Squid3 blocking DVR



  • Hi,
    I was wondering if someone could help with this problem. So I have DVR Hikvision  located at a home office. At that home office it does not have pfSense installed but at my home i have pfSense 2.2.2 with squid3 running. Everytime i try to access the DVR i get TAG_NONE/411 not sure why because i can access another DVR from another external ip and have no problem within my home. See picture below

    Thank you




  • I'm starting to believe that squid is practically useless today other than as a platform for URL filtering with squidGuard.  The nature of the modern dynamic web makes caching anything almost impossible, and the caching causes all kind of problems.  What's the point of having a cache when your hit rate is 4-7%?  And good luck getting Windows Updates to cache.

    I'm still on 2.1.5 with squid3/squidGuard but when I move to 2.2 I'm going to ditch squid's hard disk cache altogether and just have it as the base for squidGuard.



  • But heres the funny thing I can access another DVR same version but no issues. On 2.2.2 after installing Squid3 a reboot is must for it to work.  And for windows update im glad it wont work I hate windows update it usually messes up everything. But how does squidGuard work without squid3?



  • And for windows update im glad it wont work I hate windows update it usually messes up everything.

    :o  Sounds like crazy antivaxxer talk.  While problems have happened, the disease is most certainly worse than the cure.

    But how does squidGuard work without squid3?

    It doesn't, but you can control how large the squid hard disk and memory caches are.  With no hard disk cache and a filesystem of null, it won't cache to disk.



  • :o  Sounds like crazy antivaxxer talk.  While problems have happened, the disease is most certainly worse than the cure.

    haha i just had really bad bad experience with windows update especially when it says dont turn off and the lights go out… :-[
    Registry dead

    [quote]It doesn't, but you can control how large the squid hard disk and memory caches are.  With no hard disk cache and a filesystem of null, it won't cache to disk.

    oooooo but then for reports i would tell sarge to use squidGuard instead of squid?



  • @killmasta93:

    oooooo but then for reports i would tell sarge to use squidGuard instead of squid?

    Well, this is not, AFAIK, Squid OR SquidGuard.
    SquidGuard is an add-on to Squid and works in conjunction with Squid.

    I don't think is really makes sense to run SquidGuard without Squid.

    The point here was to highlight that caching is less and less useful thus idea is to run Squid without caching but still passing through SquidGuard for filtering.



  • haha i just had really bad bad experience with windows update especially when it says dont turn off and the lights go out… :-[
    Registry dead[/quote]

    Oh well, just restore from your backup and move on.  You do perform backups, right?  ;)

    oooooo but then for reports i would tell sarge to use squidGuard instead of squid?

    Doesn't matter.  Even if squid isn't actually caching the content, it's still logging everything.  Your traffic reports should look the same even with no caching.

    The point here was to highlight that caching is less and less useful thus idea is to run Squid without caching but still passing through SquidGuard for filtering.

    Exactly.



  • Oh well, just restore from your backup and move on.  You do perform backups, right?  ;)

    haha of course  ;) easeus todo backup

    i wonder when E2guardian is coming  out prob going to replace squidGuard



  • @KOM so theres no way i can make squid to ignore access to the external IP of the DVR when trying to accessing it? :-\



  • @KOM so theres no way i can make squid to ignore access to the external IP of the DVR when trying to accessing it?

    The main squid config page has the Bypass proxy for these destination IPs option.  Try it and see if your thingy works.



  • perfectly worked i put the WAN IP /24 worked like a charm. I actually never saw that option  :o

    Thank KOM