PFSense/Squid/Dansguardian error 11
-
I had a PFSense box set up running 2.2.4, Squid, and Dansguardian. I used Dansguardian due to the fact i needed to have a temporary over-ride to allow bypassing of blocked pages. Everything seemed to be working, except once I had a lot of users on(School environment, 100+ students 8 subnets) I noticed that I was getting dansguardian errors in the log file, it was coming up saying uid 106 has exited with error 11. At this point browsing was very very slow, or would stop completely. So in doing some trouble shooting, I check CPU Usage(Very Low), Memory usage(12GB Ram total, 9% used), so it does not seem like my system is being taxed at all.
I switched from Danguardian to Squidguard, and everything runs great, but I have lost the temporary bypass ability.
So questions 1. is this error in the log, and the browsing issues related and due to the age of dansguardian? 2. does anyone know a fix or work around? Thought of adding more memory to the box, but dont think that is the issue, and 3. Do we know anything about e2guardian's release?
Any thoughts and help is appreciated, thanks in advance
-
I switched from Danguardian to Squidguard, and everything runs great, but I have lost the temporary bypass ability.
What do you mean here? What's stopping you from creating a custom ACL, applying whatever restrictions (or not) to it and then moving users/IPs to that ACL as needed?
-
Yes I can get all that working, but as users start to log in and browse the web, there will be times where the web activity is very slow(dial-up speed if that) or will stop compltely. Than after a few seconds to a couple minutes, everything goes back to normal. Give it a few minutes to an hour, and the cycle starts again. My main question is on the exited with singall 11 error, they come up in the logs by the dozens, and co-inside with the time of slowness or inability to browse.
I have seen things on this error with the new PFSense version, but no one seems to have a fix???
-
Considering that Dans has been abandoned upstream for years, I doubt there will ever be a fix. That's why I would avoid using Dans if it's giving you problems.