Squidguard problem after new install
-
hi, can anyone help me? i cant start squidguard service. i have paste the error below. I have my pfsense newly installed again because of this problem. Could it be the squidguard version Beta 1.4_3 pkg v.1.9
platform: 1.1 ? can you post the lower version again at the packages area?1.2.3-RELEASE (got newly installed because of this problem)
built on Sun Dec 6 23:21:36 EST 2009
installed squid 2.7.9
installed squidguard Beta 1.4_3 pkg v.1.9 platform: 1.1here are the error logs
Mar 30 16:35:51 php: /pkg_edit.php: Reloading Squid for configuration sync
Mar 30 16:35:51 squid[35514]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 16:35:51 kernel: pid 35514 (squid), uid 62: exited on signal 6
Mar 30 16:35:51 squid[35512]: Squid Parent: child process 35514 exited due to signal 6
Mar 30 16:35:54 squid[35512]: Squid Parent: child process 44475 started
Mar 30 16:35:54 squid[44475]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 16:35:54 kernel: pid 44475 (squid), uid 62: exited on signal 6
Mar 30 16:35:54 squid[35512]: Squid Parent: child process 44475 exited due to signal 6
Mar 30 16:35:55 check_reload_status: reloading filter
Mar 30 16:35:57 squid[35512]: Squid Parent: child process 44551 started
Mar 30 16:35:57 squid[44551]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 16:35:57 kernel: pid 44551 (squid), uid 62: exited on signal 6
Mar 30 16:35:57 squid[35512]: Squid Parent: child process 44551 exited due to signal 6
Mar 30 16:36:01 squid[35512]: Squid Parent: child process 44557 started
Mar 30 16:36:01 squid[44557]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 16:36:01 kernel: pid 44557 (squid), uid 62: exited on signal 6
Mar 30 16:36:01 squid[35512]: Squid Parent: child process 44557 exited due to signal 6
Mar 30 16:36:04 squid[35512]: Squid Parent: child process 44564 started
Mar 30 16:36:04 squid[44564]: The url_rewriter helpers are crashing too rapidly, need help!thanks
-
I have the same problem on two server, please post the precedent version in the packages area.
-
Configure you packages. See logs.
-
Do i have to install other packages? i only have two packages installed.squid and squidguard.
-
i have reinstalled squidguard and configured. still it wont start. here are the logs..
Mar 30 21:38:07 squid[7728]: Squid Parent: child process 7730 exited due to signal 6
Mar 30 21:38:10 squid[7728]: Squid Parent: child process 16557 started
Mar 30 21:38:11 squid[16557]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 21:38:11 kernel: pid 16557 (squid), uid 62: exited on signal 6
Mar 30 21:38:11 squid[7728]: Squid Parent: child process 16557 exited due to signal 6
Mar 30 21:38:11 check_reload_status: reloading filter
Mar 30 21:38:14 squid[7728]: Squid Parent: child process 16645 started
Mar 30 21:38:14 squid[16645]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 21:38:14 kernel: pid 16645 (squid), uid 62: exited on signal 6
Mar 30 21:38:14 squid[7728]: Squid Parent: child process 16645 exited due to signal 6
Mar 30 21:38:17 squid[7728]: Squid Parent: child process 16652 started
Mar 30 21:38:17 squid[16652]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 21:38:17 kernel: pid 16652 (squid), uid 62: exited on signal 6
Mar 30 21:38:17 squid[7728]: Squid Parent: child process 16652 exited due to signal 6
Mar 30 21:38:20 squid[7728]: Squid Parent: child process 16658 started
Mar 30 21:38:21 squid[16658]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 21:38:21 kernel: pid 16658 (squid), uid 62: exited on signal 6
Mar 30 21:38:21 squid[7728]: Squid Parent: child process 16658 exited due to signal 6
Mar 30 21:38:24 squid[7728]: Squid Parent: child process 16678 started
Mar 30 21:38:24 squid[16678]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 21:38:24 kernel: pid 16678 (squid), uid 62: exited on signal 6
Mar 30 21:38:24 squid[7728]: Squid Parent: child process 16678 exited due to signal 6
Mar 30 21:38:24 squid[7728]: Exiting due to repeated, frequent failures -
In the SQUID Package i've only this setting and transparent proxy:
redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf;redirector_bypass on;redirect_children 3and this is the squidGuard.conf
