Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Squidguard problem after new install

    Scheduled Pinned Locked Moved pfSense Packages
    20 Posts 8 Posters 8.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      joviscomp
      last edited by

      hi, can anyone help me? i cant start squidguard service. i have paste the error below. I have my pfsense newly installed again because of this problem. Could it be the squidguard version Beta 1.4_3 pkg v.1.9
      platform: 1.1 ? can you post the lower version again at the packages area?

      1.2.3-RELEASE (got newly installed because of this problem)
      built on Sun Dec 6 23:21:36 EST 2009
      installed squid 2.7.9
      installed squidguard Beta 1.4_3 pkg v.1.9 platform: 1.1

      here are the error logs

      Mar 30 16:35:51 php: /pkg_edit.php: Reloading Squid for configuration sync
      Mar 30 16:35:51 squid[35514]: The url_rewriter helpers are crashing too rapidly, need help!
      Mar 30 16:35:51 kernel: pid 35514 (squid), uid 62: exited on signal 6
      Mar 30 16:35:51 squid[35512]: Squid Parent: child process 35514 exited due to signal 6
      Mar 30 16:35:54 squid[35512]: Squid Parent: child process 44475 started
      Mar 30 16:35:54 squid[44475]: The url_rewriter helpers are crashing too rapidly, need help!
      Mar 30 16:35:54 kernel: pid 44475 (squid), uid 62: exited on signal 6
      Mar 30 16:35:54 squid[35512]: Squid Parent: child process 44475 exited due to signal 6
      Mar 30 16:35:55 check_reload_status: reloading filter
      Mar 30 16:35:57 squid[35512]: Squid Parent: child process 44551 started
      Mar 30 16:35:57 squid[44551]: The url_rewriter helpers are crashing too rapidly, need help!
      Mar 30 16:35:57 kernel: pid 44551 (squid), uid 62: exited on signal 6
      Mar 30 16:35:57 squid[35512]: Squid Parent: child process 44551 exited due to signal 6
      Mar 30 16:36:01 squid[35512]: Squid Parent: child process 44557 started
      Mar 30 16:36:01 squid[44557]: The url_rewriter helpers are crashing too rapidly, need help!
      Mar 30 16:36:01 kernel: pid 44557 (squid), uid 62: exited on signal 6
      Mar 30 16:36:01 squid[35512]: Squid Parent: child process 44557 exited due to signal 6
      Mar 30 16:36:04 squid[35512]: Squid Parent: child process 44564 started
      Mar 30 16:36:04 squid[44564]: The url_rewriter helpers are crashing too rapidly, need help!

      thanks

      1 Reply Last reply Reply Quote 0
      • A
        andreadg88
        last edited by

        I have the same problem on two server, please post the precedent version in the packages area.

        1 Reply Last reply Reply Quote 0
        • D
          dvserg
          last edited by

          Configure you packages. See logs.

          SquidGuardDoc EN  RU Tutorial
          Localization ru_PFSense

          1 Reply Last reply Reply Quote 0
          • J
            joviscomp
            last edited by

            Do i have to install other packages? i only have two packages installed.squid and squidguard.

            1 Reply Last reply Reply Quote 0
            • J
              joviscomp
              last edited by

              i have reinstalled squidguard and configured. still it wont start. here are the logs..

