3. Squidguard problem after new install

Squidguard problem after new install

  • J

    hi, can anyone help me? i cant start squidguard service. i have paste the error below. I have my pfsense newly installed again because of this problem. Could it be the squidguard version Beta 1.4_3 pkg v.1.9
    platform: 1.1 ? can you post the lower version again at the packages area?

    1.2.3-RELEASE (got newly installed because of this problem)
    built on Sun Dec 6 23:21:36 EST 2009
    installed squid 2.7.9
    installed squidguard Beta 1.4_3 pkg v.1.9 platform: 1.1

    here are the error logs

    Mar 30 16:35:51 php: /pkg_edit.php: Reloading Squid for configuration sync
    Mar 30 16:35:51 squid[35514]: The url_rewriter helpers are crashing too rapidly, need help!
    Mar 30 16:35:51 kernel: pid 35514 (squid), uid 62: exited on signal 6
    Mar 30 16:35:51 squid[35512]: Squid Parent: child process 35514 exited due to signal 6
    Mar 30 16:35:54 squid[35512]: Squid Parent: child process 44475 started
    Mar 30 16:35:54 squid[44475]: The url_rewriter helpers are crashing too rapidly, need help!
    Mar 30 16:35:54 kernel: pid 44475 (squid), uid 62: exited on signal 6
    Mar 30 16:35:54 squid[35512]: Squid Parent: child process 44475 exited due to signal 6
    Mar 30 16:35:55 check_reload_status: reloading filter
    Mar 30 16:35:57 squid[35512]: Squid Parent: child process 44551 started
    Mar 30 16:35:57 squid[44551]: The url_rewriter helpers are crashing too rapidly, need help!
    Mar 30 16:35:57 kernel: pid 44551 (squid), uid 62: exited on signal 6
    Mar 30 16:35:57 squid[35512]: Squid Parent: child process 44551 exited due to signal 6
    Mar 30 16:36:01 squid[35512]: Squid Parent: child process 44557 started
    Mar 30 16:36:01 squid[44557]: The url_rewriter helpers are crashing too rapidly, need help!
    Mar 30 16:36:01 kernel: pid 44557 (squid), uid 62: exited on signal 6
    Mar 30 16:36:01 squid[35512]: Squid Parent: child process 44557 exited due to signal 6
    Mar 30 16:36:04 squid[35512]: Squid Parent: child process 44564 started
    Mar 30 16:36:04 squid[44564]: The url_rewriter helpers are crashing too rapidly, need help!

    thanks

    0
  • A

    I have the same problem on two server, please post the precedent version in the packages area.

    0
  • D

    Configure you packages. See logs.

    0
  • J

    Do i have to install other packages? i only have two packages installed.squid and squidguard.

    0
  • J

    i have reinstalled squidguard and configured. still it wont start. here are the logs..

    Mar 30 21:38:07 squid[7728]: Squid Parent: child process 7730 exited due to signal 6
    Mar 30 21:38:10 squid[7728]: Squid Parent: child process 16557 started
    Mar 30 21:38:11 squid[16557]: The url_rewriter helpers are crashing too rapidly, need help!
    Mar 30 21:38:11 kernel: pid 16557 (squid), uid 62: exited on signal 6
    Mar 30 21:38:11 squid[7728]: Squid Parent: child process 16557 exited due to signal 6
    Mar 30 21:38:11 check_reload_status: reloading filter
    Mar 30 21:38:14 squid[7728]: Squid Parent: child process 16645 started
    Mar 30 21:38:14 squid[16645]: The url_rewriter helpers are crashing too rapidly, need help!
    Mar 30 21:38:14 kernel: pid 16645 (squid), uid 62: exited on signal 6
    Mar 30 21:38:14 squid[7728]: Squid Parent: child process 16645 exited due to signal 6
    Mar 30 21:38:17 squid[7728]: Squid Parent: child process 16652 started
    Mar 30 21:38:17 squid[16652]: The url_rewriter helpers are crashing too rapidly, need help!
    Mar 30 21:38:17 kernel: pid 16652 (squid), uid 62: exited on signal 6
    Mar 30 21:38:17 squid[7728]: Squid Parent: child process 16652 exited due to signal 6
    Mar 30 21:38:20 squid[7728]: Squid Parent: child process 16658 started
    Mar 30 21:38:21 squid[16658]: The url_rewriter helpers are crashing too rapidly, need help!
    Mar 30 21:38:21 kernel: pid 16658 (squid), uid 62: exited on signal 6
    Mar 30 21:38:21 squid[7728]: Squid Parent: child process 16658 exited due to signal 6
    Mar 30 21:38:24 squid[7728]: Squid Parent: child process 16678 started
    Mar 30 21:38:24 squid[16678]: The url_rewriter helpers are crashing too rapidly, need help!
    Mar 30 21:38:24 kernel: pid 16678 (squid), uid 62: exited on signal 6
    Mar 30 21:38:24 squid[7728]: Squid Parent: child process 16678 exited due to signal 6
    Mar 30 21:38:24 squid[7728]: Exiting due to repeated, frequent failures