# ============================================================ # SquidGuard configuration file # This file generated automaticly with SquidGuard configurator # (C)2006 Serg Dvoriancev # email: dv_serg@mail.ru # ============================================================ logdir /var/squidGuard/log dbhome /var/db/squidGuard # Url BlackList dest URL_Blacklist { domainlist URL_Blacklist/domains urllist URL_Blacklist/urls redirect http://192.168.1.1:80/sgerror.php?url=403%20La%20visione%20dei% 20video%20non%20e%27%20permessa&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u } # rew safesearch { s@(google\..*/search?.*q=.*)@\1\&safe=active@i s@(google\..*/images.*q=.*)@\1\&safe=active@i s@(google\..*/groups.*q=.*)@\1\&safe=active@i s@(google\..*/news.*q=.*)@\1\&safe=active@i s@(yandex\..*/yandsearch?.*text=.*)@\1\&fyandex=1@i s@(search\.yahoo\..*/search.*p=.*)@\1\&vm=r&v=1@i s@(search\.live\..*/.*q=.*)@\1\&adlt=strict@i s@(search\.msn\..*/.*q=.*)@\1\&adlt=strict@i s@(\.bing\..*/.*q=.*)@\1\&adlt=strict@i } # acl { # default { pass URL_Blacklist all redirect http://192.168.1.1:80/sgerror.php?url=403%20&a=%a&n=%n& i=%i&s=%s&t=%t&u=%u } } dest URL_Blacklist { domainlist URL_Blacklist/domains urllist URL_Blacklist/urls redirect http://192.168.1.1:80/sgerror.php?url=403%20La%20visione%20dei%20video%20no n%20e%27%20permessa&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u } # rew safesearch { s@(google\..*/search?.*q=.*)@\1\&safe=active@i s@(google\..*/images.*q=.*)@\1\&safe=active@i s@(google\..*/groups.*q=.*)@\1\&safe=active@i s@(google\..*/news.*q=.*)@\1\&safe=active@i s@(yandex\..*/yandsearch?.*text=.*)@\1\&fyandex=1@i s@(search\.yahoo\..*/search.*p=.*)@\1\&vm=r&v=1@i s@(search\.live\..*/.*q=.*)@\1\&adlt=strict@i s@(search\.msn\..*/.*q=.*)@\1\&adlt=strict@i s@(\.bing\..*/.*q=.*)@\1\&adlt=strict@i } # acl { # default { pass URL_Blacklist all redirect http://192.168.1.1:80/sgerror.php?url=403%20&a=%a&n=%n&i=%i&s=%s&t= %t&u=%u } }In the logs, there aren't any reference to the problem…
Mar 30 15:41:23 squid[59702]: Squid Parent: child process 59894 exited due to signal 6 Mar 30 15:41:23 kernel: pid 59894 (squid), uid 62: exited on signal 6 Mar 30 15:41:23 squid[59894]: The url_rewriter helpers are crashing too rapidly, need help! Mar 30 15:41:23 squid[59702]: Squid Parent: child process 59894 started Mar 30 15:41:22 check_reload_status: reloading filter Mar 30 15:41:22 php: /pkg_edit.php: Reloading Squid for configuration sync Mar 30 15:41:20 squid[59702]: Squid Parent: child process 59704 exited due to signal 6 Mar 30 15:41:20 kernel: pid 59704 (squid), uid 62: exited on signal 6 Mar 30 15:41:20 squid[59704]: The url_rewriter helpers are crashing too rapidly, need help! Mar 30 15:41:19 squid[59702]: Squid Parent: child process 59704 started Mar 30 15:41:19 php: /pkg_edit.php: Starting Squid Mar 30 15:41:01 squid[59460]: Exiting due to repeated, frequent failures Mar 30 15:41:01 squid[59460]: Squid Parent: child process 59614 exited due to signal 6 Mar 30 15:41:01 kernel: pid 59614 (squid), uid 62: exited on signal 6 Mar 30 15:41:01 squid[59614]: The url_rewriter helpers are crashing too rapidly, need help! Mar 30 15:41:00 squid[59460]: Squid Parent: child process 59614 started Mar 30 15:40:57 squid[59460]: Squid Parent: child process 59607 exited due to signal 6 Mar 30 15:40:57 kernel: pid 59607 (squid), uid 62: exited on signal 6 Mar 30 15:40:57 squid[59607]: The url_rewriter helpers are crashing too rapidly, need help! Mar 30 15:40:57 squid[59460]: Squid Parent: child process 59607 started Mar 30 15:40:54 squid[59460]: Squid Parent: child process 59601 exited due to signal 6 Mar 30 15:40:54 kernel: pid 59601 (squid), uid 62: exited on signal 6 Mar 30 15:40:54 squid[59601]: The url_rewriter helpers are crashing too rapidly, need help! Mar 30 15:40:54 squid[59460]: Squid Parent: child process 59601 started Mar 30 15:40:51 check_reload_status: reloading filter Mar 30 15:40:51 squid[59460]: Squid Parent: child process 59518 exited due to signal 6 Mar 30 15:40:51 kernel: pid 59518 (squid), uid 62: exited on signal 6 Mar 30 15:40:51 squid[59518]: The url_rewriter helpers are crashing too rapidly, need help! Mar 30 15:40:51 squid[59460]: Squid Parent: child process 59518 started Mar 30 15:40:47 squid[59460]: Squid Parent: child process 59463 exited due to signal 6 Mar 30 15:40:47 kernel: pid 59463 (squid), uid 62: exited on signal 6 Mar 30 15:40:47 squid[59463]: The url_rewriter helpers are crashing too rapidly, need help! Mar 30 15:40:47 squid[59460]: Squid Parent: child process 59463 started Mar 30 15:40:47 php: /pkg_edit.php: Starting Squid -
here is my proxy filter log
Do not edit manually !