              Mar 30 21:38:07 squid[7728]: Squid Parent: child process 7730 exited due to signal 6
              Mar 30 21:38:10 squid[7728]: Squid Parent: child process 16557 started
              Mar 30 21:38:11 squid[16557]: The url_rewriter helpers are crashing too rapidly, need help!
              Mar 30 21:38:11 kernel: pid 16557 (squid), uid 62: exited on signal 6
              Mar 30 21:38:11 squid[7728]: Squid Parent: child process 16557 exited due to signal 6
              Mar 30 21:38:11 check_reload_status: reloading filter
              Mar 30 21:38:14 squid[7728]: Squid Parent: child process 16645 started
              Mar 30 21:38:14 squid[16645]: The url_rewriter helpers are crashing too rapidly, need help!
              Mar 30 21:38:14 kernel: pid 16645 (squid), uid 62: exited on signal 6
              Mar 30 21:38:14 squid[7728]: Squid Parent: child process 16645 exited due to signal 6
              Mar 30 21:38:17 squid[7728]: Squid Parent: child process 16652 started
              Mar 30 21:38:17 squid[16652]: The url_rewriter helpers are crashing too rapidly, need help!
              Mar 30 21:38:17 kernel: pid 16652 (squid), uid 62: exited on signal 6
              Mar 30 21:38:17 squid[7728]: Squid Parent: child process 16652 exited due to signal 6
              Mar 30 21:38:20 squid[7728]: Squid Parent: child process 16658 started
              Mar 30 21:38:21 squid[16658]: The url_rewriter helpers are crashing too rapidly, need help!
              Mar 30 21:38:21 kernel: pid 16658 (squid), uid 62: exited on signal 6
              Mar 30 21:38:21 squid[7728]: Squid Parent: child process 16658 exited due to signal 6
              Mar 30 21:38:24 squid[7728]: Squid Parent: child process 16678 started
              Mar 30 21:38:24 squid[16678]: The url_rewriter helpers are crashing too rapidly, need help!
              Mar 30 21:38:24 kernel: pid 16678 (squid), uid 62: exited on signal 6
              Mar 30 21:38:24 squid[7728]: Squid Parent: child process 16678 exited due to signal 6
              Mar 30 21:38:24 squid[7728]: Exiting due to repeated, frequent failures

              1 Reply Last reply Reply Quote 0
              • A
                andreadg88
                last edited by

                In the SQUID Package i've only this setting and transparent proxy:

                redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf;redirector_bypass on;redirect_children 3
                

                and this is the squidGuard.conf

                
                # ============================================================
                # SquidGuard configuration file
                # This file generated automaticly with SquidGuard configurator
                # (C)2006 Serg Dvoriancev
                # email: dv_serg@mail.ru
                # ============================================================
                
                logdir /var/squidGuard/log
                dbhome /var/db/squidGuard
                
                # Url BlackList
                dest URL_Blacklist {
                        domainlist URL_Blacklist/domains
                        urllist URL_Blacklist/urls
                        redirect http://192.168.1.1:80/sgerror.php?url=403%20La%20visione%20dei%
                20video%20non%20e%27%20permessa&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u
                }
                
                #
                rew safesearch {
                        s@(google\..*/search?.*q=.*)@\1\&safe=active@i
                        s@(google\..*/images.*q=.*)@\1\&safe=active@i
                        s@(google\..*/groups.*q=.*)@\1\&safe=active@i
                        s@(google\..*/news.*q=.*)@\1\&safe=active@i
                        s@(yandex\..*/yandsearch?.*text=.*)@\1\&fyandex=1@i
                        s@(search\.yahoo\..*/search.*p=.*)@\1\&vm=r&v=1@i
                        s@(search\.live\..*/.*q=.*)@\1\&adlt=strict@i
                        s@(search\.msn\..*/.*q=.*)@\1\&adlt=strict@i
                        s@(\.bing\..*/.*q=.*)@\1\&adlt=strict@i
                }
                
                #
                acl  {
                        #
                        default  {
                                pass URL_Blacklist all
                                redirect http://192.168.1.1:80/sgerror.php?url=403%20&a=%a&n=%n&
                i=%i&s=%s&t=%t&u=%u
                        }
                }
                dest URL_Blacklist {
                        domainlist URL_Blacklist/domains
                        urllist URL_Blacklist/urls
                        redirect http://192.168.1.1:80/sgerror.php?url=403%20La%20visione%20dei%20video%20no
                n%20e%27%20permessa&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u
                }
                