    0
  • A

    In the SQUID Package i've only this setting and transparent proxy:

    redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf;redirector_bypass on;redirect_children 3

    and this is the squidGuard.conf

    
# ============================================================
# SquidGuard configuration file
# This file generated automaticly with SquidGuard configurator
# (C)2006 Serg Dvoriancev
# email: dv_serg@mail.ru
# ============================================================

logdir /var/squidGuard/log
dbhome /var/db/squidGuard

# Url BlackList
dest URL_Blacklist {
        domainlist URL_Blacklist/domains
        urllist URL_Blacklist/urls
        redirect http://192.168.1.1:80/sgerror.php?url=403%20La%20visione%20dei%
20video%20non%20e%27%20permessa&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u
}

#
rew safesearch {
        s@(google\..*/search?.*q=.*)@\1\&safe=active@i
        s@(google\..*/images.*q=.*)@\1\&safe=active@i
        s@(google\..*/groups.*q=.*)@\1\&safe=active@i
        s@(google\..*/news.*q=.*)@\1\&safe=active@i
        s@(yandex\..*/yandsearch?.*text=.*)@\1\&fyandex=1@i
        s@(search\.yahoo\..*/search.*p=.*)@\1\&vm=r&v=1@i
        s@(search\.live\..*/.*q=.*)@\1\&adlt=strict@i
        s@(search\.msn\..*/.*q=.*)@\1\&adlt=strict@i
        s@(\.bing\..*/.*q=.*)@\1\&adlt=strict@i
}

#
acl  {
        #
        default  {
                pass URL_Blacklist all
                redirect http://192.168.1.1:80/sgerror.php?url=403%20&a=%a&n=%n&
i=%i&s=%s&t=%t&u=%u
        }
}
dest URL_Blacklist {
        domainlist URL_Blacklist/domains
        urllist URL_Blacklist/urls
        redirect http://192.168.1.1:80/sgerror.php?url=403%20La%20visione%20dei%20video%20no
n%20e%27%20permessa&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u
}

#
rew safesearch {
        s@(google\..*/search?.*q=.*)@\1\&safe=active@i
        s@(google\..*/images.*q=.*)@\1\&safe=active@i
        s@(google\..*/groups.*q=.*)@\1\&safe=active@i
        s@(google\..*/news.*q=.*)@\1\&safe=active@i
        s@(yandex\..*/yandsearch?.*text=.*)@\1\&fyandex=1@i
        s@(search\.yahoo\..*/search.*p=.*)@\1\&vm=r&v=1@i
        s@(search\.live\..*/.*q=.*)@\1\&adlt=strict@i
        s@(search\.msn\..*/.*q=.*)@\1\&adlt=strict@i
        s@(\.bing\..*/.*q=.*)@\1\&adlt=strict@i
}

#
acl  {
        #
        default  {
                pass URL_Blacklist all
                redirect http://192.168.1.1:80/sgerror.php?url=403%20&a=%a&n=%n&i=%i&s=%s&t=
%t&u=%u
        }
}

