Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Squid3 - New GUI with sync, normal and reverse proxy

    Cache/Proxy
    104
    428
    470.9k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      Nachtfalke
      last edited by

      I installed squid2 package
      after that squidguard
      and then squid3

      when click on "save" on squidguard page this line appears in squid3 integration box:

      çb­ç-¦º ­©¿ºÊÿ–‡—öâŸû*º'F¹ªÝsû¬¯ùhq©z×?²«¢tkš­ßìªèæ«uÊ'~·Š·œ¶ŠÛÊ–¬²‰ëyØ«yË\†)]­é÷
      
      1 Reply Last reply Reply Quote 0
      • T
        Tikimotel
        last edited by

        To "temporary" circumvent the integration gibberish, manually edit the custom options.
        Integrations

        (empty the edit box)

        Custom
        Options

        quick_abort_pct 70
        range_offset_limit 0
        redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf
        redirector_bypass on
        redirect_children 8
        

        (press save)

        Squid should restart and activate 8 squidquard redirectors (temporary fix, because changing any setting in the proxy filter menu's will result in gibberish again)
        Might also change at midnight because of squidguard crontab stuff.

        1 Reply Last reply Reply Quote 0
        • N
          Nachtfalke
          last edited by

          @Tikimotel:

          This helped and squidguard started (service). Couldn't test more.

          redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf
          redirector_bypass on
          redirect_children 8
          
          1 Reply Last reply Reply Quote 0
          • DonnyD
            Donny
            last edited by

            @marcelloc:

            I've just pushed squid_reverse.inc fix.

            Upgrade to squid3 pkg v 2.0.1 and see if it fixes inc errors.

            SOLVED!, The Squid3 pkg v 2.0.1 has fixed this Waring: Invalid argument supplied for foreach() in /usr/local/pkg/squid_reverse.inc on line 103 and 146.

            Next step I just want to be sure, I will try to clean install pfSense again in my testing machine, after that  > First install: Dansguardian > Second install: Squid 3.

            I will inform you later, Thank u Marcelloc.

            1 Reply Last reply Reply Quote 0
            • marcellocM
              marcelloc
              last edited by

              @Nachtfalke:

              I installed squid2 package
              after that squidguard
              and then squid3

              when click on "save" on squidguard page this line appears in squid3 integration box:

              çb­ç-¦º ­©¿ºÊÿ–‡—öâŸû*º'F¹ªÝsû¬¯ùhq©z×?²«¢tkš­ßìªèæ«uÊ'~·Š·œ¶ŠÛÊ–¬²‰ëyØ«yË\†)]­é÷
              

              Check if I forgot to remove base64 info from custom_option on squid.XML

              Custom_option should not have it but custom_option_squid3 should have.

              You do not need squid2 package before squidguard.

              I'm not at home right now so I could check this only tonight.

              Treinamentos de Elite: http://sys-squad.com

              Help a community developer! ;D

              1 Reply Last reply Reply Quote 0
              • marcellocM
                marcelloc
                last edited by

                @Donny:

                Next step I just want to be sure, I will try to clean install pfSense again in my testing machine, after that  > First install: Dansguardian > Second install: Squid 3.

                Yes  :)

                Treinamentos de Elite: http://sys-squad.com

                Help a community developer! ;D

                1 Reply Last reply Reply Quote 0
                • N
                  Nachtfalke
                  last edited by

                  @marcelloc:

                  @Nachtfalke:

                  I installed squid2 package
                  after that squidguard
                  and then squid3

                  when click on "save" on squidguard page this line appears in squid3 integration box:

                  çb­ç-¦º ­©¿ºÊÿ–‡—öâŸû*º'F¹ªÝsû¬¯ùhq©z×?²«¢tkš­ßìªèæ«uÊ'~·Š·œ¶ŠÛÊ–¬²‰ëyØ«yË\†)]­é÷
                  

                  Check if I forgot to remove base64 info from custom_option on squid.XML

                  Custom_option should not have it but custom_option_squid3 should have.

                  You do not need squid2 package before squidguard.

