Error : The requested URL could not be retrived - pfsense - squid3


  • Hello ;)
    i have some problems with squid3
    i did follow this guide 100 % https://doc.pfsense.org/index.php/Setup_Squid_as_a_Transparent_Proxy

    but i am getting this error almost on every website i am trying to access/visit

    ERROR
    The requested URL could not be retrieved
    
    The following error was encountered while trying to retrieve the URL: http://squidclamav.darold.net/tuning.html
    
        ICAP protocol error.
    
    The system returned: [No Error]
    
    This means that some aspect of the ICAP communication failed.
    
    Some possible problems are:
    
        The ICAP server is not reachable.
    
        An Illegal response was received from the ICAP server.
    
    Generated Sun, 01 Feb 2015 22:47:23 GMT by localhost (squid/3.4.10)
    
    

    i tried to look in my /var/squid/log folder to see if there was any report in the logs and the only thing i did find was this, but i am not sure what i should do to make it work ?

    i dont get why i am getting a warning about subnet 10.0.0.3 because it is my wifi subnet?

    015/02/01 12:09:58 kid1| Starting Squid Cache version 3.4.10 for amd64-portbld-freebsd10.1...
    2015/02/01 12:09:58| pinger: Initialising ICMP pinger ...
    2015/02/01 12:09:58|  icmp_sock: (1) Operation not permitted
    2015/02/01 12:09:58| pinger: Unable to start ICMP pinger.
    2015/02/01 12:09:58|  icmp_sock: (1) Operation not permitted
    2015/02/01 12:09:58| pinger: Unable to start ICMPv6 pinger.
    2015/02/01 12:09:58| FATAL: pinger: Unable to open any ICMP sockets.
    2015/02/01 13:28:17 kid1| WARNING: (A) '10.0.0.3' is a subnetwork of (B) '10.0.0.0/16'
    2015/02/01 13:28:17 kid1| WARNING: because of this '10.0.0.3' is ignored to keep splay tree searching predictable
    2015/02/01 13:28:17 kid1| WARNING: You should probably remove '10.0.0.3' from the ACL named 'localnet'
    2015/02/01 13:28:17| pinger: Initialising ICMP pinger ...
    2015/02/01 13:28:17|  icmp_sock: (1) Operation not permitted
    2015/02/01 13:28:17| pinger: Unable to start ICMP pinger.
    2015/02/01 13:28:17|  icmp_sock: (1) Operation not permitted
    2015/02/01 13:28:17| pinger: Unable to start ICMPv6 pinger.
    

  • i just found out it is only in transparent mode i am getting this error ?


  • isn 't there no one at all with an possible solution?


  • Do you have the integrated AV stuff running?


  • @KOM:

    Do you have the integrated AV stuff running?

    i just reinstalled pfsense to start with a clean install. i configured the transparent proxy and everything was working this time.
    Then i enabled the integrated antivirus and i got the same error as before. is there anyway to get the antivirus to work ?


  • is there anyway to get the antivirus to work?

    No idea, but then I don't use that stuff.  I played with the Clam package but it was slowing down our link too much, and we already subscribe to a large vendor AV solution on all clients and servers here so the Clam stuff was redundant and less effective.  I know the new 2.2 using HAVP, but I still won't use it.