Squid3 - New GUI with sync, normal and reverse proxy

S. Kirschner

whats new in 0.2.9?

Hm , its still the same version.

Here are the build options of 0.2.9

Squid Cache: Version 3.4.10
configure options:  '--with-default-user=squid' '--bindir=/usr/local/sbin' '--sbindir=/usr/local/sbin' '--datadir=/usr/local/etc/squid' '--libexecdir=/usr/local/libexec/squid'
 '--localstatedir=/var' '--sysconfdir=/usr/local/etc/squid' '--with-logdir=/var/log/squid' '--with-pidfile=/var/run/squid/squid.pid' '--with-swapdir=/var/squid/cache' '--enable-auth'
 '--enable-build-info' '--enable-loadable-modules' '--enable-removal-policies=lru heap' '--disable-epoll' '--disable-linux-netfilter' '--disable-linux-tproxy' '--disable-translation'
 '--disable-arch-native' '--enable-eui' '--enable-cache-digests' '--enable-delay-pools' '--enable-ecap' '--disable-esi' '--enable-follow-x-forwarded-for' '--enable-htcp'
 '--enable-icap-client' '--enable-icmp' '--enable-ident-lookups' '--enable-ipv6' '--enable-kqueue' '--with-large-files' '--enable-http-violations' '--without-nettle' '--enable-snmp' '--enable-ssl'
 '--enable-ssl-crtd' '--disable-stacktraces' '--disable-ipf-transparent' '--disable-ipfw-transparent' '--enable-pf-transparent' '--with-nat-devpf' '--disable-forw-via-db' '--enable-wccp'
 '--enable-wccpv2' '--enable-auth-basic=DB MSNT MSNT-multi-domain NCSA PAM POP3 RADIUS fake getpwnam LDAP NIS' '--enable-auth-digest=file'
 '--enable-external-acl-helpers=file_userip time_quota unix_group LDAP_group' '--enable-auth-negotiate=kerberos wrapper' '--enable-auth-ntlm=fake smb_lm'
 '--enable-storeio=ufs aufs diskd' '--enable-disk-io=AIO Blocking IpcIo Mmapped DiskThreads DiskDaemon' '--enable-log-daemon-helpers=file' '--enable-url-rewrite-helpers=fake'
 '--enable-storeid-rewrite-helpers=file' '--with-openssl=/usr' '--prefix=/usr/local' '--mandir=/usr/local/man' '--infodir=/usr/local/info/' '--build=amd64-portbld-freebsd10.1' 
'build_alias=amd64-portbld-freebsd10.1' 'CC=cc' 'CFLAGS=-O2 -pipe  -I/usr/local/include -I/usr/local/include -I/usr/include -fstack-protector -DLDAP_DEPRECATED -fno-strict-aliasing'
 'LDFLAGS= -L/usr/local/lib -L/usr/local/lib -pthread -Wl,-rpath,/usr/lib:/usr/local/lib -L/usr/lib -fstack-protector' 'LIBS=' 'CPPFLAGS=' 'CXX=c++'
 'CXXFLAGS=-O2 -pipe -I/usr/local/include -I/usr/local/include -I/usr/include -fstack-protector -DLDAP_DEPRECATED -fno-strict-aliasing  -Wno-unused-private-field' 'CPP=cpp' 'PKG_CONFIG=pkgconf' --enable-ltdl-convenience

aGeekhere

well I updated,all went well, just had to remove the cache after the install or else i get page loading issues.

magicduck

Hi there.

I found a "bug" / "feature" when we have IPv6.
Seems that I have to add manually the IPv6 to listen on the squid (on the integration box)

Is this normal ?

Cino

@magicduck:

Hi there.

I found a "bug" / "feature" when we have IPv6.
Seems that I have to add manually the IPv6 to listen on the squid (on the integration box)

Is this normal ?

Yes its normal. Its been that way since squid3 was added as a package. I would say its a feature that needs to be added to the GUI. To enable it and grab the interface IP from the interfaces you select

rataosinho

I installed version 0.3.0 today and ended my life. Computers with setted proxy manually, can not load pages. I had to take out the proxy settings of the LAN and did not want to do that.
Is there any way for me to go back to version 0.2.9? :'(
hugs!

whitexp

@rataosinho:

I installed version 0.3.0 today and ended my life. Computers with setted proxy manually, can not load pages. I had to take out the proxy settings of the LAN and did not want to do that.
Is there any way for me to go back to version 0.2.9? :'(
hugs!

same here

aGeekhere

I installed version 0.3.0 today and ended my life. Computers with setted proxy manually, can not load pages. I had to take out the proxy settings of the LAN and did not want to do that.
Is there any way for me to go back to version 0.2.9? :'(
hugs!