http_port 192.168.143.1:3128
http_port 127.0.0.1:80 transparent
icp_port 0pid_filename /var/run/squid.pid
cache_effective_user proxy
cache_effective_group proxy
error_directory /usr/local/etc/squid/errors/English
icon_directory /usr/local/etc/squid/icons
visible_hostname GameLab
cache_mgr GameLab@odiongan.net
access_log /dev/null
cache_log /var/squid/logs/cache.log
cache_store_log none
logfile_rotate 2
shutdown_lifetime 3 secondsAllow local network(s) on interface(s)
acl localnet src 192.168.143.0/255.255.255.0
uri_whitespace stripcache_mem 2000 MB
maximum_object_size_in_memory 32 KB
memory_replacement_policy heap GDSF
cache_replacement_policy heap LFUDA
cache_dir ufs /var/squid/cache 100000 16 256
minimum_object_size 0 KB
maximum_object_size 200000 KB
offline_mode off
cache_swap_low 90
cache_swap_high 95No redirector configured
Setup some default acls
acl all src 0.0.0.0/0.0.0.0
acl localhost src 127.0.0.1/255.255.255.255
acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901 3128 1025-65535
acl sslports port 443 563
acl manager proto cache_object
acl purge method PURGE
acl connect method CONNECT
acl dynamic urlpath_regex cgi-bin ?
acl blacklist dstdom_regex -i '/var/squid/acl/blacklist.acl'
cache deny dynamic
http_access allow manager localhosthttp_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !safeports
http_access deny CONNECT !sslportsAlways allow localhost connections
http_access allow localhost
request_body_max_size 0 KB
reply_body_max_size 0 deny all
delay_pools 1
delay_class 1 2
delay_parameters 1 -1/-1 -1/-1
delay_initial_bucket_level 100
delay_access 1 allow allBlock access to blacklist domains
http_access deny blacklist
Setup allowed acls
Allow local network(s) on interface(s)
http_access allow localnet
Default block all to be sure
http_access deny all
-
What a pfSense installation type you use (nanoBSD / HDD installation)
-
I was having the same problem. I updated to 2.0 rc1, reinstalled packages, then rebooted. Now squidguard is running.
-
Here are my two cents ;-)
The problem it's when squid tries to run the squidguard slaves:
[root@pfsense:/root]# /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf
/libexec/ld-elf.so.1: Shared object "libldap-2.4.so.8" not found, required by "squidGuard"So we need the libldap-2.4.so.8
I did a pkg_info and I saw two openldap packages, I pkg_deleted both of them and installed the last package on http://files.pfsense.org/packages/7/All/
pkg_add -r http://files.pfsense.org/packages/7/All/openldap-client-2.4.23.tbz
But it seems this package doesn't installs the libldap-2.4.so.8, it installs libldap-2.4.so.7 so I created a symlink:
[root@pfsense:~]# cd /usr/local/lib
[root@pfsense:~]# ln -s libldap-2.4.so.7 libldap-2.4.so.8[root@pfsense:/usr/local/lib]# ls -la libldap*
lrwxr-xr-x 1 root wheel 16 Feb 2 2007 libldap-2.3.so -> libldap-2.3.so.2
-rw-r–r-- 1 root wheel 215171 Feb 2 2007 libldap-2.3.so.2
lrwxr-xr-x 1 root wheel 16 Jul 25 2010 libldap-2.4.so -> libldap-2.4.so.7
-rw-r--r-- 1 root wheel 279350 Jul 25 2010 libldap-2.4.so.7
lrwxr-xr-x 1 root wheel 16 Mar 30 17:49 libldap-2.4.so.8 -> libldap-2.4.so.7
-rw-r–r-- 1 root wheel 334522 Jul 25 2010 libldap.a
-rw-r--r-- 1 root wheel 984 Jul 25 2010 libldap.la
lrwxr-xr-x 1 root wheel 16 Jul 25 2010 libldap.so -> libldap-2.4.so.7
lrwxr-xr-x 1 root wheel 18 Feb 2 2007 libldap_r-2.3.so -> libldap_r-2.3.so.2
-rw-r--r-- 1 root wheel 236440 Feb 2 2007 libldap_r-2.3.so.2
lrwxr-xr-x 1 root wheel 18 Jul 25 2010 libldap_r-2.4.so -> libldap_r-2.4.so.7
-rw-r--r-- 1 root wheel 301942 Jul 25 2010 libldap_r-2.4.so.7
-rw-r--r-- 1 root wheel 369342 Jul 25 2010 libldap_r.a
-rw-r--r-- 1 root wheel 1016 Jul 25 2010 libldap_r.la
lrwxr-xr-x 1 root wheel 18 Jul 25 2010 libldap_r.so -> libldap_r-2.4.so.7Please give feedback, and if someone knows where to download the tbz with the correct library leave a link.
