Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Squid3 won't start complains about acls, help viconf

    Cache/Proxy
    1
    2
    1072
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • G
      Gio last edited by

      Hello,

      My squid3 install will not start the service, it will complain of an issue with acl "allowed_subnets"

      when I check XML via console using 'viconfig' I see the following:

                      <squidnac><config><allowed_subnets>MC4wLjAuMC8w</allowed_subnets>
                                      <unrestricted_hosts><banned_hosts><whitelist><blacklist><block_user_agent><block_reply_mime_type><addtl_ports>1935 8134 7074</addtl_ports>
                                      <addtl_sslports>80 5222 8006 2096 2086 2087 2082
       2083 2096 53215 1935 8134</addtl_sslports></block_reply_mime_type></block_user_agent></blacklist></whitelist></banned_hosts></unrestricted_hosts></config></squidnac> 
      

      why is <allowed_subnets>MC4wLjAuMC8w</allowed_subnets> not a network? if its a definition where can I find or edit MC4wLjAuMC8w so I figure out what it is? because I can start squid if I manually edit squid.conf but then if I restart the service via pfsense GUI it will reset to the wrong configuration… I need to edit allowed_subnets to 0.0.0.0/0 so all networks can use proxy (all LAN networks I mean)

      here is the error in system log

      [b]php-fpm[90092]: /status_services.php: The command '/usr/local/etc/rc.d/squid.sh stop' returned exit code '1', the output was '2015/03/31 18:28:30| ERROR: '0.0.0.0/0' needs to be replaced by the term 'all'. 2015/03/31 18:28:30| SECURITY NOTICE: Overriding config setting. Using 'all' instead. 2015/03/31 18:28:30| Warning: empty ACL: acl throttle_exts urlpath_regex -i "/var/squid/acl/throttle_exts.acl"[/b]
      

      the squid conf has this:

      Allow local network(s) on interface(s)

      acl localnet src  192.168.70.0/24 128.0.0.0/1.2197950726191

      dunno where 128.0.0.0/1.2197950726191 is coming from.

      1 Reply Last reply Reply Quote 0
      • G
        Gio last edited by

        ok looks like the problem was an intervace without IP config was inadvertedly selected under proxy interfaces on squid config page. Seems to be working now (at least service starts) these errors/warnings remain:

        php-fpm[71851]: /status_services.php: The command '/usr/local/etc/rc.d/squid.sh stop' returned exit code '1', the output was '2015/03/31 18:38:12| Warning: empty ACL: acl throttle_exts urlpath_regex -i "/var/squid/acl/throttle_exts.acl"'
        

        which came from "Cache Dynamic Content" being unselected while multiple options like "Windows Update" where selected below it… so enabling it again got rid of that warning above.

        hope it helps someone.

        1 Reply Last reply Reply Quote 0
        • First post
          Last post