Did you delete the squid cache?

default666

squid 0.3.0 beta

cache cleared

acl > blacklist - not working
acl > banned host adresses - not working
authentication - not working

reinstalled
transparent mode - not working
port change - not working

updated to 0.3.1 - same sh.

doktornotor

@rataosinho:

Is there any way for me to go back to version 0.2.9? :'(

Sure. Revert these patches via System Patches:
https://github.com/doktornotor/pfsense-packages/commit/a928e6df410383d00c19318b5c20459c50249a5a
https://github.com/doktornotor/pfsense-packages/commit/3f881d1e7c55ea875017764e3c6c8522fb344b84

I can assure you that reverting that will fix absolutely none of the issues you are having. Nothing changed in the Squid binaries, nothing changed in blacklists, banned hosts or anything like that, nothing changed in authentication.

P.S. For complete job, do not forget to revert https://github.com/pfsense/pfsense-packages/pull/1053 as well and chmod the pinger binary back to 0755 to get it nicely broken again.

default666

Sure. Revert these patches via System Patches:

Used this instruction: https://doc.pfsense.org/index.php/System_Patches

Patch can NOT be reverted cleanly.

Output of full patch revert test:
/usr/bin/patch --directory=/usr/local/www/ -f -p1 -i /var/patches/55f0f3997bde1.patch --check --reverse --ignore-whitespace

Hmm...  Looks like a unified diff to me...
The text leading up to this was:
--------------------------
|From a928e6df410383d00c19318b5c20459c50249a5a Mon Sep 17 00:00:00 2001
|From: doktornotor 
|Date: Fri, 4 Sep 2015 22:17:03 +0200
|Subject: [PATCH] squid3 - use install_cron_job() instead of reimplementing it
|
|Also, use platform_booting() for boot check.
|---
| config/squid3/34/squid.inc | 90 +++++++++-------------------------------------
| 1 file changed, 17 insertions(+), 73 deletions(-)
|
|diff --git a/config/squid3/34/squid.inc b/config/squid3/34/squid.inc
|index 2705ceb..481b010 100755
|--- a/config/squid3/34/squid.inc
|+++ b/config/squid3/34/squid.inc
--------------------------
No file to patch.  Skipping...
Hunk #1 ignored at 772.
1 out of 1 hunks ignored while patching config/squid3/34/squid.inc
done

doktornotor

You have the paths wrong, very obviously.

marcelloc

@aGeekHere:

whats new in 0.2.9?

You can click o package version to see it's changelog.

changelog.png_thumb

aGeekhere

You can click o package version to see it's changelog.

get 404 error

link
https://github.com/pfsense/pfsense-packages/commits/master/config/34

doktornotor

Kindly test with latest Squid3 version (0.3.2). You either need to uninstall first, or reinstall it twice.

xbipin

i tried updating squid3 with this 0.3.2 but it kept failing so i uninstalled it now it doesnt install at all

Removing squid3 components…
Tabs items... done.
Menu items... done.
Services... done.
Loading package instructions...
Deinstall commands... done.
Removing package instructions...done.
Auxiliary files... done.
Package XML... done.
Configuration... done.
Beginning package installation for squid3 .Saving updated package information... done.
Downloading squid3 and its dependencies...
Checking for package installation... Loading package configuration... failed!

Installation aborted.Removing package...
Starting package deletion for squid-3.4.10_2-i386...done.
Removing squid3 components...
Configuration... done.
done.
Failed to install package.

Package reinstallation failed.

xbipin

fresh reinstall gives this

Beginning package installation for squid3 .
Downloading package configuration file… done.
Saving updated package information... done.
Downloading squid3 and its dependencies...
Checking for package installation...
Downloading https://files.pfsense.org/packages/10/All/squid-3.4.10_2-i386.pbi ... (extracting)
Loading package configuration... done.
Configuring package components...
Loading package configuration... done.
Additional files... squid.inc failed.
Loading package instructions...
Include squid.inc is missing!
Removing package...
Starting package deletion for squid-3.4.10_2-i386...done.
Removing squid3 components...
Tabs items... done.
Menu items... done.
Services... done.
Loading package instructions...
Include file squid.inc could not be found for inclusion.
Deinstall commands...
Not executing custom deinstall hook because an include is missing.
Removing package instructions...done.
Auxiliary files... done.
Package XML... done.
Configuration... done.
done.
Failed to install package.

Installation halted.

doktornotor

Well, when you don't have the inc file, it won't work.


Include squid.inc is missing!
...
Include file squid.inc could not be found for inclusion.

Download the file manually if it keeps failing for you. Sorry, this package manager seriously is a piece of garbage that fails to do any recovery.

xbipin

i figured out the issue, the isp connection was such that it used to drop the connection to pfsense server very often so install always used to miss those files due to timeout to server, i switched over to another connection and then it installed fine

doktornotor

Yeah, this happens on download failures… sadly, it manages to get itself into a state where it can be neither installed nor uninstalled rather often. Why it doesn't try to refetch the file instead of spitting "Oh noes, we are missing required include, kaboom" goes beyond me.

aGeekhere

Kindly test with latest Squid3 version (0.3.2). You either need to uninstall first, or reinstall it twice.

Sure.

Same issue with a reinstall (twice).

Will try again on a new update.