                #
                rew safesearch {
                        s@(google\..*/search?.*q=.*)@\1\&safe=active@i
                        s@(google\..*/images.*q=.*)@\1\&safe=active@i
                        s@(google\..*/groups.*q=.*)@\1\&safe=active@i
                        s@(google\..*/news.*q=.*)@\1\&safe=active@i
                        s@(yandex\..*/yandsearch?.*text=.*)@\1\&fyandex=1@i
                        s@(search\.yahoo\..*/search.*p=.*)@\1\&vm=r&v=1@i
                        s@(search\.live\..*/.*q=.*)@\1\&adlt=strict@i
                        s@(search\.msn\..*/.*q=.*)@\1\&adlt=strict@i
                        s@(\.bing\..*/.*q=.*)@\1\&adlt=strict@i
                }
                
                #
                acl  {
                        #
                        default  {
                                pass URL_Blacklist all
                                redirect http://192.168.1.1:80/sgerror.php?url=403%20&a=%a&n=%n&i=%i&s=%s&t=
                %t&u=%u
                        }
                }
                

                In the logs, there aren't any reference to the problem…

                Mar 30 15:41:23 	squid[59702]: Squid Parent: child process 59894 exited due to signal 6
                Mar 30 15:41:23 	kernel: pid 59894 (squid), uid 62: exited on signal 6
                Mar 30 15:41:23 	squid[59894]: The url_rewriter helpers are crashing too rapidly, need help!
                Mar 30 15:41:23 	squid[59702]: Squid Parent: child process 59894 started
                Mar 30 15:41:22 	check_reload_status: reloading filter
                Mar 30 15:41:22 	php: /pkg_edit.php: Reloading Squid for configuration sync
                Mar 30 15:41:20 	squid[59702]: Squid Parent: child process 59704 exited due to signal 6
                Mar 30 15:41:20 	kernel: pid 59704 (squid), uid 62: exited on signal 6
                Mar 30 15:41:20 	squid[59704]: The url_rewriter helpers are crashing too rapidly, need help!
                Mar 30 15:41:19 	squid[59702]: Squid Parent: child process 59704 started
                Mar 30 15:41:19 	php: /pkg_edit.php: Starting Squid
                Mar 30 15:41:01 	squid[59460]: Exiting due to repeated, frequent failures
                Mar 30 15:41:01 	squid[59460]: Squid Parent: child process 59614 exited due to signal 6
                Mar 30 15:41:01 	kernel: pid 59614 (squid), uid 62: exited on signal 6
                Mar 30 15:41:01 	squid[59614]: The url_rewriter helpers are crashing too rapidly, need help!
                Mar 30 15:41:00 	squid[59460]: Squid Parent: child process 59614 started
                Mar 30 15:40:57 	squid[59460]: Squid Parent: child process 59607 exited due to signal 6
                Mar 30 15:40:57 	kernel: pid 59607 (squid), uid 62: exited on signal 6
                Mar 30 15:40:57 	squid[59607]: The url_rewriter helpers are crashing too rapidly, need help!
                Mar 30 15:40:57 	squid[59460]: Squid Parent: child process 59607 started
                Mar 30 15:40:54 	squid[59460]: Squid Parent: child process 59601 exited due to signal 6
                Mar 30 15:40:54 	kernel: pid 59601 (squid), uid 62: exited on signal 6
                Mar 30 15:40:54 	squid[59601]: The url_rewriter helpers are crashing too rapidly, need help!
                Mar 30 15:40:54 	squid[59460]: Squid Parent: child process 59601 started
                Mar 30 15:40:51 	check_reload_status: reloading filter
                Mar 30 15:40:51 	squid[59460]: Squid Parent: child process 59518 exited due to signal 6
                Mar 30 15:40:51 	kernel: pid 59518 (squid), uid 62: exited on signal 6
                Mar 30 15:40:51 	squid[59518]: The url_rewriter helpers are crashing too rapidly, need help!
                Mar 30 15:40:51 	squid[59460]: Squid Parent: child process 59518 started
                Mar 30 15:40:47 	squid[59460]: Squid Parent: child process 59463 exited due to signal 6
                Mar 30 15:40:47 	kernel: pid 59463 (squid), uid 62: exited on signal 6
                Mar 30 15:40:47 	squid[59463]: The url_rewriter helpers are crashing too rapidly, need help!
                Mar 30 15:40:47 	squid[59460]: Squid Parent: child process 59463 started
                Mar 30 15:40:47 	php: /pkg_edit.php: Starting Squid
                
