OPNsense Forum

English Forums => Web Proxy Filtering and Caching => Topic started by: teo88 on October 10, 2024, 04:56:12 PM

Title: SSL Inspection Squid with ICAP not working / Proxy load error
Post by: teo88 on October 10, 2024, 04:56:12 PM
Hello,

after update to 24.7.6 SSL Inspection with Squid / ICAP Plugin not working. Trying to restart Squid Service get an Proxy load error:

Segmentation fault
Performing sanity check on squid configuration.
2024/10/10 16:53:17| Processing Configuration File: /usr/local/etc/squid/squid.conf (depth 0)
2024/10/10 16:53:17| Starting Authentication on port 127.0.0.1:3128
2024/10/10 16:53:17| Disabling Authentication on port 127.0.0.1:3128 (interception enabled)
2024/10/10 16:53:17| Starting Authentication on port [::1]:3128
2024/10/10 16:53:17| Disabling Authentication on port [::1]:3128 (interception enabled)
2024/10/10 16:53:17| Starting Authentication on port 127.0.0.1:3129
2024/10/10 16:53:17| Disabling Authentication on port 127.0.0.1:3129 (interception enabled)
2024/10/10 16:53:17| Starting Authentication on port [::1]:3129
2024/10/10 16:53:17| Disabling Authentication on port [::1]:3129 (interception enabled)
2024/10/10 16:53:17| Processing Configuration File: /usr/local/etc/squid/pre-auth/40-snmp.conf (depth 1)
2024/10/10 16:53:17| Processing Configuration File: /usr/local/etc/squid/pre-auth/dummy.conf (depth 1)
2024/10/10 16:53:17| Processing Configuration File: /usr/local/etc/squid/pre-auth/parentproxy.conf (depth 1)
2024/10/10 16:53:17| Processing Configuration File: /usr/local/etc/squid/auth/dummy.conf (depth 1)
2024/10/10 16:53:17| Processing Configuration File: /usr/local/etc/squid/post-auth/dummy.conf (depth 1)


How to Solve?
Title: Re: SSL Inspection Squid with ICAP not working / Proxy load error
Post by: teo88 on October 22, 2024, 09:23:28 AM
Still have the Squid Proxy Error and no SSL Inspection, AV Filter not working. ClamAV Log just show a warning
Warning   freshclam   Invalid DNS reply. Falling back to HTTP mode.

Any suggestions how can i solve this?
Thx
Title: Re: SSL Inspection Squid with ICAP not working / Proxy load error
Post by: teo88 on October 24, 2024, 12:24:45 PM
Updated today to Opnsense Version 24.7.7

AV Filtering is now working again, Squid Proxy Load Error still persist...

Another new Issue now is a Warning in ClamAV Log:

2024-10-24T10:58:47   Warning   freshclam   Can't download blurl.ndb from http://ftp.swin.edu.au/sanesecurity/blurl.ndb   
2024-10-24T10:58:47   Warning   freshclam   Message: Could not resolve hostname   
2024-10-24T10:58:47   Warning   freshclam   Download failed (6)   
2024-10-24T10:58:42   Warning   freshclam   Can't download blurl.ndb from http://ftp.swin.edu.au/sanesecurity/blurl.ndb   
2024-10-24T10:58:42   Warning   freshclam   Message: Could not resolve hostname   
2024-10-24T10:58:42   Warning   freshclam   Download failed (6)