Squidguard problem after new install

[joviscomp]

hi, can anyone help me? i cant start squidguard service. i have paste the error below. I have my pfsense newly installed again because of this problem. Could it be the squidguard version Beta 1.4_3 pkg v.1.9
platform: 1.1 ? can you post the lower version again at the packages area?

1.2.3-RELEASE (got newly installed because of this problem)
built on Sun Dec 6 23:21:36 EST 2009
installed squid 2.7.9
installed squidguard Beta 1.4_3 pkg v.1.9 platform: 1.1

here are the error logs

Mar 30 16:35:51 php: /pkg_edit.php: Reloading Squid for configuration sync
Mar 30 16:35:51 squid[35514]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 16:35:51 kernel: pid 35514 (squid), uid 62: exited on signal 6
Mar 30 16:35:51 squid[35512]: Squid Parent: child process 35514 exited due to signal 6
Mar 30 16:35:54 squid[35512]: Squid Parent: child process 44475 started
Mar 30 16:35:54 squid[44475]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 16:35:54 kernel: pid 44475 (squid), uid 62: exited on signal 6
Mar 30 16:35:54 squid[35512]: Squid Parent: child process 44475 exited due to signal 6
Mar 30 16:35:55 check_reload_status: reloading filter
Mar 30 16:35:57 squid[35512]: Squid Parent: child process 44551 started
Mar 30 16:35:57 squid[44551]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 16:35:57 kernel: pid 44551 (squid), uid 62: exited on signal 6
Mar 30 16:35:57 squid[35512]: Squid Parent: child process 44551 exited due to signal 6
Mar 30 16:36:01 squid[35512]: Squid Parent: child process 44557 started
Mar 30 16:36:01 squid[44557]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 16:36:01 kernel: pid 44557 (squid), uid 62: exited on signal 6
Mar 30 16:36:01 squid[35512]: Squid Parent: child process 44557 exited due to signal 6
Mar 30 16:36:04 squid[35512]: Squid Parent: child process 44564 started
Mar 30 16:36:04 squid[44564]: The url_rewriter helpers are crashing too rapidly, need help!

thanks

[andreadg88]

I have the same problem on two server, please post the precedent version in the packages area.

[dvserg]

Configure you packages. See logs.

[joviscomp]

Do i have to install other packages? i only have two packages installed.squid and squidguard.

[joviscomp]

i have reinstalled squidguard and configured. still it wont start. here are the logs..

Mar 30 21:38:07 squid[7728]: Squid Parent: child process 7730 exited due to signal 6
Mar 30 21:38:10 squid[7728]: Squid Parent: child process 16557 started
Mar 30 21:38:11 squid[16557]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 21:38:11 kernel: pid 16557 (squid), uid 62: exited on signal 6
Mar 30 21:38:11 squid[7728]: Squid Parent: child process 16557 exited due to signal 6
Mar 30 21:38:11 check_reload_status: reloading filter
Mar 30 21:38:14 squid[7728]: Squid Parent: child process 16645 started
Mar 30 21:38:14 squid[16645]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 21:38:14 kernel: pid 16645 (squid), uid 62: exited on signal 6
Mar 30 21:38:14 squid[7728]: Squid Parent: child process 16645 exited due to signal 6
Mar 30 21:38:17 squid[7728]: Squid Parent: child process 16652 started
Mar 30 21:38:17 squid[16652]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 21:38:17 kernel: pid 16652 (squid), uid 62: exited on signal 6
Mar 30 21:38:17 squid[7728]: Squid Parent: child process 16652 exited due to signal 6
Mar 30 21:38:20 squid[7728]: Squid Parent: child process 16658 started
Mar 30 21:38:21 squid[16658]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 21:38:21 kernel: pid 16658 (squid), uid 62: exited on signal 6
Mar 30 21:38:21 squid[7728]: Squid Parent: child process 16658 exited due to signal 6
Mar 30 21:38:24 squid[7728]: Squid Parent: child process 16678 started
Mar 30 21:38:24 squid[16678]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 21:38:24 kernel: pid 16678 (squid), uid 62: exited on signal 6
Mar 30 21:38:24 squid[7728]: Squid Parent: child process 16678 exited due to signal 6
Mar 30 21:38:24 squid[7728]: Exiting due to repeated, frequent failures

