Squid3 - New GUI with sync, normal and reverse proxy

hell bomb · Aug 14, 2015, 12:20 AM

Interesting error, while AV is enabled while navigating to most websites (not all websites) I get TAG_NONE/500 Status error. Any suggestions?

SisterOfMercy · Aug 17, 2015, 9:08 PM

@varazir:

How do I add this list http://winhelp2002.mvps.org/hosts.txt to squid3? or do I need squidGuard ?

Wouldn't pfBlockerNG work better in this case?

aGeekhere · Aug 25, 2015, 12:36 PM

whats new in 0.2.9?

S. Kirschner · Aug 25, 2015, 2:27 PM

@aGeekHere:

whats new in 0.2.9?

Hm , its still the same version.

Here are the build options of 0.2.9

Squid Cache: Version 3.4.10
configure options:  '--with-default-user=squid' '--bindir=/usr/local/sbin' '--sbindir=/usr/local/sbin' '--datadir=/usr/local/etc/squid' '--libexecdir=/usr/local/libexec/squid'
 '--localstatedir=/var' '--sysconfdir=/usr/local/etc/squid' '--with-logdir=/var/log/squid' '--with-pidfile=/var/run/squid/squid.pid' '--with-swapdir=/var/squid/cache' '--enable-auth'
 '--enable-build-info' '--enable-loadable-modules' '--enable-removal-policies=lru heap' '--disable-epoll' '--disable-linux-netfilter' '--disable-linux-tproxy' '--disable-translation'
 '--disable-arch-native' '--enable-eui' '--enable-cache-digests' '--enable-delay-pools' '--enable-ecap' '--disable-esi' '--enable-follow-x-forwarded-for' '--enable-htcp'
 '--enable-icap-client' '--enable-icmp' '--enable-ident-lookups' '--enable-ipv6' '--enable-kqueue' '--with-large-files' '--enable-http-violations' '--without-nettle' '--enable-snmp' '--enable-ssl'
 '--enable-ssl-crtd' '--disable-stacktraces' '--disable-ipf-transparent' '--disable-ipfw-transparent' '--enable-pf-transparent' '--with-nat-devpf' '--disable-forw-via-db' '--enable-wccp'
 '--enable-wccpv2' '--enable-auth-basic=DB MSNT MSNT-multi-domain NCSA PAM POP3 RADIUS fake getpwnam LDAP NIS' '--enable-auth-digest=file'
 '--enable-external-acl-helpers=file_userip time_quota unix_group LDAP_group' '--enable-auth-negotiate=kerberos wrapper' '--enable-auth-ntlm=fake smb_lm'
 '--enable-storeio=ufs aufs diskd' '--enable-disk-io=AIO Blocking IpcIo Mmapped DiskThreads DiskDaemon' '--enable-log-daemon-helpers=file' '--enable-url-rewrite-helpers=fake'
 '--enable-storeid-rewrite-helpers=file' '--with-openssl=/usr' '--prefix=/usr/local' '--mandir=/usr/local/man' '--infodir=/usr/local/info/' '--build=amd64-portbld-freebsd10.1' 
'build_alias=amd64-portbld-freebsd10.1' 'CC=cc' 'CFLAGS=-O2 -pipe  -I/usr/local/include -I/usr/local/include -I/usr/include -fstack-protector -DLDAP_DEPRECATED -fno-strict-aliasing'
 'LDFLAGS= -L/usr/local/lib -L/usr/local/lib -pthread -Wl,-rpath,/usr/lib:/usr/local/lib -L/usr/lib -fstack-protector' 'LIBS=' 'CPPFLAGS=' 'CXX=c++'
 'CXXFLAGS=-O2 -pipe -I/usr/local/include -I/usr/local/include -I/usr/include -fstack-protector -DLDAP_DEPRECATED -fno-strict-aliasing  -Wno-unused-private-field' 'CPP=cpp' 'PKG_CONFIG=pkgconf' --enable-ltdl-convenience

aGeekhere · Aug 26, 2015, 3:29 AM

well I updated,all went well, just had to remove the cache after the install or else i get page loading issues.

magicduck · Aug 27, 2015, 10:16 AM

Hi there.

I found a "bug" / "feature" when we have IPv6.
Seems that I have to add manually the IPv6 to listen on the squid (on the integration box)

Is this normal ?

Cino · Aug 27, 2015, 3:38 PM

@magicduck:

Hi there.

I found a "bug" / "feature" when we have IPv6.
Seems that I have to add manually the IPv6 to listen on the squid (on the integration box)

Is this normal ?

Yes its normal. Its been that way since squid3 was added as a package. I would say its a feature that needs to be added to the GUI. To enable it and grab the interface IP from the interfaces you select

rataosinho · Sep 8, 2015, 1:43 PM

I installed version 0.3.0 today and ended my life. Computers with setted proxy manually, can not load pages. I had to take out the proxy settings of the LAN and did not want to do that.
Is there any way for me to go back to version 0.2.9? :'(
hugs!

whitexp · Sep 9, 2015, 12:00 AM

@rataosinho:

I installed version 0.3.0 today and ended my life. Computers with setted proxy manually, can not load pages. I had to take out the proxy settings of the LAN and did not want to do that.
Is there any way for me to go back to version 0.2.9? :'(
hugs!

same here

aGeekhere · Sep 9, 2015, 12:01 AM

I installed version 0.3.0 today and ended my life. Computers with setted proxy manually, can not load pages. I had to take out the proxy settings of the LAN and did not want to do that.
Is there any way for me to go back to version 0.2.9? :'(
hugs!

