Squid3 - New GUI with sync, normal and reverse proxy

xbipin · Sep 12, 2015, 11:02 AM

i tried updating squid3 with this 0.3.2 but it kept failing so i uninstalled it now it doesnt install at all

Removing squid3 components…
Tabs items... done.
Menu items... done.
Services... done.
Loading package instructions...
Deinstall commands... done.
Removing package instructions...done.
Auxiliary files... done.
Package XML... done.
Configuration... done.
Beginning package installation for squid3 .Saving updated package information... done.
Downloading squid3 and its dependencies...
Checking for package installation... Loading package configuration... failed!

Installation aborted.Removing package...
Starting package deletion for squid-3.4.10_2-i386...done.
Removing squid3 components...
Configuration... done.
done.
Failed to install package.

Package reinstallation failed.

xbipin · Sep 12, 2015, 11:27 AM

fresh reinstall gives this

Beginning package installation for squid3 .
Downloading package configuration file… done.
Saving updated package information... done.
Downloading squid3 and its dependencies...
Checking for package installation...
Downloading https://files.pfsense.org/packages/10/All/squid-3.4.10_2-i386.pbi ... (extracting)
Loading package configuration... done.
Configuring package components...
Loading package configuration... done.
Additional files... squid.inc failed.
Loading package instructions...
Include squid.inc is missing!
Removing package...
Starting package deletion for squid-3.4.10_2-i386...done.
Removing squid3 components...
Tabs items... done.
Menu items... done.
Services... done.
Loading package instructions...
Include file squid.inc could not be found for inclusion.
Deinstall commands...
Not executing custom deinstall hook because an include is missing.
Removing package instructions...done.
Auxiliary files... done.
Package XML... done.
Configuration... done.
done.
Failed to install package.

Installation halted.

doktornotor · Sep 12, 2015, 11:29 AM

Well, when you don't have the inc file, it won't work.


Include squid.inc is missing!
...
Include file squid.inc could not be found for inclusion.

Download the file manually if it keeps failing for you. Sorry, this package manager seriously is a piece of garbage that fails to do any recovery.

xbipin · Sep 12, 2015, 12:18 PM

i figured out the issue, the isp connection was such that it used to drop the connection to pfsense server very often so install always used to miss those files due to timeout to server, i switched over to another connection and then it installed fine

doktornotor · Sep 12, 2015, 12:29 PM

Yeah, this happens on download failures… sadly, it manages to get itself into a state where it can be neither installed nor uninstalled rather often. Why it doesn't try to refetch the file instead of spitting "Oh noes, we are missing required include, kaboom" goes beyond me.

aGeekhere · Sep 13, 2015, 9:39 AM

Kindly test with latest Squid3 version (0.3.2). You either need to uninstall first, or reinstall it twice.

Sure.

Same issue with a reinstall (twice).

Will try again on a new update.

doktornotor · Sep 13, 2015, 10:51 AM

@aGeekHere:

Same issue with a reinstall (twice).

There won't be any new update from me, sorry. Not really even sure what "same issue" are you talking about. Backup config, wipe the messed up box, reinstall, restore config and start from scratch, perhaps.

aGeekhere · Sep 13, 2015, 11:19 PM

The "same issue" is that the link to show squid's changes in the package manger is incorrect and gives

get 404 error

link
https://github.com/pfsense/pfsense-packages/commits/master/config/34

Anyway it is only minor, Found the correct link anyway
https://github.com/pfsense/pfsense-packages/tree/master/config/squid3/34

doktornotor · Sep 14, 2015, 12:37 AM

@aGeekHere:

The "same issue" is that the link to show squid's changes in the package manger is incorrect

Not fixable in package, plus not really sure why it matters.