                  I'm not at home right now so I could check this only tonight.

                  Removing the "encode base64" from squid.xml worked. Now the command is visible in the text box BUT the command from this box is not copied into squid.conf file. So it does not take effect.

                  Don't hurry up and don't stress with that fact. It is sunday and you should have a free day and a nice weekend, too :-)

                  1 Reply Last reply Reply Quote 0
                  • C
                    ccesario
                    last edited by

                    Hi guys,

                    I'm testing new squid3 package, and after install it, I'm having a lot errors in http connections, squid show me a lot 'TCP_MISS/503'. This happen often in forms posts, so I need re-send form ou press F5.
                    I tested exhaustively the squid-2.7.9_1 + squidGuard and problem no happen. So I too tested exhaustively the squid3 + SquidGuard, and I give this problem.

                    All squid versions have the same config. And this problem only occurs in 'Transparent Mode'

                    Somebdoy can please test it and report the results?!

                    Thanks

                    Carlos

                    1 Reply Last reply Reply Quote 0
                    • M
                      mhab12
                      last edited by

                      Just in case others were seeing performance issues, I saw my bandwidth drop to <5mbps after installing Squid3, however changing from AUFS to diskd brought the bandwidth backup up to approximately 60mbps where it should be.

                      1 Reply Last reply Reply Quote 0
                      • DonnyD
                        Donny
                        last edited by

                        @marcelloc:

                        @Donny:

                        Next step I just want to be sure, I will try to clean install pfSense again in my testing machine, after that  > First install: Dansguardian > Second install: Squid 3.

                        Yes  :)

                        After clean install pfSense, I try first to install Dansguardian. I got the same result as I told you before. Dansguardian does not appear on services menu. So I wait a few minute and then try to refresh pfSense WebGUI and not thing changed. The last final "fantasy" I reboot pfSense and it does not appear again. (The final "fantasy" I just only make a joke because today is Sunday, you should be relax.). Then the way I have to do before I am going to install Squid3 is reinstall Dansguardian and finally Dansquardian is appear.

                        The next step I am going to install Squid3

                        Just let you know, Marcelloc.

                        Danguardian_not_appear.png
                        Danguardian_not_appear.png_thumb

                        1 Reply Last reply Reply Quote 0
                        • marcellocM
                          marcelloc
                          last edited by

                          Before using disk cache,  I suggest you to enable softupdates on /usr and /var. The performance difference is huge.

                          Treinamentos de Elite: http://sys-squad.com

                          Help a community developer! ;D

                          1 Reply Last reply Reply Quote 0
                          • DonnyD
                            Donny
                            last edited by

                            Now Squid3 and Dansguardian is working. I don't find any error yet. The next step I will trying to configure firewall, NAT with HTTP and HTTPS for how Squid3 and Dansguardian work together.

                            1 Reply Last reply Reply Quote 0
                            • H
                              harish
                              last edited by

                              error is gone but could not start squidguard, i rechecked with  reinstalling the squidguard, but fails to start.

                              1 Reply Last reply Reply Quote 0
                              • N
                                Nachtfalke
                                last edited by

                                @harish:

                                error is gone but could not start squidguard, i rechecked with  reinstalling the squidguard, but fails to start.

                                As far as I can say that at the moment the "Integrations" box isn't working. So put the commands squidguard creates manually in "custom options":

                                redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf
                                redirector_bypass on
                                redirect_children 8
                                
                                1 Reply Last reply Reply Quote 0
                                • marcellocM
                                  marcelloc
                                  last edited by

                                  Just updated squid3 package to version 2.0.2 to fix integration erros.

                                  Please update,test and feedback  :)

                                  Treinamentos de Elite: http://sys-squad.com

                                  Help a community developer! ;D

                                  1 Reply Last reply Reply Quote 0
                                  • H
                                    harish
                                    last edited by

                                    yes now its working after custom option.

