PfSense+Squid Proxy=Error 111 (net::ERR_TUNNEL_CONNECTION_FAILED) - https ONLY

dpessanha · Apr 4, 2013, 2:35 PM

Hi all!

I'm new to the pfSense world, so I'll assume that the problem can be my n00bness.
I have a machine with pfSense and Squid Proxy and my network machines are pointing to this machine as the GW. The proxy is working as a charm to all http pages, but the https pages show this error in Google Chrome (the IE doesn't show anything…): Error 111 (net::ERR_TUNNEL_CONNECTION_FAILED). Ok. I give a F5 and the page loads as if nothing has ever happened. This problem doesn't occour every time I try to load a https page, but its enough to be a headache.

I know this is my fault in some rule, but I could not guess how to solve this problem. Can anyone help me?

Thanks in advance!

PS.: Sorry if I'm in the wrong place in the forum, but I'm new and n00b here too!

Nachtfalke · Apr 4, 2013, 6:06 PM

When googeling for this error it seems that not squid is the problem but the destination web server.
Which version of squid are you using ? If you use squid 2.7 try with newer squid3 version.

and if you are using squid3 then set the option "IPv4 first".

dpessanha · Apr 4, 2013, 7:20 PM

Hi, Nachtfalke!

Thanks a ton, man! It worked! The option in the pfSense GUI is in Services > Proxy Server > General > Resolv dns v4 first.

Thanks, man, thanks! =)

volkans80 · Apr 20, 2013, 10:02 AM

@Nachtfalke:

When googeling for this error it seems that not squid is the problem but the destination web server.
Which version of squid are you using ? If you use squid 2.7 try with newer squid3 version.

and if you are using squid3 then set the option "IPv4 first".

Thank you "Resolve dns v4 first" works!

echowings · May 17, 2013, 1:17 AM

The one is worked! Thanks so much.

EagleDM · Sep 18, 2013, 8:26 PM

I would also like to confirm this WORKS.

In fact, if I didn't put this option, all kinds of weirds things starts to happen on gmail and facebook.

Thanks you!

respinoza · Jul 23, 2014, 11:28 PM

Where is that option? I have the same problem and i can't find it.

IMAGEN 1: https://www.dropbox.com/s/z8ombf8snrjtlbi/1.PNG

IMAGEN 2: https://www.dropbox.com/s/rbnfnkpnzlqigh9/2.PNG

Patanours · Aug 19, 2015, 2:56 PM

hi everyone,

I enabled "Resolv dns v4 first" but it's always the same error : ERR_TUNNEL_CONNECTION_FAILED

I restarted Squid and Squidguard

Flush all web caches and flushdns on my PC

I'm blocked, any idea gentlemen ? :)