Regards from Spain.
-
i try
pkg_add -r ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7-stable/Latest/openldap24-client.tbzand seems it working ok.
This package is version 2.4.24 and libldap-2.4.so.8 is instaled.
-
thanks guys..you are all a big help..it worked already…
i installed
http://files.pfsense.org/packages/7/All/openldap-sasl-client-2.4.25_1.tbzsquidguard is up now..thanks..
-
Perfect. The 2.4.25 package was not on the server yesterday. Now it installs the libldap-2.4.so.8.
Thanks guys.
-
thanks guys..you are all a big help..it worked already…
i installed
http://files.pfsense.org/packages/7/All/openldap-sasl-client-2.4.25_1.tbzsquidguard is up now..thanks..
I've installed them, but squidguard not start, now i've test it with symlink:
ln -s libldap-2.4.so.7 libldap-2.4.so.8now it works…
-
andreadg88: Very strange, because the 2.4.25 seems to install the correct library.
Paste here the result of:
pkg_info
ls -la /usr/local/lib/libldap* -
here the output of shell…
it's very strange ???
# pkg_info cyrus-sasl-2.1.23 RFC 2222 SASL (Simple Authentication and Security Layer) cyrus-sasl-2.1.23_3 RFC 2222 SASL (Simple Authentication and Security Layer) db3-3.3.11_3,1 The Berkeley DB package, revision 3.3 gd-2.0.35,1 A graphics library for fast creation of images jpeg-6b_4 IJG's jpeg compression utilities lightsquid-1.7.1_1 A light and fast web based squid proxy traffic analyser openldap-sasl-client-2.4.25_1 Open source LDAP client implementation with SASL2 support p5-GD-2.39 A perl5 interface to Gd Graphics Library version2 perl-5.10.1_3 Practical Extraction and Report Language perl-5.8.8_1 Practical Extraction and Report Language squid-2.7.9 HTTP Caching Proxy squidGuard-1.4_3 A fast redirector for squid squid_radius_auth-1.10 RADIUS authenticator for squid proxy 2.5 and later# ls -la /usr/local/lib/libldap* lrwxr-xr-x 1 root wheel 16 Mar 29 21:37 /usr/local/lib/libldap-2.4.so -> libldap-2.4.so.8 -rwxr-xr-x 1 root wheel 264819 Jan 9 2009 /usr/local/lib/libldap-2.4.so.3 -rw-r--r-- 1 root wheel 299327 Mar 29 21:37 /usr/local/lib/libldap-2.4.so.8 -rw-r--r-- 1 root wheel 360528 Mar 29 21:37 /usr/local/lib/libldap.a -rw-r--r-- 1 root wheel 1006 Mar 29 21:37 /usr/local/lib/libldap.la lrwxr-xr-x 1 root wheel 16 Mar 29 21:37 /usr/local/lib/libldap.so -> libldap-2.4.so.8 lrwxr-xr-x 1 root wheel 18 Mar 29 21:37 /usr/local/lib/libldap_r-2.4.so -> libldap_r-2.4.so.8 -rw-r--r-- 1 root wheel 327982 Mar 29 21:37 /usr/local/lib/libldap_r-2.4.so.8 -rw-r--r-- 1 root wheel 397856 Mar 29 21:37 /usr/local/lib/libldap_r.a -rw-r--r-- 1 root wheel 1029 Mar 29 21:37 /usr/local/lib/libldap_r.la lrwxr-xr-x 1 root wheel 18 Mar 29 21:37 /usr/local/lib/libldap_r.so -> libldap_r-2.4.so.8 -
Try to run the squidguard manually from the shell and paste here the error it should show to you:
/usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf
-
I had the same problem after updating squidGuard, and solved it with this:
pkg_delete openldap-client\* pkg_add -r ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7-stable/Latest/openldap24-client.tbzThe dependencies should be updated or something. This shouldn't happen when upgrading a package on a stable version.
-
The dependencies were updated, the problem is that some people who already had the older ldap version need to reinstall both squid and squidGuard, and occasionally need to pkg_delete squid* openldap* and then reinstall.
OpenLDAP had a shared library version bump.
-
Thanks, good to know. I had only updated squidGuard and nothing else.
