Text only | Text with Images

OPNsense Forum

English Forums => Web Proxy Filtering and Caching => Topic started by: vivekmauli14 on July 29, 2024, 07:30:50 AM

Title: Error while starting squid
Post by: vivekmauli14 on July 29, 2024, 07:30:50 AM
Hii,

I faced this following error while trying to start the squid service. Can anyone tell how can I resolve this issue ?
Find the screenshot here:
(https://ibb.co/6rhqfPj)
https://ibb.co/6rhqfPj (https://ibb.co/6rhqfPj)

Code Select
http://proxy load error
template reload Deciso/Proxy: OK
template reload OPNsense/ProxySSO: OK
Starting squid.
CPU Usage: 6.433 seconds = 6.276 user + 0.157 sys
Maximum Resident Size: 1354512 KB
Page faults with physical i/o: 0
2024/07/29 06:21:03| Processing Configuration File: /usr/local/etc/squid/squid.conf (depth 0)
2024/07/29 06:21:03| Starting Authentication on port 127.0.0.1:3128
2024/07/29 06:21:03| Disabling Authentication on port 127.0.0.1:3128 (interception enabled)
2024/07/29 06:21:03| Starting Authentication on port [::1]:3128
2024/07/29 06:21:03| Disabling Authentication on port [::1]:3128 (interception enabled)
2024/07/29 06:21:10| Processing Configuration File: /usr/local/etc/squid/pre-auth/20-negotiate.auth.conf (depth 1)
2024/07/29 06:21:10| Processing Configuration File: /usr/local/etc/squid/pre-auth/40-snmp.conf (depth 1)
2024/07/29 06:21:10| Processing Configuration File: /usr/local/etc/squid/pre-auth/dummy.conf (depth 1)
2024/07/29 06:21:10| Processing Configuration File: /usr/local/etc/squid/pre-auth/parentproxy.conf (depth 1)
2024/07/29 06:21:10| ERROR: ACL not found: Safe_ports
2024/07/29 06:21:10| Not currently OK to rewrite swap log.
2024/07/29 06:21:10| storeDirWriteCleanLogs: Operation aborted.
2024/07/29 06:21:10| FATAL: Bungled /usr/local/etc/squid/squid.conf line 85: http_access deny !Safe_ports
2024/07/29 06:21:10| Squid Cache (Version 6.10): Terminated abnormally.
/usr/local/etc/rc.d/squid: WARNING: failed to start squid

Looking forward for a resolution.

Thanks
VivekSP
Title: Re: Error while starting squid
Post by: meyergru on July 29, 2024, 09:38:23 AM
When you use the forum search just to look for "squid safe_ports" (which is the reason given for the ERROR), you will find this post:

https://forum.opnsense.org/index.php?topic=39449
Title: Re: Error while starting squid
Post by: vivekmauli14 on July 29, 2024, 03:06:41 PM
Hi Meyergru,

Thanks for getting back, In the thread David says, "The solution is in the access list to put 443 as enabled"
But I am not able to understand what exactly do I need to do, It will be appreciated if you can guide me with this, as I am newbie in Squid.

Thanks,
Vivek
Title: Re: Error while starting squid
Post by: meyergru on July 29, 2024, 08:37:58 PM
See attachment...
Title: Re: Error while starting squid
Post by: franco on July 30, 2024, 12:05:32 PM
Working on a fix now.


Cheers,
Franco
Title: Re: Error while starting squid
Post by: franco on July 30, 2024, 12:19:01 PM
https://github.com/opnsense/plugins/commit/590aabbac

# opnsense-patch -c plugins 590aabbac
# /usr/local/opnsense/mvc/script/run_migrations.php

(second line is important!)


Cheers,
Franco
Title: Re: Error while starting squid
Post by: vivekmauli14 on September 09, 2024, 08:38:17 AM
Hi Franco,

I applied the patch you mentioned, but now the issue is in restarting the service, I am able to start the service however, it is again giving the Segmentation failed error.