                1 Reply Last reply Reply Quote 0
                • J
                  joviscomp
                  last edited by

                  here is my proxy filter log

                  Do not edit manually !

                  http_port 192.168.143.1:3128
                  http_port 127.0.0.1:80 transparent
                  icp_port 0

                  pid_filename /var/run/squid.pid
                  cache_effective_user proxy
                  cache_effective_group proxy
                  error_directory /usr/local/etc/squid/errors/English
                  icon_directory /usr/local/etc/squid/icons
                  visible_hostname GameLab
                  cache_mgr GameLab@odiongan.net
                  access_log /dev/null
                  cache_log /var/squid/logs/cache.log
                  cache_store_log none
                  logfile_rotate 2
                  shutdown_lifetime 3 seconds

                  Allow local network(s) on interface(s)

                  acl localnet src  192.168.143.0/255.255.255.0
                  uri_whitespace strip

                  cache_mem 2000 MB
                  maximum_object_size_in_memory 32 KB
                  memory_replacement_policy heap GDSF
                  cache_replacement_policy heap LFUDA
                  cache_dir ufs /var/squid/cache 100000 16 256
                  minimum_object_size 0 KB
                  maximum_object_size 200000 KB
                  offline_mode off
                  cache_swap_low 90
                  cache_swap_high 95

                  No redirector configured

                  Setup some default acls

                  acl all src 0.0.0.0/0.0.0.0
                  acl localhost src 127.0.0.1/255.255.255.255
                  acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901  3128 1025-65535
                  acl sslports port 443 563 
                  acl manager proto cache_object
                  acl purge method PURGE
                  acl connect method CONNECT
                  acl dynamic urlpath_regex cgi-bin ?
                  acl blacklist dstdom_regex -i '/var/squid/acl/blacklist.acl'
                  cache deny dynamic
                  http_access allow manager localhost

                  http_access deny manager
                  http_access allow purge localhost
                  http_access deny purge
                  http_access deny !safeports
                  http_access deny CONNECT !sslports

                  Always allow localhost connections

                  http_access allow localhost

                  request_body_max_size 0 KB
                  reply_body_max_size 0 deny all
                  delay_pools 1
                  delay_class 1 2
                  delay_parameters 1 -1/-1 -1/-1
                  delay_initial_bucket_level 100
                  delay_access 1 allow all

                  Block access to blacklist domains

                  http_access deny blacklist

                  Setup allowed acls

                  Allow local network(s) on interface(s)

                  http_access allow localnet

                  Default block all to be sure

                  http_access deny all

                  1 Reply Last reply Reply Quote 0
                  • D
                    dvserg
                    last edited by

                    What a pfSense installation type you use (nanoBSD / HDD installation)

                    SquidGuardDoc EN  RU Tutorial
                    Localization ru_PFSense

                    1 Reply Last reply Reply Quote 0
                    • A
                      abbetech
                      last edited by

                      I was having the same problem.  I updated to 2.0 rc1, reinstalled packages, then rebooted.  Now squidguard is running.

                      1 Reply Last reply Reply Quote 0
                      • NetViciousN
                        NetVicious
                        last edited by

                        Here are my two cents ;-)

                        The problem it's when squid tries to run the squidguard slaves:
                        [root@pfsense:/root]# /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf
                        /libexec/ld-elf.so.1: Shared object "libldap-2.4.so.8" not found, required by "squidGuard"

                        So we need the libldap-2.4.so.8

                        I did a pkg_info and I saw two openldap packages, I pkg_deleted both of them and installed the last package on http://files.pfsense.org/packages/7/All/

                        pkg_add -r http://files.pfsense.org/packages/7/All/openldap-client-2.4.23.tbz

                        But it seems this package doesn't installs the libldap-2.4.so.8, it installs libldap-2.4.so.7 so I created a symlink:

                        [root@pfsense:~]# cd /usr/local/lib
                        [root@pfsense:~]# ln -s libldap-2.4.so.7 libldap-2.4.so.8

