<![CDATA[Squid3 0.3.9.2 with SSL-Man-In-the-Middle-Filtering not working]]>I am using pfSense 2.2.4-RELEASE (amd64) with  Squid3 ver. 0.3.9.2 and squidGuard ver. 1.9.15.

But when i enable SSL Man in the middle filtering, squid service  is stopped and does not work.

Please suggest.

Thanks in advance.

]]>https://forum.netgate.com/topic/90214/squid3-0-3-9-2-with-ssl-man-in-the-middle-filtering-not-workingRSS for NodeSun, 11 Oct 2026 11:49:35 GMTMon, 12 Oct 2015 08:25:33 GMT60<![CDATA[Reply to Squid3 0.3.9.2 with SSL-Man-In-the-Middle-Filtering not working on Tue, 20 Oct 2015 09:20:05 GMT]]>@exograpix:

You have to select lan.

Thanks, fixed above…

@OP: The interfaces MUST match. You have some wild mixture of Proxy Interface(s) vs. Transparent Proxy Interface(s) vs. SSL Intercept Interface(s). Make sure the thing match each other.

]]>https://forum.netgate.com/post/578018https://forum.netgate.com/post/578018Tue, 20 Oct 2015 09:20:05 GMT<![CDATA[Reply to Squid3 0.3.9.2 with SSL-Man-In-the-Middle-Filtering not working on Tue, 20 Oct 2015 09:03:25 GMT]]>My suggestion is uninstall the package and download it again (latest version of squid)

]]>https://forum.netgate.com/post/578016https://forum.netgate.com/post/578016Tue, 20 Oct 2015 09:03:25 GMT<![CDATA[Reply to Squid3 0.3.9.2 with SSL-Man-In-the-Middle-Filtering not working on Tue, 20 Oct 2015 09:02:30 GMT]]>You have to select lan.

]]>https://forum.netgate.com/post/578015https://forum.netgate.com/post/578015Tue, 20 Oct 2015 09:02:30 GMT<![CDATA[Reply to Squid3 0.3.9.2 with SSL-Man-In-the-Middle-Filtering not working on Tue, 20 Oct 2015 08:45:19 GMT]]>In SSL Intercept Interfaces, its LAN, WAN and Loopback options. I selected Loopback but still does not work.

]]>https://forum.netgate.com/post/578012https://forum.netgate.com/post/578012Tue, 20 Oct 2015 08:45:19 GMT<![CDATA[Reply to Squid3 0.3.9.2 with SSL-Man-In-the-Middle-Filtering not working on Tue, 20 Oct 2015 09:15:48 GMT]]>Kindly make sure you select "localhost" your LAN(s) on the "SSL Intercept Interface(s)".

]]>https://forum.netgate.com/post/577513https://forum.netgate.com/post/577513Tue, 20 Oct 2015 09:15:48 GMT<![CDATA[Reply to Squid3 0.3.9.2 with SSL-Man-In-the-Middle-Filtering not working on Sat, 17 Oct 2015 10:10:06 GMT]]>I am getting the following in the system log:

–-------------------------------------------------

php-fpm[32201]: /rc.start_packages: The command '/usr/pbi/squid-amd64/sbin/squid -f /usr/pbi/squid-amd64/local/etc/squid/squid.conf' returned exit code '1', the output was '2015/10/17 15:28:30| FATAL: tproxy/intercept on https_port requires ssl-bump which is missing. FATAL: Bungled /usr/pbi/squid-amd64/local/etc/squid/squid.conf line 6: https_port 127.0.0.1:3127 intercept Squid Cache (Version 3.4.10): Terminated abnormally. CPU Usage: 0.016 seconds = 0.016 user + 0.000 sys Maximum Resident Size: 46528 KB Page faults with physical i/o: 0'

–-------------------------------------------------

]]>https://forum.netgate.com/post/577493https://forum.netgate.com/post/577493Sat, 17 Oct 2015 10:10:06 GMT<![CDATA[Reply to Squid3 0.3.9.2 with SSL-Man-In-the-Middle-Filtering not working on Mon, 12 Oct 2015 11:19:15 GMT]]>Considering I did go through the hops of putting a descriptive log_error() message just about on every damned step that happens on Squid reconfiguration that's shown in System Logs - General, I find the immense amount of information posted here absolutely amazing.

Your suggestion can be found here.

]]>https://forum.netgate.com/post/576236https://forum.netgate.com/post/576236Mon, 12 Oct 2015 11:19:15 GMT