Squidguard stops filtering !!!-aghh !!
-
Hi,
I am running pfSense 123 & the current packages, Squid & Squidguard.
For no apparent reason Squidguard stops filtering.
My installation is at home on a 50mb. cable connection (Virgin Media) and is primarily there to protect the grandchildren etc.
This problem makes this solution as useful as a chocolate teapot!
I have read on the forum of others who have experienced this, but I have not fully understood what the "fix" is.
Is there one?
Will a rebuild using the RC fix this?
If I can't find a fix soon I will have to try an alternative Firewall/UTM.
Any help will be much appreciated. -
Hi,
I am running pfSense 123 & the current packages, Squid & Squidguard.
For no apparent reason Squidguard stops filtering.
My installation is at home on a 50mb. cable connection (Virgin Media) and is primarily there to protect the grandchildren etc.
This problem makes this solution as useful as a chocolate teapot!
I have read on the forum of others who have experienced this, but I have not fully understood what the "fix" is.
Is there one?
Will a rebuild using the RC fix this?
If I can't find a fix soon I will have to try an alternative Firewall/UTM.
Any help will be much appreciated.Any log exists?
-
System Log
May 23 04:59:05 kernel: sio0: [FILTER]
May 23 04:59:05 kernel: sio1: configured irq 3 not in bitmap of probed irqs 0
May 23 04:59:05 kernel: sio1: port may not be enabled
May 23 04:59:05 kernel: vga0: <generic isa="" vga="">at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
May 23 04:59:05 kernel: unknown: <pnp0303>can't assign resources (port)
May 23 04:59:05 kernel: speaker0: <pc speaker="">at port 0x61 pnpid PNP0800 on isa0
May 23 04:59:05 kernel: unknown: <pnp0c01>can't assign resources (memory)
May 23 04:59:05 kernel: Timecounter "TSC" frequency 1596045684 Hz quality 800
May 23 04:59:05 kernel: Timecounters tick every 1.000 msec
May 23 04:59:05 kernel: IPsec: Initialized Security Association Processing.
May 23 04:59:05 kernel: ad0: 57231MB <fujitsu mhy2060bh="" 0000000b="">at ata0-master SATA150
May 23 04:59:05 kernel: Trying to mount root from ufs:/dev/ad0s1a
May 23 04:59:06 kernel: pflog0: promiscuous mode enabled
May 23 04:59:15 php: : SQUID is installed but not started. Not installing "nat" rules.
May 23 04:59:15 php: : SQUID is installed but not started. Not installing "filter" rules.
May 23 04:59:15 pftpx[460]: listening on 127.0.0.1 port 8021
May 23 04:59:15 pftpx[460]: listening on 127.0.0.1 port 8021
May 23 04:59:17 dhcpd: Internet Systems Consortium DHCP Server V3.0.7
May 23 04:59:17 dhcpd: Copyright 2004-2008 Internet Systems Consortium.
May 23 04:59:17 dhcpd: All rights reserved.
May 23 04:59:17 dhcpd: For info, please visit http://www.isc.org/sw/dhcp/
May 23 04:59:17 dnsmasq[561]: started, version 2.45 cachesize 150
May 23 04:59:17 dnsmasq[561]: compile time options: IPv6 GNU-getopt BSD-bridge ISC-leasefile no-DBus no-I18N TFTP
May 23 04:59:17 dnsmasq[561]: reading /etc/resolv.conf
May 23 04:59:17 dnsmasq[561]: using nameserver 194.168.8.100#53
May 23 04:59:17 dnsmasq[561]: using nameserver 194.168.4.100#53
May 23 04:59:17 dnsmasq[561]: read /etc/hosts - 2 addresses
May 23 04:59:19 php: : SQUID is installed but not started. Not installing "nat" rules.
May 23 04:59:19 php: : SQUID is installed but not started. Not installing "filter" rules.
May 23 04:59:20 php: : Creating rrd update script
May 23 04:59:20 dhcpd: Internet Systems Consortium DHCP Server V3.0.7
May 23 04:59:20 dhcpd: Copyright 2004-2008 Internet Systems Consortium.
May 23 04:59:20 dhcpd: All rights reserved.
May 23 04:59:20 dhcpd: For info, please visit http://www.isc.org/sw/dhcp/
May 23 04:59:21 php: : Resyncing configuration for all packages.
May 23 04:59:21 php: : XML error: not well-formed (invalid token) at line 1
May 23 04:59:22 php: : Reloading Squid for configuration sync
May 23 04:59:26 php: : Reloading Squid for configuration sync
May 23 04:59:26 squid[1002]: Squid Parent: child process 1007 started
May 23 04:59:26 check_reload_status: check_reload_status is starting
May 23 04:59:26 check_reload_status: rc.newwanip starting
May 23 04:59:28 login: login on ttyv0 as root
May 23 04:59:28 php: : Informational: rc.newwanip is starting fxp1.
May 23 04:59:29 php: : rc.newwanip working with (IP address: 192.168.0.2) (interface: wan) (interface real: fxp1).
May 23 04:59:31 Squid_Alarm[1090]: Squid has exited. Reconfiguring filter.
May 23 04:59:31 Squid_Alarm[1092]: Attempting restart…
May 23 04:59:31 squid[1099]: Squid Parent: child process 1102 started
May 23 04:59:34 Squid_Alarm[1108]: Reconfiguring filter…
May 23 04:59:35 Squid_Alarm[1184]: Squid has resumed. Reconfiguring filter.
May 23 17:35:57 kernel: arplookup 10.159.151.232 failed: host is not on local network</fujitsu></pnp0c01></pc></pnp0303></generic> -
I am taking a guess that this log is of no use.
Meanwhile, I have found 4 items from www.smallnetbuilder.com (Build your own utm with pfsense) that are a walk through of installing pfSense.
I am going to rip down my current installation and start over using their articles as guidance.
Please close this thread now.Schucks… the glory of being a newbie...
Rgds.