[andreadg88]

In the SQUID Package i've only this setting and transparent proxy:

redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf;redirector_bypass on;redirect_children 3

and this is the squidGuard.conf

# ============================================================
# SquidGuard configuration file
# This file generated automaticly with SquidGuard configurator
# (C)2006 Serg Dvoriancev
# email: dv_serg@mail.ru
# ============================================================

logdir /var/squidGuard/log
dbhome /var/db/squidGuard

# Url BlackList
dest URL_Blacklist {
        domainlist URL_Blacklist/domains
        urllist URL_Blacklist/urls
        redirect http://192.168.1.1:80/sgerror.php?url=403%20La%20visione%20dei%
20video%20non%20e%27%20permessa&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u
}

#
rew safesearch {
        s@(google\..*/search?.*q=.*)@\1\&safe=active@i
        s@(google\..*/images.*q=.*)@\1\&safe=active@i
        s@(google\..*/groups.*q=.*)@\1\&safe=active@i
        s@(google\..*/news.*q=.*)@\1\&safe=active@i
        s@(yandex\..*/yandsearch?.*text=.*)@\1\&fyandex=1@i
        s@(search\.yahoo\..*/search.*p=.*)@\1\&vm=r&v=1@i
        s@(search\.live\..*/.*q=.*)@\1\&adlt=strict@i
        s@(search\.msn\..*/.*q=.*)@\1\&adlt=strict@i
        s@(\.bing\..*/.*q=.*)@\1\&adlt=strict@i
}

#
acl  {
        #
        default  {
                pass URL_Blacklist all
                redirect http://192.168.1.1:80/sgerror.php?url=403%20&a=%a&n=%n&
i=%i&s=%s&t=%t&u=%u
        }
}
dest URL_Blacklist {
        domainlist URL_Blacklist/domains
        urllist URL_Blacklist/urls
        redirect http://192.168.1.1:80/sgerror.php?url=403%20La%20visione%20dei%20video%20no
n%20e%27%20permessa&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u
}

#
rew safesearch {
        s@(google\..*/search?.*q=.*)@\1\&safe=active@i
        s@(google\..*/images.*q=.*)@\1\&safe=active@i
        s@(google\..*/groups.*q=.*)@\1\&safe=active@i
        s@(google\..*/news.*q=.*)@\1\&safe=active@i
        s@(yandex\..*/yandsearch?.*text=.*)@\1\&fyandex=1@i
        s@(search\.yahoo\..*/search.*p=.*)@\1\&vm=r&v=1@i
        s@(search\.live\..*/.*q=.*)@\1\&adlt=strict@i
        s@(search\.msn\..*/.*q=.*)@\1\&adlt=strict@i
        s@(\.bing\..*/.*q=.*)@\1\&adlt=strict@i
}

#
acl  {
        #
        default  {
                pass URL_Blacklist all
                redirect http://192.168.1.1:80/sgerror.php?url=403%20&a=%a&n=%n&i=%i&s=%s&t=
%t&u=%u
        }
}