                                    1 Reply Last reply Reply Quote 0
                                    • marcellocM
                                      marcelloc
                                      last edited by

                                      Hi all,

                                      After looking for some options o squid-wiki, I've included dynamic update options to cache tab on pkg v 2.0.3

                                      dynamic_content.jpg
                                      dynamic_content.jpg_thumb

                                      Treinamentos de Elite: http://sys-squad.com

                                      Help a community developer! ;D

                                      1 Reply Last reply Reply Quote 0
                                      • N
                                        Nachtfalke
                                        last edited by

                                        @marcelloc:

                                        Hi all,

                                        After looking for some options o squid-wiki, I've included dynamic update options to cache tab on pkg v 2.0.3

                                        Setting the refresh_pattern to -1 is not a really good solution because it always downloads the file even if the user aborted it. This causes that squid downloads most of the time on its own which causes more traffic usage for squid as it saves. it is better to set some values according to the update size:

                                        
                                        Finish transfer if less than x KB remaining: 102400
                                        Abort transfer if more than x KB remaining: 102400
                                        Finish transfer if more than x % finished: 60
                                        
                                        

                                        These are the same values you can set in squid - traffic mangt.
                                        What is happening if I enable squid windows update and set different values on the mngt tab ?

                                        What do you use as refresh pattern for the windows updates ? I am using these for squid2

                                        
                                        refresh_pattern -i .*microsoft\.com/.*\.(cab|exe|msi|msp) 259200 100% 259200 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-private;
                                        refresh_pattern -i .*windowsupdate\.com/.*\.(cab|exe|msi|msp) 259200 100% 259200 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-private;
                                        
                                        

                                        Thanks :-)

                                        1 Reply Last reply Reply Quote 0
                                        • C
                                          Cino
                                          last edited by

                                          @Marcelloc Nice work man!!! I do have a request/wish for this… Would it be possible to setup the GUI to have squid-reserve run as a separate process? This would allow it to have its own options and the log file could be separate. I created a separate conf file and added some code to the squid.inc so it would start with squid processes on my box. Basically where it starts/stop the service and creates the squid.sh file, i added another like to include my squid-reverse.conf.

                                          just a thought when you have "free" time...

                                          1 Reply Last reply Reply Quote 0
                                          • marcellocM
                                            marcelloc
                                            last edited by

                                            @Nachtfalke:

                                            Setting the refresh_pattern to -1 is not a really good solution because it always downloads the file even if the user aborted it. This causes that squid downloads most of the time on its own which causes more traffic usage for squid as it saves. it is better to set some values according to the update size:

                                            
                                            Finish transfer if less than x KB remaining: 102400
                                            Abort transfer if more than x KB remaining: 102400
                                            Finish transfer if more than x % finished: 60
                                            
                                            

                                            These are the same values you can set in squid - traffic mangt.
                                            What is happening if I enable squid windows update and set different values on the mngt tab ?

                                            Nothing, I just force range_offset_limit -1 when updates are set, all traffic mgmt are configured by users.

                                            @Nachtfalke:

                                            What do you use as refresh pattern for the windows updates ? I am using these for squid2

                                            
                                            refresh_pattern -i .*microsoft\.com/.*\.(cab|exe|msi|msp) 259200 100% 259200 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-private;
                                            refresh_pattern -i .*windowsupdate\.com/.*\.(cab|exe|msi|msp) 259200 100% 259200 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-private;
                                            
                                            

                                            Just the suggested by wiki

                                            refresh_pattern -i microsoft.com/.*\.(cab|exe|ms[i|u|f]|asf|wm[v|a]|dat|zip) 4320 80% 43200 reload-into-ims
                                            refresh_pattern -i windowsupdate.com/.*\.(cab|exe|ms[i|u|f]|asf|wm[v|a]|dat|zip) 4320 80% 43200 reload-into-ims
                                            refresh_pattern -i my.windowsupdate.website.com/.*\.(cab|exe|ms[i|u|f]|asf|wm[v|a]|dat|zip) 4320 80% 43200 reload-into-ims
                                            

                                            Treinamentos de Elite: http://sys-squad.com

                                            Help a community developer! ;D

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.