Code Select

template reload Deciso/Proxy: OK
template reload OPNsense/ProxySSO: OK
Segmentation fault
Performing sanity check on squid configuration.
2024/09/09 06:36:07| Processing Configuration File: /usr/local/etc/squid/squid.conf (depth 0)
2024/09/09 06:36:07| Starting Authentication on port 127.0.0.1:3128
2024/09/09 06:36:07| Disabling Authentication on port 127.0.0.1:3128 (interception enabled)
2024/09/09 06:36:07| Starting Authentication on port [::1]:3128
2024/09/09 06:36:07| Disabling Authentication on port [::1]:3128 (interception enabled)
2024/09/09 06:36:07| Starting Authentication on port 127.0.0.1:3129
2024/09/09 06:36:07| Disabling Authentication on port 127.0.0.1:3129 (interception enabled)
2024/09/09 06:36:07| Starting Authentication on port [::1]:3129
2024/09/09 06:36:07| Disabling Authentication on port [::1]:3129 (interception enabled)
2024/09/09 06:36:07| WARNING: empty ACL: acl bump_nobumpsites ssl::server_name "/usr/local/etc/squid/nobumpsites.acl"
2024/09/09 06:36:13| Processing Configuration File: /usr/local/etc/squid/pre-auth/20-negotiate.auth.conf (depth 1)
2024/09/09 06:36:13| Processing Configuration File: /usr/local/etc/squid/pre-auth/40-snmp.conf (depth 1)
2024/09/09 06:36:13| Processing Configuration File: /usr/local/etc/squid/pre-auth/dummy.conf (depth 1)
2024/09/09 06:36:13| Processing Configuration File: /usr/local/etc/squid/pre-auth/parentproxy.conf (depth 1)
2024/09/09 06:36:13| Processing Configuration File: /usr/local/etc/squid/auth/10-opnproxy-ext.auth.conf (depth 1)
2024/09/09 06:36:13| Processing Configuration File: /usr/local/etc/squid/auth/dummy.conf (depth 1)
2024/09/09 06:36:13| Processing Configuration File: /usr/local/etc/squid/post-auth/dummy.conf (depth 1)
2024/09/09 06:36:13| WARNING: use of 'reload-into-ims' in 'refresh_pattern' violates HTTP
2024/09/09 06:36:13| WARNING: HTTP requires the use of Via
2024/09/09 06:36:13| Set Current Directory to /var/squid/cache
Segmentation fault


Looking forward for a resolution.

Best,
VivekS
Title: Re: Error while starting squid
Post by: franco on September 09, 2024, 10:47:32 AM
DO NOT apply a patch after it has been released. This was 40 days ago...


Cheers,
Franco
Title: Re: Error while starting squid
Post by: vivekmauli14 on September 09, 2024, 02:48:59 PM
Hi franco,

The issue of Segmentation fault still persists upon reloading the service, I even updated my machine to 24.7.3_1

Code Select

template reload Deciso/Proxy: OK
template reload OPNsense/ProxySSO: OK
Segmentation fault
Performing sanity check on squid configuration.
2024/09/09 12:46:28| Processing Configuration File: /usr/local/etc/squid/squid.conf (depth 0)
2024/09/09 12:46:28| Starting Authentication on port 127.0.0.1:3128
2024/09/09 12:46:28| Disabling Authentication on port 127.0.0.1:3128 (interception enabled)
2024/09/09 12:46:28| Starting Authentication on port [::1]:3128
2024/09/09 12:46:28| Disabling Authentication on port [::1]:3128 (interception enabled)
2024/09/09 12:46:28| Starting Authentication on port 127.0.0.1:3129
2024/09/09 12:46:28| Disabling Authentication on port 127.0.0.1:3129 (interception enabled)
2024/09/09 12:46:28| Starting Authentication on port [::1]:3129
2024/09/09 12:46:28| Disabling Authentication on port [::1]:3129 (interception enabled)
2024/09/09 12:46:28| WARNING: empty ACL: acl bump_nobumpsites ssl::server_name "/usr/local/etc/squid/nobumpsites.acl"
2024/09/09 12:46:35| Processing Configuration File: /usr/local/etc/squid/pre-auth/20-negotiate.auth.conf (depth 1)
2024/09/09 12:46:35| Processing Configuration File: /usr/local/etc/squid/pre-auth/40-snmp.conf (depth 1)
2024/09/09 12:46:35| Processing Configuration File: /usr/local/etc/squid/pre-auth/dummy.conf (depth 1)
2024/09/09 12:46:35| Processing Configuration File: /usr/local/etc/squid/pre-auth/parentproxy.conf (depth 1)
2024/09/09 12:46:35| Processing Configuration File: /usr/local/etc/squid/auth/10-opnproxy-ext.auth.conf (depth 1)
2024/09/09 12:46:35| Processing Configuration File: /usr/local/etc/squid/auth/dummy.conf (depth 1)
2024/09/09 12:46:35| Processing Configuration File: /usr/local/etc/squid/post-auth/dummy.conf (depth 1)
2024/09/09 12:46:35| WARNING: use of 'reload-into-ims' in 'refresh_pattern' violates HTTP
2024/09/09 12:46:35| WARNING: HTTP requires the use of Via
2024/09/09 12:46:35| Set Current Directory to /var/squid/cache
Segmentation fault