In the logs, there aren't any reference to the problem…

Mar 30 15:41:23 	squid[59702]: Squid Parent: child process 59894 exited due to signal 6
Mar 30 15:41:23 	kernel: pid 59894 (squid), uid 62: exited on signal 6
Mar 30 15:41:23 	squid[59894]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:41:23 	squid[59702]: Squid Parent: child process 59894 started
Mar 30 15:41:22 	check_reload_status: reloading filter
Mar 30 15:41:22 	php: /pkg_edit.php: Reloading Squid for configuration sync
Mar 30 15:41:20 	squid[59702]: Squid Parent: child process 59704 exited due to signal 6
Mar 30 15:41:20 	kernel: pid 59704 (squid), uid 62: exited on signal 6
Mar 30 15:41:20 	squid[59704]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:41:19 	squid[59702]: Squid Parent: child process 59704 started
Mar 30 15:41:19 	php: /pkg_edit.php: Starting Squid
Mar 30 15:41:01 	squid[59460]: Exiting due to repeated, frequent failures
Mar 30 15:41:01 	squid[59460]: Squid Parent: child process 59614 exited due to signal 6
Mar 30 15:41:01 	kernel: pid 59614 (squid), uid 62: exited on signal 6
Mar 30 15:41:01 	squid[59614]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:41:00 	squid[59460]: Squid Parent: child process 59614 started
Mar 30 15:40:57 	squid[59460]: Squid Parent: child process 59607 exited due to signal 6
Mar 30 15:40:57 	kernel: pid 59607 (squid), uid 62: exited on signal 6
Mar 30 15:40:57 	squid[59607]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:40:57 	squid[59460]: Squid Parent: child process 59607 started
Mar 30 15:40:54 	squid[59460]: Squid Parent: child process 59601 exited due to signal 6
Mar 30 15:40:54 	kernel: pid 59601 (squid), uid 62: exited on signal 6
Mar 30 15:40:54 	squid[59601]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:40:54 	squid[59460]: Squid Parent: child process 59601 started
Mar 30 15:40:51 	check_reload_status: reloading filter
Mar 30 15:40:51 	squid[59460]: Squid Parent: child process 59518 exited due to signal 6
Mar 30 15:40:51 	kernel: pid 59518 (squid), uid 62: exited on signal 6
Mar 30 15:40:51 	squid[59518]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:40:51 	squid[59460]: Squid Parent: child process 59518 started
Mar 30 15:40:47 	squid[59460]: Squid Parent: child process 59463 exited due to signal 6
Mar 30 15:40:47 	kernel: pid 59463 (squid), uid 62: exited on signal 6
Mar 30 15:40:47 	squid[59463]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:40:47 	squid[59460]: Squid Parent: child process 59463 started
Mar 30 15:40:47 	php: /pkg_edit.php: Starting Squid

[joviscomp]

here is my proxy filter log

Do not edit manually !

http_port 192.168.143.1:3128
http_port 127.0.0.1:80 transparent
icp_port 0

pid_filename /var/run/squid.pid
cache_effective_user proxy
cache_effective_group proxy
error_directory /usr/local/etc/squid/errors/English
icon_directory /usr/local/etc/squid/icons
visible_hostname GameLab
cache_mgr GameLab@odiongan.net
access_log /dev/null
cache_log /var/squid/logs/cache.log
cache_store_log none
logfile_rotate 2
shutdown_lifetime 3 seconds

Allow local network(s) on interface(s)

acl localnet src  192.168.143.0/255.255.255.0
uri_whitespace strip

cache_mem 2000 MB
maximum_object_size_in_memory 32 KB
memory_replacement_policy heap GDSF
cache_replacement_policy heap LFUDA
cache_dir ufs /var/squid/cache 100000 16 256
minimum_object_size 0 KB
maximum_object_size 200000 KB
offline_mode off
cache_swap_low 90
cache_swap_high 95

No redirector configured

Setup some default acls

acl all src 0.0.0.0/0.0.0.0
acl localhost src 127.0.0.1/255.255.255.255
acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901  3128 1025-65535
acl sslports port 443 563 
acl manager proto cache_object
acl purge method PURGE
acl connect method CONNECT
acl dynamic urlpath_regex cgi-bin ?
acl blacklist dstdom_regex -i '/var/squid/acl/blacklist.acl'
cache deny dynamic
http_access allow manager localhost

http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !safeports
http_access deny CONNECT !sslports

