09:15:39| parse_refreshpattern: Invalid regular expression '([^.]+.|)adobe.com/.*\.(exe|msi)': empty (sub)expression 2011/02/08 09:15:39| pattern.conf line 6: refresh_pattern ([^.]+.|)(download|adcdownload).(apple.|)com/.*\.(pkg|dmg) 8640 100% 86400 reload-into-ims 2011/02/08 09:15:39| parse_refreshpattern: Invalid regular expression '([^.]+.|)(download|adcdownload).(apple.|)com/.*\.(pkg|dmg)': empty (sub)expression 2011/02/08 09:15:39| pattern.conf line 7: refresh_pattern ([^.]+.|)(download|(windows|)update|).(microsoft.|)com/.*\.(cab|exe|msi|msp) 8640 100% 86400 reload-into-ims 2011/02/08 09:15:39| parse_refreshpattern: Invalid regular expression '([^.]+.|)(download|(windows|)update|).(microsoft.|)com/.*\.(cab|exe|msi|msp)': empty (sub)expression 2011/02/08 09:15:39| pattern.conf line 8: refresh_pattern ([^.]+.|)ubuntu.com/.*\.(tar|bz|bz2|gpg|gz|zip|deb) 8640 100% 86400 reload-into-ims 2011/02/08 09:15:39| parse_refreshpattern: Invalid regular expression '([^.]+.|)ubuntu.com/.*\.(tar|bz|bz2|gpg|gz|zip|deb)': empty (sub)expression
or is simple to ignore it …
if ... when it works it works beautifully!thanks
-
Hi,
you are right. If I do squid -k rotate than there is the following output
2011/02/08 07:50:54| squid.conf line 74: refresh_pattern ([^.]+.|)avg.com/.*\.(b in) 4320 100% 43200 reload-into-ims 2011/02/08 07:50:54| parse_refreshpattern: Invalid regular expression '([^.]+.|) avg.com/.*\.(bin)': empty (sub)expression 2011/02/08 07:50:54| squid.conf line 75: refresh_pattern ([^.]+.|)spywareblaster .net/.*\.(dtb) 4320 100% 4320 reload-into-ims 2011/02/08 07:50:54| parse_refreshpattern: Invalid regular expression '([^.]+.|) spywareblaster.net/.*\.(dtb)': empty (sub)expression 2011/02/08 07:50:54| squid.conf line 76: refresh_pattern ([^.]+.|)symantecliveup date.com/.*\.(zip|exe) 43200 100% 43200 reload-into-ims 2011/02/08 07:50:54| parse_refreshpattern: Invalid regular expression '([^.]+.|) symantecliveupdate.com/.*\.(zip|exe)': empty (sub)expression 2011/02/08 07:50:54| squid.conf line 77: refresh_pattern ([^.]+.|)avast.com/.*\. (vpu|vpaa) 4320 100% 43200 reload-into-ims 2011/02/08 07:50:54| parse_refreshpattern: Invalid regular expression '([^.]+.|) avast.com/.*\.(vpu|vpaa)': empty (sub)expression 2011/02/08 07:50:54| squid.conf line 78: refresh_pattern ([^.]+.|)adobe.com/.*\. (exe|msi) 4320 100% 43200 reload-into-ims 2011/02/08 07:50:54| parse_refreshpattern: Invalid regular expression '([^.]+.|) adobe.com/.*\.(exe|msi)': empty (sub)expression 2011/02/08 07:50:54| squid.conf line 79: refresh_pattern ([^.]+.|)(download|adcd ownload).(apple.|)com/.*\.(pkg|dmg) 8640 100% 86400 reload-into-ims 2011/02/08 07:50:54| parse_refreshpattern: Invalid regular expression '([^.]+.|) (download|adcdownload).(apple.|)com/.*\.(pkg|dmg)': empty (sub)expression 2011/02/08 07:50:54| squid.conf line 80: refresh_pattern ([^.]+.|)(download|(win dows|)update|).(microsoft.|)com/.*\.(cab|exe|msi|msp) 8640 100% 86400 reload-int o-ims 2011/02/08 07:50:54| parse_refreshpattern: Invalid regular expression '([^.]+.|) (download|(windows|)update|).(microsoft.|)com/.*\.(cab|exe|msi|msp)': empty (sub )expression 2011/02/08 07:50:54| squid.conf line 81: refresh_pattern ([^.]+.|)ubuntu.com/.*\ .(tar|bz|bz2|gpg|gz|zip|deb) 8640 100% 86400 reload-into-ims 2011/02/08 07:50:54| parse_refreshpattern: Invalid regular expression '([^.]+.|) ubuntu.com/.*\.(tar|bz|bz2|gpg|gz|zip|deb)': empty (sub)expression
But it seems to work and to cache updates from windows and from adobe (this are the two I tested yesterday).
-
I got bit older system at hands, Pfsense 1.2-RELEASE with the following squid packages installed:
squid Network 2.6.21_11
squidGuard Current: 1.2.0_1 pkg v.1.5 , Installed: 1.2.0_1-2Maybe this is the reason for Windows Updates not caching.
-
Hi,
you are right. If I do squid -k rotate than there is the following output
But it seems to work and to cache updates from windows and from adobe (this are the two I tested yesterday).
also when checking on cachemanager …
that pattern won't show on report .... unless this "([^.]+.|)" deleted, it's invalid regex
then pattern will show on report
well … it seem need validate on wiki from squid experience ...thanks
-
Dear serangku
Look at this i m trying to solve this toohttp://forum.pfsense.org/index.php/topic,33158.0.html
-
i'll try tomorrow …
thanks for sharing
-
also when checking on cachemanager …
that pattern won't show on report .... unless this "([^.]+.|)" deleted, it's invalid regex
then pattern will show on report
well … it seem need validate on wiki from squid experience ...I'm sorry that everyone is having difficulty, I have only tried the regex on a 2-3 machines and everything appeared to be OK. I running Squid 2.7 with pfSense 1.2.3 and I'm not getting any errors when I run squid -k rotate. But that is not to say the regex is "faulty". I had hoped that more people would have tested it before Jim had updated the wiki page, I think it might be time for myself to try a fresh install of version 1.2.3 or maybe try version 2 beta to see what is wrong.
Thanks.