Remote Access Control Lists in squid not working anymore

Started by Benst, November 18, 2016, 05:52:32 PM

Previous topic - Next topic
Quote from: tillsense on December 04, 2016, 11:38:37 AM
back to 16.7.10 it's the same (all categories active) plus a error in the log:

Quote
configd.py: unable to sendback response [OK ] for [proxy][downloadacls][None] {b62421f1-b3be-4e2c-b502-366d1a140aa0}, message was Traceback (most recent call last): File "/usr/local/opnsense/service/modules/processhandler.py", line 202, in run self.connection.sendall('%s\n' % result) File "/usr/local/lib/python2.7/socket.py", line 228, in meth return getattr(self._sock,name)(*args) error: [Errno 32] Broken pipe

That's probably the same issue I have. The timeout for the GUI is set to 120 s, but the ACL script isn't finished by then.

Ben

hi,

since the upgrade to 17.1.b also works the category selection again.
It will only be blocked what is selected.  8)

(the timeout for download i have not yet tested)

cheers till

Quote from: tillsense on December 15, 2016, 07:41:50 PM
hi,

since the upgrade to 17.1.b also works the category selection again.
It will only be blocked what is selected.  8)

(the timeout for download i have not yet tested)

cheers till

too early. after a while all are blocked again ...

I've taken another look at the processing code, but I don't see an easy big performance gain there.
สมัครสมาชิก12BET
The unpacked blacklist file is approx 34MB, containing around a million lines if I saw it correctly.

Squid is very picky on the data in the lists, any duplication can lead to the proxy not starting at all, which makes sorting/de-duplication quite complex.

We could increase the timeout or detach the actual download process, but in the last case we should add some option to only download the indexes too.