Always allow localhost connections

http_access allow localhost

request_body_max_size 0 KB
reply_body_max_size 0 deny all
delay_pools 1
delay_class 1 2
delay_parameters 1 -1/-1 -1/-1
delay_initial_bucket_level 100
delay_access 1 allow all

Block access to blacklist domains

http_access deny blacklist

Setup allowed acls

Allow local network(s) on interface(s)

http_access allow localnet

Default block all to be sure

http_access deny all

[dvserg]

What a pfSense installation type you use (nanoBSD / HDD installation)

[abbetech]

I was having the same problem.  I updated to 2.0 rc1, reinstalled packages, then rebooted.  Now squidguard is running.

[NetVicious]

Here are my two cents ;-)

The problem it's when squid tries to run the squidguard slaves:
[root@pfsense:/root]# /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf
/libexec/ld-elf.so.1: Shared object "libldap-2.4.so.8" not found, required by "squidGuard"

So we need the libldap-2.4.so.8

I did a pkg_info and I saw two openldap packages, I pkg_deleted both of them and installed the last package on http://files.pfsense.org/packages/7/All/

pkg_add -r http://files.pfsense.org/packages/7/All/openldap-client-2.4.23.tbz

But it seems this package doesn't installs the libldap-2.4.so.8, it installs libldap-2.4.so.7 so I created a symlink:

[root@pfsense:~]# cd /usr/local/lib
[root@pfsense:~]# ln -s libldap-2.4.so.7 libldap-2.4.so.8

[root@pfsense:/usr/local/lib]# ls -la libldap*
lrwxr-xr-x 1 root wheel     16 Feb  2  2007 libldap-2.3.so -> libldap-2.3.so.2
-rw-r–r-- 1 root wheel 215171 Feb  2  2007 libldap-2.3.so.2
lrwxr-xr-x 1 root wheel     16 Jul 25  2010 libldap-2.4.so -> libldap-2.4.so.7
-rw-r--r-- 1 root wheel 279350 Jul 25  2010 libldap-2.4.so.7
lrwxr-xr-x 1 root wheel     16 Mar 30 17:49 libldap-2.4.so.8 -> libldap-2.4.so.7
-rw-r–r-- 1 root wheel 334522 Jul 25  2010 libldap.a
-rw-r--r-- 1 root wheel    984 Jul 25  2010 libldap.la
lrwxr-xr-x 1 root wheel     16 Jul 25  2010 libldap.so -> libldap-2.4.so.7
lrwxr-xr-x 1 root wheel     18 Feb  2  2007 libldap_r-2.3.so -> libldap_r-2.3.so.2
-rw-r--r-- 1 root wheel 236440 Feb  2  2007 libldap_r-2.3.so.2
lrwxr-xr-x 1 root wheel     18 Jul 25  2010 libldap_r-2.4.so -> libldap_r-2.4.so.7
-rw-r--r-- 1 root wheel 301942 Jul 25  2010 libldap_r-2.4.so.7
-rw-r--r-- 1 root wheel 369342 Jul 25  2010 libldap_r.a
-rw-r--r-- 1 root wheel   1016 Jul 25  2010 libldap_r.la
lrwxr-xr-x 1 root wheel     18 Jul 25  2010 libldap_r.so -> libldap_r-2.4.so.7

Please give feedback, and if someone knows where to download the tbz with the correct library leave a link.

Regards from Spain.

[orion182]

i try

pkg_add -r ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7-stable/Latest/openldap24-client.tbz

and seems it working ok.

This package is version 2.4.24 and libldap-2.4.so.8 is instaled.

[joviscomp]

thanks guys..you are all a big help..it worked already…

i installed
http://files.pfsense.org/packages/7/All/openldap-sasl-client-2.4.25_1.tbz

squidguard is up now..thanks..

[NetVicious]

Perfect. The 2.4.25 package was not on the server yesterday. Now it installs the libldap-2.4.so.8.