                        [root@pfsense:/usr/local/lib]# ls -la libldap*
                        lrwxr-xr-x 1 root wheel     16 Feb  2  2007 libldap-2.3.so -> libldap-2.3.so.2
                        -rw-r–r-- 1 root wheel 215171 Feb  2  2007 libldap-2.3.so.2
                        lrwxr-xr-x 1 root wheel     16 Jul 25  2010 libldap-2.4.so -> libldap-2.4.so.7
                        -rw-r--r-- 1 root wheel 279350 Jul 25  2010 libldap-2.4.so.7
                        lrwxr-xr-x 1 root wheel     16 Mar 30 17:49 libldap-2.4.so.8 -> libldap-2.4.so.7
                        -rw-r–r-- 1 root wheel 334522 Jul 25  2010 libldap.a
                        -rw-r--r-- 1 root wheel    984 Jul 25  2010 libldap.la
                        lrwxr-xr-x 1 root wheel     16 Jul 25  2010 libldap.so -> libldap-2.4.so.7
                        lrwxr-xr-x 1 root wheel     18 Feb  2  2007 libldap_r-2.3.so -> libldap_r-2.3.so.2
                        -rw-r--r-- 1 root wheel 236440 Feb  2  2007 libldap_r-2.3.so.2
                        lrwxr-xr-x 1 root wheel     18 Jul 25  2010 libldap_r-2.4.so -> libldap_r-2.4.so.7
                        -rw-r--r-- 1 root wheel 301942 Jul 25  2010 libldap_r-2.4.so.7
                        -rw-r--r-- 1 root wheel 369342 Jul 25  2010 libldap_r.a
                        -rw-r--r-- 1 root wheel   1016 Jul 25  2010 libldap_r.la
                        lrwxr-xr-x 1 root wheel     18 Jul 25  2010 libldap_r.so -> libldap_r-2.4.so.7

                        Please give feedback, and if someone knows where to download the tbz with the correct library leave a link.

                        Regards from Spain.

                        ..//\/ e t . \/ i c i o u s ..

                        1 Reply Last reply Reply Quote 0
                        • O
                          orion182
                          last edited by

                          i try

                          pkg_add -r ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7-stable/Latest/openldap24-client.tbz
                          

                          and seems it working ok.

                          This package is version 2.4.24 and libldap-2.4.so.8 is instaled.

                          1 Reply Last reply Reply Quote 0
                          • J
                            joviscomp
                            last edited by

                            thanks guys..you are all a big help..it worked already…

                            i installed
                            http://files.pfsense.org/packages/7/All/openldap-sasl-client-2.4.25_1.tbz

                            squidguard is up now..thanks..

                            1 Reply Last reply Reply Quote 0
                            • NetViciousN
                              NetVicious
                              last edited by

                              Perfect. The 2.4.25 package was not on the server yesterday. Now it installs the libldap-2.4.so.8.

                              Thanks guys.

                              ..//\/ e t . \/ i c i o u s ..

                              1 Reply Last reply Reply Quote 0
                              • A
                                andreadg88
                                last edited by

                                @joviscomp:

                                thanks guys..you are all a big help..it worked already…

                                i installed
                                http://files.pfsense.org/packages/7/All/openldap-sasl-client-2.4.25_1.tbz

                                squidguard is up now..thanks..

                                I've installed them, but squidguard not start, now i've test it with symlink:

                                ln -s libldap-2.4.so.7 libldap-2.4.so.8
                                

                                now it works…

                                1 Reply Last reply Reply Quote 0
                                • NetViciousN
                                  NetVicious
                                  last edited by

                                  andreadg88: Very strange, because the 2.4.25 seems to install the correct library.

                                  Paste here the result of:

                                  pkg_info
                                  ls -la /usr/local/lib/libldap*

                                  ..//\/ e t . \/ i c i o u s ..

                                  1 Reply Last reply Reply Quote 0
                                  • A
                                    andreadg88
                                    last edited by

                                    here the output of shell…

                                    it's very strange  ???