Alex_RQ · Sep 15, 2015, 1:55 AM

Hello ALL,

Recently switched from NON-Transparent proxy to Transparent. Figured out that URL-Filter (squidGuard) doesn't work for HTTPS sites. So, even if I block all the sites in squidGuard configuration user still able to browse ANY HTTPS site (I made sure that user gets ERROR page for HTTP, so squidGurd works for NON-encrypted traffic).
In NON-Transparent mode it DOES work and users gets regular "Unable to connect" (FireFox) or "This webpage is not available" (Chrome). I assume this is normal behavior.

We run squid3 v0.3.1 (with clamav integrated) and squidGuard v1.9.15 on pfSense 2.2.4-RELEASE (amd64).

1. Is it a known issue with TRANSPARENT mode? Is it possible to fix it somehow? BTW, we do NOT use SSL interception.

2. The second question would be "Where can I get a changelog (the list of new features / fixed issues) for the latest squid3 v0.3.2?".

Thank you in advance.

clusty · Oct 9, 2015, 2:25 AM

Hello,

Something very doubtful is happening: every 1-2 updates completely breaks squid. It seem like it stops caching any traffic in transparent mode.
Multiple reinstallations does not seem to fix it.

Is it a very buggy?

aGeekhere · Oct 9, 2015, 3:24 AM

I have found that squid gets stuck (just sits there pulling full bandwidth) with adobe cc updates,

the error

09.10.2015 14:17:23	192.168.1.244	TCP_CLIENT_REFRESH_MISS_ABORTED/206	http://swupdl.adobe.com/updates/oobe/aam20/win/PhotoshopCameraRaw8-8.0/9.2.89/setup.zip	-	203.213.33.73

Have to disable squid in order for the update to download.

voxeljorz · Oct 12, 2015, 3:32 AM

~~Squidguard didn't filter websites and clamd also stopped after update.~~

Reinstalled Squid and SquidGuard, working fine now.

Only clamav service was stopped.
Error: Missing /var/db/clamav/*.cvd or *.cld files. Running freshclam in background.

doktornotor · Oct 12, 2015, 11:56 AM

@voxeljorz:

Error: Missing /var/db/clamav/*.cvd or *.cld files. Running freshclam in background.

There was absolutely no need to reinstall the package. Antivirus cannot run without AV definitions. You simply must wait until they are downloaded. After that, you can start ClamAV. There's a log message about it, there's a GUI note about it. Not really sure what else could be done for people that lack basic understanding of things like the fact that AV without defs doesn't work.

Panja · Oct 12, 2015, 8:16 PM

If I want ClamAV to work on my pfSense box, this is the package I need to run with? Squid3 0.4.0 package
I don't care about the reverse proxy though (not need in my situation). Do I still need this package?

doktornotor · Oct 12, 2015, 8:22 PM

Could you clarify what's the purpose you want to run ClamAV for?

Panja · Oct 12, 2015, 9:11 PM

I would like ClamAV to work as a virusscanner for my clients.
So whne they browse and stumble upon a virus it gets blocked.

doktornotor · Oct 12, 2015, 9:13 PM

Well yes, then this is the package. Good luck ;)

Panja · Oct 12, 2015, 9:17 PM

Care to explain?
ClamAV sh*t?

CrisKolkman · Oct 14, 2015, 2:58 PM

Hello all,

I just installed pfSense in VirtualBox and it seems to be running fine.
I needed to install a router as pfSense because I run multiple webserver and with Squid3 I am filtering based on host which is being accessed.
Problem is that pfSense is not the first router, I have my ISP modem which also contains a router (Ziggo in Netherlands).

The way I have set it up now is like this:

sub.domain.com is being transferred to my ISP external IP.
My ISP modem is sending al port 80 traffic to the pfSense WAN interface.

Only thing what happens is that when I try to reach sub.domain.com, it is getting redirected to HTTPS and then the error that the server is taking too long to respond.
When I edit the hostfile for my local PC to point directly to the pfSense WAN interface, it is working like it should.

Hope you understand my question/problem, if not please ask.