Title: Re: Error while starting squid
Post by: franco on September 09, 2024, 02:57:11 PM
I didn't dispute that. But there's also not much I can do at this point having addressed two separate segfaults already. They seem to keep coming...


Cheers,
Franco
Title: Re: Error while starting squid
Post by: zubcho on October 05, 2024, 10:23:11 PM
Quote from: vivekmauli14 on September 09, 2024, 02:48:59 PM
Hi franco,

The issue of Segmentation fault still persists upon reloading the service, I even updated my machine to 24.7.3_1

Code Select

template reload Deciso/Proxy: OK
template reload OPNsense/ProxySSO: OK
Segmentation fault
Performing sanity check on squid configuration.
2024/09/09 12:46:28| Processing Configuration File: /usr/local/etc/squid/squid.conf (depth 0)
2024/09/09 12:46:28| Starting Authentication on port 127.0.0.1:3128
2024/09/09 12:46:28| Disabling Authentication on port 127.0.0.1:3128 (interception enabled)
2024/09/09 12:46:28| Starting Authentication on port [::1]:3128
2024/09/09 12:46:28| Disabling Authentication on port [::1]:3128 (interception enabled)
2024/09/09 12:46:28| Starting Authentication on port 127.0.0.1:3129
2024/09/09 12:46:28| Disabling Authentication on port 127.0.0.1:3129 (interception enabled)
2024/09/09 12:46:28| Starting Authentication on port [::1]:3129
2024/09/09 12:46:28| Disabling Authentication on port [::1]:3129 (interception enabled)
2024/09/09 12:46:28| WARNING: empty ACL: acl bump_nobumpsites ssl::server_name "/usr/local/etc/squid/nobumpsites.acl"
2024/09/09 12:46:35| Processing Configuration File: /usr/local/etc/squid/pre-auth/20-negotiate.auth.conf (depth 1)
2024/09/09 12:46:35| Processing Configuration File: /usr/local/etc/squid/pre-auth/40-snmp.conf (depth 1)
2024/09/09 12:46:35| Processing Configuration File: /usr/local/etc/squid/pre-auth/dummy.conf (depth 1)
2024/09/09 12:46:35| Processing Configuration File: /usr/local/etc/squid/pre-auth/parentproxy.conf (depth 1)
2024/09/09 12:46:35| Processing Configuration File: /usr/local/etc/squid/auth/10-opnproxy-ext.auth.conf (depth 1)
2024/09/09 12:46:35| Processing Configuration File: /usr/local/etc/squid/auth/dummy.conf (depth 1)
2024/09/09 12:46:35| Processing Configuration File: /usr/local/etc/squid/post-auth/dummy.conf (depth 1)
2024/09/09 12:46:35| WARNING: use of 'reload-into-ims' in 'refresh_pattern' violates HTTP
2024/09/09 12:46:35| WARNING: HTTP requires the use of Via
2024/09/09 12:46:35| Set Current Directory to /var/squid/cache
Segmentation fault


Hello,
I have the same issue + the proxy server started blocking all the sites. I have disabled and deleted all of the blocking lists with no luck. The issue temporary stopped when I renamed the /cache folder but started when I created a new one (with the same name) and restarted the service. I hope that helps.