    In the logs, there aren't any reference to the problem…

    Mar 30 15:41:23 	squid[59702]: Squid Parent: child process 59894 exited due to signal 6
Mar 30 15:41:23 	kernel: pid 59894 (squid), uid 62: exited on signal 6
Mar 30 15:41:23 	squid[59894]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:41:23 	squid[59702]: Squid Parent: child process 59894 started
Mar 30 15:41:22 	check_reload_status: reloading filter
Mar 30 15:41:22 	php: /pkg_edit.php: Reloading Squid for configuration sync
Mar 30 15:41:20 	squid[59702]: Squid Parent: child process 59704 exited due to signal 6
Mar 30 15:41:20 	kernel: pid 59704 (squid), uid 62: exited on signal 6
Mar 30 15:41:20 	squid[59704]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:41:19 	squid[59702]: Squid Parent: child process 59704 started
Mar 30 15:41:19 	php: /pkg_edit.php: Starting Squid
Mar 30 15:41:01 	squid[59460]: Exiting due to repeated, frequent failures
Mar 30 15:41:01 	squid[59460]: Squid Parent: child process 59614 exited due to signal 6
Mar 30 15:41:01 	kernel: pid 59614 (squid), uid 62: exited on signal 6
Mar 30 15:41:01 	squid[59614]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:41:00 	squid[59460]: Squid Parent: child process 59614 started
Mar 30 15:40:57 	squid[59460]: Squid Parent: child process 59607 exited due to signal 6
Mar 30 15:40:57 	kernel: pid 59607 (squid), uid 62: exited on signal 6
Mar 30 15:40:57 	squid[59607]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:40:57 	squid[59460]: Squid Parent: child process 59607 started
Mar 30 15:40:54 	squid[59460]: Squid Parent: child process 59601 exited due to signal 6
Mar 30 15:40:54 	kernel: pid 59601 (squid), uid 62: exited on signal 6
Mar 30 15:40:54 	squid[59601]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:40:54 	squid[59460]: Squid Parent: child process 59601 started
Mar 30 15:40:51 	check_reload_status: reloading filter
Mar 30 15:40:51 	squid[59460]: Squid Parent: child process 59518 exited due to signal 6
Mar 30 15:40:51 	kernel: pid 59518 (squid), uid 62: exited on signal 6
Mar 30 15:40:51 	squid[59518]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:40:51 	squid[59460]: Squid Parent: child process 59518 started
Mar 30 15:40:47 	squid[59460]: Squid Parent: child process 59463 exited due to signal 6
Mar 30 15:40:47 	kernel: pid 59463 (squid), uid 62: exited on signal 6
Mar 30 15:40:47 	squid[59463]: The url_rewriter helpers are crashing too rapidly, need help!
Mar 30 15:40:47 	squid[59460]: Squid Parent: child process 59463 started
Mar 30 15:40:47 	php: /pkg_edit.php: Starting Squid
    0
  • J

    here is my proxy filter log

    Do not edit manually !

    http_port 192.168.143.1:3128
    http_port 127.0.0.1:80 transparent
    icp_port 0

    pid_filename /var/run/squid.pid
    cache_effective_user proxy
    cache_effective_group proxy
    error_directory /usr/local/etc/squid/errors/English
    icon_directory /usr/local/etc/squid/icons
    visible_hostname GameLab
    cache_mgr GameLab@odiongan.net
    access_log /dev/null
    cache_log /var/squid/logs/cache.log
    cache_store_log none
    logfile_rotate 2
    shutdown_lifetime 3 seconds

    Allow local network(s) on interface(s)

    acl localnet src  192.168.143.0/255.255.255.0
    uri_whitespace strip

    cache_mem 2000 MB
    maximum_object_size_in_memory 32 KB
    memory_replacement_policy heap GDSF
    cache_replacement_policy heap LFUDA
    cache_dir ufs /var/squid/cache 100000 16 256
    minimum_object_size 0 KB
    maximum_object_size 200000 KB
    offline_mode off
    cache_swap_low 90
    cache_swap_high 95

    No redirector configured

    Setup some default acls

    acl all src 0.0.0.0/0.0.0.0
    acl localhost src 127.0.0.1/255.255.255.255
    acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901  3128 1025-65535
    acl sslports port 443 563 
    acl manager proto cache_object
    acl purge method PURGE
    acl connect method CONNECT
    acl dynamic urlpath_regex cgi-bin ?
    acl blacklist dstdom_regex -i '/var/squid/acl/blacklist.acl'
    cache deny dynamic
    http_access allow manager localhost

    http_access deny manager
    http_access allow purge localhost
    http_access deny purge
    http_access deny !safeports
    http_access deny CONNECT !sslports