Did you delete the squid cache?

default666 · Sep 10, 2015, 6:13 AM

squid 0.3.0 beta

cache cleared

acl > blacklist - not working
acl > banned host adresses - not working
authentication - not working

reinstalled
transparent mode - not working
port change - not working

updated to 0.3.1 - same sh.

doktornotor · Sep 9, 2015, 12:26 PM

@rataosinho:

Is there any way for me to go back to version 0.2.9? :'(

Sure. Revert these patches via System Patches:
https://github.com/doktornotor/pfsense-packages/commit/a928e6df410383d00c19318b5c20459c50249a5a
https://github.com/doktornotor/pfsense-packages/commit/3f881d1e7c55ea875017764e3c6c8522fb344b84

I can assure you that reverting that will fix absolutely none of the issues you are having. Nothing changed in the Squid binaries, nothing changed in blacklists, banned hosts or anything like that, nothing changed in authentication.

P.S. For complete job, do not forget to revert https://github.com/pfsense/pfsense-packages/pull/1053 as well and chmod the pinger binary back to 0755 to get it nicely broken again.

default666 · Sep 10, 2015, 4:25 AM

Sure. Revert these patches via System Patches:

Used this instruction: https://doc.pfsense.org/index.php/System_Patches

Patch can NOT be reverted cleanly.

Output of full patch revert test:
/usr/bin/patch --directory=/usr/local/www/ -f -p1 -i /var/patches/55f0f3997bde1.patch --check --reverse --ignore-whitespace

Hmm...  Looks like a unified diff to me...
The text leading up to this was:
--------------------------
|From a928e6df410383d00c19318b5c20459c50249a5a Mon Sep 17 00:00:00 2001
|From: doktornotor 
|Date: Fri, 4 Sep 2015 22:17:03 +0200
|Subject: [PATCH] squid3 - use install_cron_job() instead of reimplementing it
|
|Also, use platform_booting() for boot check.
|---
| config/squid3/34/squid.inc | 90 +++++++++-------------------------------------
| 1 file changed, 17 insertions(+), 73 deletions(-)
|
|diff --git a/config/squid3/34/squid.inc b/config/squid3/34/squid.inc
|index 2705ceb..481b010 100755
|--- a/config/squid3/34/squid.inc
|+++ b/config/squid3/34/squid.inc
--------------------------
No file to patch.  Skipping...
Hunk #1 ignored at 772.
1 out of 1 hunks ignored while patching config/squid3/34/squid.inc
done

doktornotor · Sep 10, 2015, 10:38 AM

You have the paths wrong, very obviously.

marcelloc · Sep 10, 2015, 8:37 PM

@aGeekHere:

whats new in 0.2.9?

You can click o package version to see it's changelog.

aGeekhere · Sep 11, 2015, 12:30 AM

You can click o package version to see it's changelog.

get 404 error

link
https://github.com/pfsense/pfsense-packages/commits/master/config/34

doktornotor · Sep 12, 2015, 8:02 AM

Kindly test with latest Squid3 version (0.3.2). You either need to uninstall first, or reinstall it twice.

xbipin · Sep 12, 2015, 11:02 AM

i tried updating squid3 with this 0.3.2 but it kept failing so i uninstalled it now it doesnt install at all

Removing squid3 components…
Tabs items... done.
Menu items... done.
Services... done.
Loading package instructions...
Deinstall commands... done.
Removing package instructions...done.
Auxiliary files... done.
Package XML... done.
Configuration... done.
Beginning package installation for squid3 .Saving updated package information... done.
Downloading squid3 and its dependencies...
Checking for package installation... Loading package configuration... failed!

Installation aborted.Removing package...
Starting package deletion for squid-3.4.10_2-i386...done.
Removing squid3 components...
Configuration... done.
done.
Failed to install package.

Package reinstallation failed.

xbipin · Sep 12, 2015, 11:27 AM

fresh reinstall gives this

Beginning package installation for squid3 .
Downloading package configuration file… done.
Saving updated package information... done.
Downloading squid3 and its dependencies...
Checking for package installation...
Downloading https://files.pfsense.org/packages/10/All/squid-3.4.10_2-i386.pbi ... (extracting)
Loading package configuration... done.
Configuring package components...
Loading package configuration... done.
Additional files... squid.inc failed.
Loading package instructions...
Include squid.inc is missing!
Removing package...
Starting package deletion for squid-3.4.10_2-i386...done.
Removing squid3 components...
Tabs items... done.
Menu items... done.
Services... done.
Loading package instructions...
Include file squid.inc could not be found for inclusion.
Deinstall commands...
Not executing custom deinstall hook because an include is missing.
Removing package instructions...done.
Auxiliary files... done.
Package XML... done.
Configuration... done.
done.
Failed to install package.

Installation halted.

doktornotor · Sep 12, 2015, 11:29 AM

Well, when you don't have the inc file, it won't work.


Include squid.inc is missing!
...
Include file squid.inc could not be found for inclusion.

Download the file manually if it keeps failing for you. Sorry, this package manager seriously is a piece of garbage that fails to do any recovery.