SquidGuard not starting
-
I have squidGuard 1.4_4 pkg v.1.9.6 running with squid 2.7.9 pkg v.4.3.4 on pfSense 2.1.4, bounded to 1 of the interfaces (Opt 2) so that it'll filter traffic out (this particular firewall is protecting an after-school center with a student computer lab, so we're filtering traffic from the lab).
I originally set things up a couple months ago, but for some reason, Squid's caching got messed up, and even though SquidGuard wasn't blocking the websites, users weren't able to visit ANY website. I ended up having to completely remove Squid and SquidGuard entirely so that I could get the lab back up and running (I explained to the director and assistant director that absolutely no content was being filtered, and kids could get to anything, and they were fine with that).
So now I'm rebuilding the filter, and after installing these packages again through the GUI, SquidGuard won't turn on.
When I go into the System Logs, this is what I see related to why its not starting:
Aug 7 13:37:07 php: /pkg_edit.php: The command '/usr/pbi/squid-amd64/sbin/squid -k reconfigure' returned exit code '1', the output was 'squid: ERROR: No running copy' Aug 7 13:37:07 check_reload_status: Reloading filter Aug 7 13:37:07 check_reload_status: Syncing firewall Aug 7 13:37:07 check_reload_status: Reloading filter Aug 7 13:37:07 php: /pkg_edit.php: Reloading Squid for configuration sync
So then I went into the Proxy Server settings, and at the bottom of the main page where it gives you the option for Custom Options, I see this was automatically inserted by the SquidGuard package (as I didn't enter these settings in there):
redirect_program /usr/pbi/squidguard-amd64/bin/squidGuard -c /usr/pbi/squidguard-amd64/etc/squidGuard/squidGuard.conf;redirector_bypass off;url_rewrite_children 5
I tried removing that from the Custom Options, and then starting the SquidGuard service again on the Status->Services page, and after I get the message that SquidGuard has been started, that page (Status->Services) indicates SquidGuard isn't running. So then I go back into the logs, see that same error message, and then go back into the main Squid configuration section, and see those options again in Custom Options.
How can I fix this issue?
-
You say you don't see redirector settings in tne proxy server general tab.
Custom setting should not be needed to integrate squidguard.Pressing "save" in the general settings tab of squidguard (proxy filter) should configure the "squid.conf".
So after that you can see added the redirector settings, in the Proxy server general settings.Can you open the Targets Rules list in the Common ACL tab?
If Yes: select a few subjects to deny and allow default access, also press apply in the general settings tab of proxy filter.If No:
Add a blacklist url in the general settings tab and update this blacklist using the blacklist tab first.Begin blacklist update Start download. Download archive http://pfsense.home/blacklist.tar.gz (http://www.shallalist.de/Downloads/shallalist.tar.gz) Download complete Unpack archive Scan blacklist categories. Found 4 items. (shallalist has more subdirectories, so more found items here) Start rebuild DB. Copy DB to workdir. Reconfigure Squid proxy. Blacklist update complete.
Now? Can you open the Targets Rules list in the Common ACL tab?
Select a few subjects to deny and allow default access, also press apply in the general settings tab of proxy filter. -
You say you don't see redirector settings in the proxy server general tab.
I didn't mean to imply this. If I wrote something that confused you and made you think that, then I apologize.
I can get into the Common ACL, and I've been able to allow / deny different categories. This has always been the case, and hasn't changed (I'm using ttp://www.shallalist.de/Downloads/shallalist.tar.gz as the Blacklist filter).
I've clicked "save" and "apply" (and vice-versa) several different times on both the "Proxy filter SquidGuard: General settings" and the "Proxy server: General settings" pages, to no avail.
When I go to start the service, it doesn't work (per my error output in my original post).
The service was working fine when I did the initial install a month or so ago, so if there were some way to do a completely fresh install, perhaps that would help. When I go to uninstall the packages, I get the feeling they aren't fully purging old configuration files.
-
This thread shows how to remove squid completely
https://forum.pfsense.org/index.php?topic=78521.0
-
If the problem is still actual…
SquidGuard can't starts because no log dir and log file are exists.
You may resolve trouble, entering from console:[2.2.2-RELEASE][admin@pfsense]/root: mkdir /var/log/squidGuard [2.2.2-RELEASE][admin@pfsense]/root: touch /var/log/squidGuard/squidGuard.log
-
@ro:
If the problem is still actual…
SquidGuard can't starts because no log dir and log file are exists.
You may resolve trouble, entering from console:[2.2.2-RELEASE][admin@pfsense]/root: mkdir /var/log/squidGuard [2.2.2-RELEASE][admin@pfsense]/root: touch /var/log/squidGuard/squidGuard.log
Resolved my problem! Thank you!
-
Resolved my problem! Thank you!
Please, edit the first post and add [SOLVED] at the start or end of the title, so anyone else with your trouble knows that here is a solution.
Greetings!