    Always allow localhost connections

    http_access allow localhost

    request_body_max_size 0 KB
    reply_body_max_size 0 deny all
    delay_pools 1
    delay_class 1 2
    delay_parameters 1 -1/-1 -1/-1
    delay_initial_bucket_level 100
    delay_access 1 allow all

    Block access to blacklist domains

    http_access deny blacklist

    Setup allowed acls

    Allow local network(s) on interface(s)

    http_access allow localnet

    Default block all to be sure

    http_access deny all

    0
  • D

    What a pfSense installation type you use (nanoBSD / HDD installation)

    0
  • A

    I was having the same problem.  I updated to 2.0 rc1, reinstalled packages, then rebooted.  Now squidguard is running.

    0

  • Here are my two cents ;-)

    The problem it's when squid tries to run the squidguard slaves:
    [root@pfsense:/root]# /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf
    /libexec/ld-elf.so.1: Shared object "libldap-2.4.so.8" not found, required by "squidGuard"

    So we need the libldap-2.4.so.8

    I did a pkg_info and I saw two openldap packages, I pkg_deleted both of them and installed the last package on http://files.pfsense.org/packages/7/All/

    pkg_add -r http://files.pfsense.org/packages/7/All/openldap-client-2.4.23.tbz

    But it seems this package doesn't installs the libldap-2.4.so.8, it installs libldap-2.4.so.7 so I created a symlink:

    [root@pfsense:~]# cd /usr/local/lib
    [root@pfsense:~]# ln -s libldap-2.4.so.7 libldap-2.4.so.8

    [root@pfsense:/usr/local/lib]# ls -la libldap*
    lrwxr-xr-x 1 root wheel     16 Feb  2  2007 libldap-2.3.so -> libldap-2.3.so.2
    -rw-r–r-- 1 root wheel 215171 Feb  2  2007 libldap-2.3.so.2
    lrwxr-xr-x 1 root wheel     16 Jul 25  2010 libldap-2.4.so -> libldap-2.4.so.7
    -rw-r--r-- 1 root wheel 279350 Jul 25  2010 libldap-2.4.so.7
    lrwxr-xr-x 1 root wheel     16 Mar 30 17:49 libldap-2.4.so.8 -> libldap-2.4.so.7
    -rw-r–r-- 1 root wheel 334522 Jul 25  2010 libldap.a
    -rw-r--r-- 1 root wheel    984 Jul 25  2010 libldap.la
    lrwxr-xr-x 1 root wheel     16 Jul 25  2010 libldap.so -> libldap-2.4.so.7
    lrwxr-xr-x 1 root wheel     18 Feb  2  2007 libldap_r-2.3.so -> libldap_r-2.3.so.2
    -rw-r--r-- 1 root wheel 236440 Feb  2  2007 libldap_r-2.3.so.2
    lrwxr-xr-x 1 root wheel     18 Jul 25  2010 libldap_r-2.4.so -> libldap_r-2.4.so.7
    -rw-r--r-- 1 root wheel 301942 Jul 25  2010 libldap_r-2.4.so.7
    -rw-r--r-- 1 root wheel 369342 Jul 25  2010 libldap_r.a
    -rw-r--r-- 1 root wheel   1016 Jul 25  2010 libldap_r.la
    lrwxr-xr-x 1 root wheel     18 Jul 25  2010 libldap_r.so -> libldap_r-2.4.so.7

    Please give feedback, and if someone knows where to download the tbz with the correct library leave a link.

    Regards from Spain.

    0
  • O

    i try

    pkg_add -r ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7-stable/Latest/openldap24-client.tbz

    and seems it working ok.

    This package is version 2.4.24 and libldap-2.4.so.8 is instaled.

    0
  • J

    thanks guys..you are all a big help..it worked already…

    i installed
    http://files.pfsense.org/packages/7/All/openldap-sasl-client-2.4.25_1.tbz

    squidguard is up now..thanks..

    0

  • Perfect. The 2.4.25 package was not on the server yesterday. Now it installs the libldap-2.4.so.8.