Thanks guys.

[andreadg88]

@joviscomp:

thanks guys..you are all a big help..it worked already…

i installed
http://files.pfsense.org/packages/7/All/openldap-sasl-client-2.4.25_1.tbz

squidguard is up now..thanks..

I've installed them, but squidguard not start, now i've test it with symlink:

ln -s libldap-2.4.so.7 libldap-2.4.so.8

now it works…

[NetVicious]

andreadg88: Very strange, because the 2.4.25 seems to install the correct library.

Paste here the result of:

pkg_info
ls -la /usr/local/lib/libldap*

[andreadg88]

here the output of shell…

it's very strange  ???

# pkg_info
cyrus-sasl-2.1.23   RFC 2222 SASL (Simple Authentication and Security Layer)
cyrus-sasl-2.1.23_3 RFC 2222 SASL (Simple Authentication and Security Layer)
db3-3.3.11_3,1      The Berkeley DB package, revision 3.3
gd-2.0.35,1         A graphics library for fast creation of images
jpeg-6b_4           IJG's jpeg compression utilities
lightsquid-1.7.1_1  A light and fast web based squid proxy traffic analyser
openldap-sasl-client-2.4.25_1 Open source LDAP client implementation with SASL2 support
p5-GD-2.39          A perl5 interface to Gd Graphics Library version2
perl-5.10.1_3       Practical Extraction and Report Language
perl-5.8.8_1        Practical Extraction and Report Language
squid-2.7.9         HTTP Caching Proxy
squidGuard-1.4_3    A fast redirector for squid
squid_radius_auth-1.10 RADIUS authenticator for squid proxy 2.5 and later

# ls -la /usr/local/lib/libldap*
lrwxr-xr-x  1 root  wheel      16 Mar 29 21:37 /usr/local/lib/libldap-2.4.so -> libldap-2.4.so.8
-rwxr-xr-x  1 root  wheel  264819 Jan  9  2009 /usr/local/lib/libldap-2.4.so.3
-rw-r--r--  1 root  wheel  299327 Mar 29 21:37 /usr/local/lib/libldap-2.4.so.8
-rw-r--r--  1 root  wheel  360528 Mar 29 21:37 /usr/local/lib/libldap.a
-rw-r--r--  1 root  wheel    1006 Mar 29 21:37 /usr/local/lib/libldap.la
lrwxr-xr-x  1 root  wheel      16 Mar 29 21:37 /usr/local/lib/libldap.so -> libldap-2.4.so.8
lrwxr-xr-x  1 root  wheel      18 Mar 29 21:37 /usr/local/lib/libldap_r-2.4.so -> libldap_r-2.4.so.8
-rw-r--r--  1 root  wheel  327982 Mar 29 21:37 /usr/local/lib/libldap_r-2.4.so.8
-rw-r--r--  1 root  wheel  397856 Mar 29 21:37 /usr/local/lib/libldap_r.a
-rw-r--r--  1 root  wheel    1029 Mar 29 21:37 /usr/local/lib/libldap_r.la
lrwxr-xr-x  1 root  wheel      18 Mar 29 21:37 /usr/local/lib/libldap_r.so -> libldap_r-2.4.so.8

[NetVicious]

Try to run the squidguard manually from the shell and paste here the error it should show to you:

/usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf

[rootchick]

I had the same problem after updating squidGuard, and solved it with this:

pkg_delete openldap-client\*
pkg_add -r ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7-stable/Latest/openldap24-client.tbz

The dependencies should be updated or something.  This shouldn't happen when upgrading a package on a stable version.

[jimp]

The dependencies were updated, the problem is that some people who already had the older ldap version need to reinstall both squid and squidGuard, and occasionally need to pkg_delete squid* openldap* and then reinstall.

OpenLDAP had a shared library version bump.

[rootchick]

Thanks, good to know.  I had only updated squidGuard and nothing else.