Best regards!
Title: Re: Error while starting squid
Post by: petersk on November 09, 2024, 03:08:05 PM
Same or similar problem:
Segmentation fault
Performing sanity check on squid configuration.
2024/11/09 07:05:36| Processing Configuration File: /usr/local/etc/squid/squid.conf (depth 0)
2024/11/09 07:05:36| Starting Authentication on port 127.0.0.1:3128
2024/11/09 07:05:36| Disabling Authentication on port 127.0.0.1:3128 (interception enabled)
2024/11/09 07:05:36| Starting Authentication on port [::1]:3128
2024/11/09 07:05:36| Disabling Authentication on port [::1]:3128 (interception enabled)
2024/11/09 07:05:36| Processing Configuration File: /usr/local/etc/squid/pre-auth/40-snmp.conf (depth 1)
2024/11/09 07:05:36| Processing Configuration File: /usr/local/etc/squid/pre-auth/dummy.conf (depth 1)
2024/11/09 07:05:36| Processing Configuration File: /usr/local/etc/squid/pre-auth/parentproxy.conf (depth 1)
2024/11/09 07:05:36| Processing Configuration File: /usr/local/etc/squid/auth/dummy.conf (depth 1)
2024/11/09 07:05:36| Processing Configuration File: /usr/local/etc/squid/post-auth/dummy.conf (depth 1)
2024/11/09 07:05:36| WARNING: use of 'reload-into-ims' in 'refresh_pattern' violates HTTP
2024/11/09 07:05:36| Set Current Directory to /var/squid/cache
Segmentation fault
Title: Re: Error while starting squid
Post by: nicospavlou on November 10, 2024, 11:08:59 PM
Hello there,

I also have the same or similar problem.

You can find my logs below if it helps.

template reload Deciso/Proxy: OK

Segmentation fault
Performing sanity check on squid configuration.
2024/11/10 21:51:31| Processing Configuration File: /usr/local/etc/squid/squid.conf (depth 0)
2024/11/10 21:51:31| Starting Authentication on port 127.0.0.1:3128
2024/11/10 21:51:31| Disabling Authentication on port 127.0.0.1:3128 (interception enabled)
2024/11/10 21:51:31| Starting Authentication on port [::1]:3128
2024/11/10 21:51:31| Disabling Authentication on port [::1]:3128 (interception enabled)
2024/11/10 21:51:31| Starting Authentication on port 127.0.0.1:3129
2024/11/10 21:51:31| Disabling Authentication on port 127.0.0.1:3129 (interception enabled)
2024/11/10 21:51:31| Starting Authentication on port [::1]:3129
2024/11/10 21:51:31| Disabling Authentication on port [::1]:3129 (interception enabled)
2024/11/10 21:51:31| WARNING: empty ACL: acl bump_nobumpsites ssl::server_name "/usr/local/etc/squid/nobumpsites.acl"
2024/11/10 21:51:31| Processing Configuration File: /usr/local/etc/squid/pre-auth/40-snmp.conf (depth 1)
2024/11/10 21:51:31| Processing Configuration File: /usr/local/etc/squid/pre-auth/dummy.conf (depth 1)
2024/11/10 21:51:31| Processing Configuration File: /usr/local/etc/squid/pre-auth/parentproxy.conf (depth 1)
2024/11/10 21:51:31| Processing Configuration File: /usr/local/etc/squid/auth/10-opnproxy-ext.auth.conf (depth 1)
2024/11/10 21:51:31| Processing Configuration File: /usr/local/etc/squid/auth/dummy.conf (depth 1)
2024/11/10 21:51:31| Processing Configuration File: /usr/local/etc/squid/post-auth/dummy.conf (depth 1)
2024/11/10 21:51:31| WARNING: HTTP requires the use of Via
2024/11/10 21:51:32| Set Current Directory to /var/squid/cache
Segmentation fault


I hope for a solution soon.

Thank you for any updates.

Cheers,
Nicos
Text only | Text with Images