    Thanks guys.

    0
  • A

    @joviscomp:

    thanks guys..you are all a big help..it worked already…

    i installed
    http://files.pfsense.org/packages/7/All/openldap-sasl-client-2.4.25_1.tbz

    squidguard is up now..thanks..

    I've installed them, but squidguard not start, now i've test it with symlink:

    ln -s libldap-2.4.so.7 libldap-2.4.so.8

    now it works…

    0

  • andreadg88: Very strange, because the 2.4.25 seems to install the correct library.

    Paste here the result of:

    pkg_info
    ls -la /usr/local/lib/libldap*

    0
  • A

    here the output of shell…

    it's very strange  ???

    
# pkg_info
cyrus-sasl-2.1.23   RFC 2222 SASL (Simple Authentication and Security Layer)
cyrus-sasl-2.1.23_3 RFC 2222 SASL (Simple Authentication and Security Layer)
db3-3.3.11_3,1      The Berkeley DB package, revision 3.3
gd-2.0.35,1         A graphics library for fast creation of images
jpeg-6b_4           IJG's jpeg compression utilities
lightsquid-1.7.1_1  A light and fast web based squid proxy traffic analyser
openldap-sasl-client-2.4.25_1 Open source LDAP client implementation with SASL2 support
p5-GD-2.39          A perl5 interface to Gd Graphics Library version2
perl-5.10.1_3       Practical Extraction and Report Language
perl-5.8.8_1        Practical Extraction and Report Language
squid-2.7.9         HTTP Caching Proxy
squidGuard-1.4_3    A fast redirector for squid
squid_radius_auth-1.10 RADIUS authenticator for squid proxy 2.5 and later


    
# ls -la /usr/local/lib/libldap*
lrwxr-xr-x  1 root  wheel      16 Mar 29 21:37 /usr/local/lib/libldap-2.4.so -> libldap-2.4.so.8
-rwxr-xr-x  1 root  wheel  264819 Jan  9  2009 /usr/local/lib/libldap-2.4.so.3
-rw-r--r--  1 root  wheel  299327 Mar 29 21:37 /usr/local/lib/libldap-2.4.so.8
-rw-r--r--  1 root  wheel  360528 Mar 29 21:37 /usr/local/lib/libldap.a
-rw-r--r--  1 root  wheel    1006 Mar 29 21:37 /usr/local/lib/libldap.la
lrwxr-xr-x  1 root  wheel      16 Mar 29 21:37 /usr/local/lib/libldap.so -> libldap-2.4.so.8
lrwxr-xr-x  1 root  wheel      18 Mar 29 21:37 /usr/local/lib/libldap_r-2.4.so -> libldap_r-2.4.so.8
-rw-r--r--  1 root  wheel  327982 Mar 29 21:37 /usr/local/lib/libldap_r-2.4.so.8
-rw-r--r--  1 root  wheel  397856 Mar 29 21:37 /usr/local/lib/libldap_r.a
-rw-r--r--  1 root  wheel    1029 Mar 29 21:37 /usr/local/lib/libldap_r.la
lrwxr-xr-x  1 root  wheel      18 Mar 29 21:37 /usr/local/lib/libldap_r.so -> libldap_r-2.4.so.8
    0

  • Try to run the squidguard manually from the shell and paste here the error it should show to you:

    /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf

    0
  • R

    I had the same problem after updating squidGuard, and solved it with this:

    
pkg_delete openldap-client\*
pkg_add -r ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7-stable/Latest/openldap24-client.tbz

    The dependencies should be updated or something.  This shouldn't happen when upgrading a package on a stable version.

    0
  • Rebel Alliance Developer Netgate

    The dependencies were updated, the problem is that some people who already had the older ldap version need to reinstall both squid and squidGuard, and occasionally need to pkg_delete squid* openldap* and then reinstall.

    OpenLDAP had a shared library version bump.

    0
  • R

    Thanks, good to know.  I had only updated squidGuard and nothing else.

    0
Log in to reply
 

Products

Services

Support

News

Resources

Company

Our Mission

We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

Subscribe to our Newsletter

Product information, software announcements, and special offers. See our newsletter archive for past announcements.

© 2020 Rubicon Communications, LLC | Privacy Policy