Squid3 - New GUI with sync, normal and reverse proxy

[jimp]

No, the config and startup script should be manually pointing it to the right place, we're not hacking up configure options, we're trying to keep the builds automated. :-)
(And it should really be /var/etc/squid not /usr/local/etc/squid …)

# grep WITH /pbi-build/modules/www/squid31/pbi.conf      
MAKEOPTS="WITHOUT_X11=true WITH_SQUID_KERB_AUTH=true WITH_SQUID_LDAP_AUTH=true WITH_SQUID_NIS_AUTH=true WITH_SQUID_SASL_AUTH=true WITH_SQUID_IPV6=true WITH_SQUID_DELAY_POOLS=true WITH_SQUID_SNMP=true WITH_SQUID_SSL=true WITH_SQUID_SSL_CRTD=true WITH_SQUID_PINGER=true WITHOUT_SQUID_DNS_HELPER=true WITH_SQUID_HTCP=true WITH_SQUID_VIA_DB=true WITH_SQUID_CACHE_DIGESTS=true WITHOUT_SQUID_WCCP=true WITH_SQUID_WCCPV2=true WITHOUT_SQUID_STRICT_HTTP=true WITH_SQUID_IDENT=true WITH_SQUID_REFERER_LOG=true WITH_SQUID_USERAGENT_LOG=true WITH_SQUID_ARP_ACL=true WITH_SQUID_IPFW=true WITH_SQUID_PF=true WITHOUT_SQUID_IPFILTER=true WITH_SQUID_FOLLOW_XFF=true WITHOUT_SQUID_ECAP=true WITHOUT_SQUID_ICAP=true WITHOUT_SQUID_ESI=true WITH_SQUID_AUFS=true WITHOUT_SQUID_COSS=true WITHOUT_SQUID_KQUEUE=true WITH_SQUID_LARGEFILE=true WITHOUT_SQUID_STACKTRACES=true WITHOUT_SQUID_DEBUG=true"

[tgbauer]

I just tried to install the latest squid3 (3.1.20 pkg 2.0.5_2) on pfSense 2.0.1-RELEASE (i386) after uninstalling the prior version.
When squid was started it would exit with the following error:
/libexec/ld-elf.so.1: Shared object "libmd5.so.1" not found, required by "squid"

pkg_add -r libwww
failed because freeBSD 8.1 has been moved to "Archive"
I was able to install the package using:

pkg_add -r http://ftp2.freebsd.org/pub/FreeBSD-Archive/ports/i386/packages-8.1-release/www/libwww-5.4.0_4.tbz

I'm sure others may have a better way to get around this problem, but this is what worked for me.

[Cino]

I agree with you… I may try to hack my install to see if I can get it to point to /var/etc/squid but not sure on how to have it create the folders and such(other then by hand)... Never really looked at the installation part of the inc & xml files.

Anything in the build log saying its missing something or errors?

Take a look at this post, http://forum.pfsense.org/index.php/topic,44735.msg252767.html#msg252767

I did a stare and compare and it looks like there are options not being built.

[jimp]

OK, I just uploaded a new set of squid3 binaries, can someone upgrade and see if the options are there now?

I also added libwww as a manual dependency to install for 2.0.x so it should hopefully also fix the libmd5 bit.

[Cino]

@jimp:

OK, I just uploaded a new set of squid3 binaries, can someone upgrade and see if the options are there now?

I also added libwww as a manual dependency to install for 2.0.x so it should hopefully also fix the libmd5 bit.

I'll give it a shot in a few minutes… Btw, should keep posting my findings on this topic or here http://forum.pfsense.org/index.php/topic,50493.0.html ? Don't like having more then 1 thread on the same issue. I posted here because this was the official topic for squid3

EDIT:  I gave it try, same issue.. Options are not there... I have noticed that I can do a re-install with squid. It doesn't bring down the pbi file. I have to uninstall then install for it to download the pbi package.

[jimp]

Other thread is probably better, I lost track of which thread it was and there were similar posts in each, other has a more accurate subject and relevance.

[nutt318]

Can anyone provide some help with the Reverse Proxy?

My posts might have been overlooked in a couple pages back.

Does anyone else have the Reverse Proxy working?

[jimp]

nutt318 - perhaps you should start a new thread with a separate subject, it will get more attention that way.

[nesense]

Hi :), been testing squid3 on embedded and full version 2.0.1 and I noticed its not caching items, /var/squid/cache dir remains the same size (works fine on full but not on nanobsd)

BTW, I think COSS filesystem is very useful, specially for SSD/flash storage and embedded in general, lowers wear on cells, its best used mixed with AUFS, with COSS caching smaller objects and the rest for AUFS.

Thank you  :)

[jvorhees]

Hello,
and first thanks for the great work on this mandatory feature in pfsense (also mandatory in serious network :p)

It seems however that we are plenty to have the problem that the reverse setup of squid send traffic always to the default site defined on general tab (https talking…)
I've tried with empty and * on URI field, no luck.

My setup is:

WORLD ---- PFSENSE/SQUID ---- extranet1.mydomain.com
                                        |
                                          -- extranet2.mydomain.com

I've also tried to replace url_regex with dstdomain, squid won't start.

In the log i've:
… X.X.X.X TCP_MISS/404 588 GET https://extranet2.mydomain.com/ - FIRST_UP_PARENT/Extranet2 text/html

The only thing i could do to make it work is to change default site to send traffic to other host (so i think firewalling and basic syntax for my squid setup is OK)

Any ideas ?

Thanks again for the all work !!!

[marcelloc]

I did some update to the package without version change, please try to reinstall or uninstall/reinstall and test again.

att,
Marcello Coutinho

[dhipo]

i want work on squidguard sync too .. can you send me way to do this …like squid ?

[marcelloc]

@dhipo:

i want work on squidguard sync too .. can you send me way to do this …like squid ?

You will need to code it on squidguard inc file and create/or use squid_sync xml file.

If you don't know how pfsense gui works, it will be not that easy.

take a look on ipguard package files, it's a small package with sync code.

att,
Marcello Coutinho

[dhipo]

obrigado Marcello..

onde vc está no Br ?

[marcelloc]

@dhipo:

onde vc está no Br ?

Take a look on my profile and on portuguese forum ;)

[_igor_]

seems that squid doesn't accept any entry in "custom options, i get errors:

php: /pkg_edit.php: The command '/usr/local/sbin/squid -k reconfigure -f /usr/local/etc/squid/squid.conf' returned exit code '1', the output was 'FATAL: Bungled squid.conf line 83: http_port 8080 transparent; Squid Cache (Version 3.1.20): Terminated abnormally. CPU Usage: 0.018 seconds = 0.009 user + 0.009 sys Maximum Resident Size: 5176 KB Page faults with physical i/o: 0'

I tried with this setup here: http://forum.pfsense.org/index.php/topic,42413.0.html.

I stripped the ident-entries, because they don't work too :(

[marcelloc]

@_igor_:

seems that squid doesn't accept any entry in "custom options, i get errors:
the output was 'FATAL: Bungled squid.conf line 83: http_port 8080 transparent;

Is it your custom option? http_port 8080 transparent?

[_igor_]

yes it is. But other custom options generate the same kind of errors, so i suppose, custom options don't work here. :(

[marcelloc]

@_igor_:

yes it is.

try ** http_port 8080 intercept** on squid 3.1

[_igor_]

None of any entry works. All entries  result in a "bungled squid config". It doesnt work. :(