                                    
                                    # pkg_info
                                    cyrus-sasl-2.1.23   RFC 2222 SASL (Simple Authentication and Security Layer)
                                    cyrus-sasl-2.1.23_3 RFC 2222 SASL (Simple Authentication and Security Layer)
                                    db3-3.3.11_3,1      The Berkeley DB package, revision 3.3
                                    gd-2.0.35,1         A graphics library for fast creation of images
                                    jpeg-6b_4           IJG's jpeg compression utilities
                                    lightsquid-1.7.1_1  A light and fast web based squid proxy traffic analyser
                                    openldap-sasl-client-2.4.25_1 Open source LDAP client implementation with SASL2 support
                                    p5-GD-2.39          A perl5 interface to Gd Graphics Library version2
                                    perl-5.10.1_3       Practical Extraction and Report Language
                                    perl-5.8.8_1        Practical Extraction and Report Language
                                    squid-2.7.9         HTTP Caching Proxy
                                    squidGuard-1.4_3    A fast redirector for squid
                                    squid_radius_auth-1.10 RADIUS authenticator for squid proxy 2.5 and later
                                    
                                    
                                    
                                    # ls -la /usr/local/lib/libldap*
                                    lrwxr-xr-x  1 root  wheel      16 Mar 29 21:37 /usr/local/lib/libldap-2.4.so -> libldap-2.4.so.8
                                    -rwxr-xr-x  1 root  wheel  264819 Jan  9  2009 /usr/local/lib/libldap-2.4.so.3
                                    -rw-r--r--  1 root  wheel  299327 Mar 29 21:37 /usr/local/lib/libldap-2.4.so.8
                                    -rw-r--r--  1 root  wheel  360528 Mar 29 21:37 /usr/local/lib/libldap.a
                                    -rw-r--r--  1 root  wheel    1006 Mar 29 21:37 /usr/local/lib/libldap.la
                                    lrwxr-xr-x  1 root  wheel      16 Mar 29 21:37 /usr/local/lib/libldap.so -> libldap-2.4.so.8
                                    lrwxr-xr-x  1 root  wheel      18 Mar 29 21:37 /usr/local/lib/libldap_r-2.4.so -> libldap_r-2.4.so.8
                                    -rw-r--r--  1 root  wheel  327982 Mar 29 21:37 /usr/local/lib/libldap_r-2.4.so.8
                                    -rw-r--r--  1 root  wheel  397856 Mar 29 21:37 /usr/local/lib/libldap_r.a
                                    -rw-r--r--  1 root  wheel    1029 Mar 29 21:37 /usr/local/lib/libldap_r.la
                                    lrwxr-xr-x  1 root  wheel      18 Mar 29 21:37 /usr/local/lib/libldap_r.so -> libldap_r-2.4.so.8
                                    
                                    
                                    1 Reply Last reply Reply Quote 0
                                    • NetViciousN
                                      NetVicious
                                      last edited by

                                      Try to run the squidguard manually from the shell and paste here the error it should show to you:

                                      /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf

                                      ..//\/ e t . \/ i c i o u s ..

                                      1 Reply Last reply Reply Quote 0
                                      • R
                                        rootchick
                                        last edited by

                                        I had the same problem after updating squidGuard, and solved it with this:

                                        
                                        pkg_delete openldap-client\*
                                        pkg_add -r ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7-stable/Latest/openldap24-client.tbz
                                        
                                        

                                        The dependencies should be updated or something.  This shouldn't happen when upgrading a package on a stable version.

                                        1 Reply Last reply Reply Quote 0
                                        • jimpJ
                                          jimp Rebel Alliance Developer Netgate
                                          last edited by

                                          The dependencies were updated, the problem is that some people who already had the older ldap version need to reinstall both squid and squidGuard, and occasionally need to pkg_delete squid* openldap* and then reinstall.

                                          OpenLDAP had a shared library version bump.

                                          Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                                          Need help fast? Netgate Global Support!

                                          Do not Chat/PM for help!

                                          1 Reply Last reply Reply Quote 0
                                          • R
                                            rootchick
                                            last edited by

                                            Thanks, good to know.  I had only updated squidGuard and nothing else.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.