OPNsense Forum

English Forums => Web Proxy Filtering and Caching => Topic started by: spetrillo on June 06, 2020, 07:22:24 am

Title: Errors in Proxy Cache Log?
Post by: spetrillo on June 06, 2020, 07:22:24 am

Hello all,

I have just begun to play around with the web proxy setup and I am getting the following in the cache log:

2020-06-06T01:15:00   | FATAL: pinger: Unable to open any ICMP sockets.
2020-06-06T01:15:00   | pinger: Unable to start ICMPv6 pinger.
2020-06-06T01:15:00   | Open icmp_sock: (1) Operation not permitted
2020-06-06T01:15:00   | pinger: Unable to start ICMP pinger.
2020-06-06T01:15:00   | Open icmp_sock: (1) Operation not permitted
2020-06-06T01:15:00   | pinger: Initialising ICMP pinger ...

Should I be concerned? IPV6 is not enabled on my setup yet.

Thanks,
Steve

Title: Re: Errors in Proxy Cache Log?
Post by: duynguyen on June 07, 2020, 10:45:09 am

I have Error in Proxy Cache the same too  :-[ .I'm reboot OPN squid not start . I always start manual  Help me ? thanks

2020-06-07T15:40:11   kid1| Error negotiating SSL connection on FD 159: error:00000001:lib(0):func(0):reason(1) (1/-1)
2020-06-07T15:40:06   kid1| Error negotiating SSL connection on FD 139: error:00000001:lib(0):func(0):reason(1) (1/-1)
2020-06-07T15:40:02   kid1| Error negotiating SSL connection on FD 103: error:00000001:lib(0):func(0):reason(1) (1/-1)
2020-06-07T15:38:04   kid1| Error negotiating SSL connection on FD 232: error:00000001:lib(0):func(0):reason(1) (1/-1)
2020-06-07T15:37:59   kid1| Error negotiating SSL connection on FD 172: error:00000001:lib(0):func(0):reason(1) (1/-1)
2020-06-07T15:35:57   kid1| Error negotiating SSL connection on FD 199: error:00000001:lib(0):func(0):reason(1) (1/-1)
2020-06-07T15:35:11   | FATAL: pinger: Unable to open any ICMP sockets.
2020-06-07T15:35:11   | pinger: Unable to start ICMPv6 pinger.
2020-06-07T15:35:11   | Open icmp_sock: (1) Operation not permitted
2020-06-07T15:35:11   | pinger: Unable to start ICMP pinger.
2020-06-07T15:35:11   | Open icmp_sock: (1) Operation not permitted
2020-06-07T15:35:11   | pinger: Initialising ICMP pinger ...

Title: Re: Errors in Proxy Cache Log?
Post by: spetrillo on June 13, 2020, 04:34:37 am

Quote from: spetrillo on June 06, 2020, 07:22:24 am

Hello all,

I have just begun to play around with the web proxy setup and I am getting the following in the cache log:

2020-06-06T01:15:00   | FATAL: pinger: Unable to open any ICMP sockets.
2020-06-06T01:15:00   | pinger: Unable to start ICMPv6 pinger.
2020-06-06T01:15:00   | Open icmp_sock: (1) Operation not permitted
2020-06-06T01:15:00   | pinger: Unable to start ICMP pinger.
2020-06-06T01:15:00   | Open icmp_sock: (1) Operation not permitted
2020-06-06T01:15:00   | pinger: Initialising ICMP pinger ...

Should I be concerned? IPV6 is not enabled on my setup yet.

Thanks,
Steve

I am really concerned about this...anyone got some insight into this?

Title: Re: Errors in Proxy Cache Log?
Post by: evilgenius on July 09, 2020, 11:52:42 pm

Hi togther,

I have the same problem. Release is OPNsense 20.1.8_1. No IPv6 addresses are configured..
2020-07-09T23:43:37   | FATAL: pinger: Unable to open any ICMP sockets.
2020-07-09T23:43:37   | pinger: Unable to start ICMPv6 pinger.
2020-07-09T23:43:37   | Open icmp_sock: (1) Operation not permitted
2020-07-09T23:43:37   | pinger: Unable to start ICMP pinger.
2020-07-09T23:43:37   | Open icmp_sock: (1) Operation not permitted
2020-07-09T23:43:37   | pinger: Initialising ICMP pinger ...
2020-07-09T23:43:37   kid1| Accepting SSL bumped HTTP Socket connections at local=xxx.xxx.xxx.xxx:3128 remote=[::] FD 28 flags=9
2020-07-09T23:43:37   kid1| Finished loading MIME types and icons.
2020-07-09T23:43:37   kid1| Pinger socket opened on FD 30
2020-07-09T23:43:37   kid1| HTCP Disabled.
2020-07-09T23:43:37   kid1| helperOpenServers: Starting 5/5 'security_file_certgen' processes

Fresh installation. It looks like a permission problem:
ls -lisa /usr/local/libexec/squid/pinger
492072 192 -r-xr-xr-x  1 root  wheel  195008 May 19 06:11 /usr/local/libexec/squid/pinger
chmod 4755 /usr/local/libexec/squid/pinger
ls -lisa /usr/local/libexec/squid/pinger
492072 192 -rwsr-xr-x  1 root  wheel  195008 May 19 06:11 /usr/local/libexec/squid/pinger

Now Squid starts...
Source:
https://muhdzamri.blogspot.com/2010/12/solving-squids-pinger-error.html

Maybe that solution is a security risk, and i don't no if this is permanent (reboot persistens)
evilgenius