Error while starting squid

Started by vivekmauli14, July 29, 2024, 07:30:50 AM

Previous topic - Next topic
Print
Go Down Pages1
User actions
July 29, 2024, 07:30:50 AM Last Edit: July 29, 2024, 08:34:54 AM by vivekmauli14
Hii,

I faced this following error while trying to start the squid service. Can anyone tell how can I resolve this issue ?
Find the screenshot here:

https://ibb.co/6rhqfPj

Code Select
http://proxy load error
template reload Deciso/Proxy: OK
template reload OPNsense/ProxySSO: OK
Starting squid.
CPU Usage: 6.433 seconds = 6.276 user + 0.157 sys
Maximum Resident Size: 1354512 KB
Page faults with physical i/o: 0
2024/07/29 06:21:03| Processing Configuration File: /usr/local/etc/squid/squid.conf (depth 0)
2024/07/29 06:21:03| Starting Authentication on port 127.0.0.1:3128
2024/07/29 06:21:03| Disabling Authentication on port 127.0.0.1:3128 (interception enabled)
2024/07/29 06:21:03| Starting Authentication on port [::1]:3128
2024/07/29 06:21:03| Disabling Authentication on port [::1]:3128 (interception enabled)
2024/07/29 06:21:10| Processing Configuration File: /usr/local/etc/squid/pre-auth/20-negotiate.auth.conf (depth 1)
2024/07/29 06:21:10| Processing Configuration File: /usr/local/etc/squid/pre-auth/40-snmp.conf (depth 1)
2024/07/29 06:21:10| Processing Configuration File: /usr/local/etc/squid/pre-auth/dummy.conf (depth 1)
2024/07/29 06:21:10| Processing Configuration File: /usr/local/etc/squid/pre-auth/parentproxy.conf (depth 1)
2024/07/29 06:21:10| ERROR: ACL not found: Safe_ports
2024/07/29 06:21:10| Not currently OK to rewrite swap log.
2024/07/29 06:21:10| storeDirWriteCleanLogs: Operation aborted.
2024/07/29 06:21:10| FATAL: Bungled /usr/local/etc/squid/squid.conf line 85: http_access deny !Safe_ports
2024/07/29 06:21:10| Squid Cache (Version 6.10): Terminated abnormally.
/usr/local/etc/rc.d/squid: WARNING: failed to start squid

Looking forward for a resolution.

Thanks
VivekSP
July 29, 2024, 09:38:23 AM #1
When you use the forum search just to look for "squid safe_ports" (which is the reason given for the ERROR), you will find this post:

https://forum.opnsense.org/index.php?topic=39449
Intel N100, 4 x I226-V, 16 GByte, 256 GByte NVME, ZTE F6005

1100 down / 440 up, Bufferbloat A+
July 29, 2024, 03:06:41 PM #2
Hi Meyergru,

Thanks for getting back, In the thread David says, "The solution is in the access list to put 443 as enabled"
But I am not able to understand what exactly do I need to do, It will be appreciated if you can guide me with this, as I am newbie in Squid.

Thanks,
Vivek
July 29, 2024, 08:37:58 PM #3
See attachment...
Intel N100, 4 x I226-V, 16 GByte, 256 GByte NVME, ZTE F6005

1100 down / 440 up, Bufferbloat A+
July 30, 2024, 12:05:32 PM #4
Working on a fix now.


Cheers,
Franco
July 30, 2024, 12:19:01 PM #5
https://github.com/opnsense/plugins/commit/590aabbac

# opnsense-patch -c plugins 590aabbac
# /usr/local/opnsense/mvc/script/run_migrations.php

(second line is important!)


Cheers,
Franco
September 09, 2024, 08:38:17 AM #6
Hi Franco,

I applied the patch you mentioned, but now the issue is in restarting the service, I am able to start the service however, it is again giving the Segmentation failed error.

Code Select

template reload Deciso/Proxy: OK
template reload OPNsense/ProxySSO: OK
Segmentation fault
Performing sanity check on squid configuration.
2024/09/09 06:36:07| Processing Configuration File: /usr/local/etc/squid/squid.conf (depth 0)
2024/09/09 06:36:07| Starting Authentication on port 127.0.0.1:3128
2024/09/09 06:36:07| Disabling Authentication on port 127.0.0.1:3128 (interception enabled)
2024/09/09 06:36:07| Starting Authentication on port [::1]:3128
2024/09/09 06:36:07| Disabling Authentication on port [::1]:3128 (interception enabled)
2024/09/09 06:36:07| Starting Authentication on port 127.0.0.1:3129
2024/09/09 06:36:07| Disabling Authentication on port 127.0.0.1:3129 (interception enabled)
2024/09/09 06:36:07| Starting Authentication on port [::1]:3129
2024/09/09 06:36:07| Disabling Authentication on port [::1]:3129 (interception enabled)
2024/09/09 06:36:07| WARNING: empty ACL: acl bump_nobumpsites ssl::server_name "/usr/local/etc/squid/nobumpsites.acl"
2024/09/09 06:36:13| Processing Configuration File: /usr/local/etc/squid/pre-auth/20-negotiate.auth.conf (depth 1)
2024/09/09 06:36:13| Processing Configuration File: /usr/local/etc/squid/pre-auth/40-snmp.conf (depth 1)
2024/09/09 06:36:13| Processing Configuration File: /usr/local/etc/squid/pre-auth/dummy.conf (depth 1)
2024/09/09 06:36:13| Processing Configuration File: /usr/local/etc/squid/pre-auth/parentproxy.conf (depth 1)
2024/09/09 06:36:13| Processing Configuration File: /usr/local/etc/squid/auth/10-opnproxy-ext.auth.conf (depth 1)
2024/09/09 06:36:13| Processing Configuration File: /usr/local/etc/squid/auth/dummy.conf (depth 1)
2024/09/09 06:36:13| Processing Configuration File: /usr/local/etc/squid/post-auth/dummy.conf (depth 1)
2024/09/09 06:36:13| WARNING: use of 'reload-into-ims' in 'refresh_pattern' violates HTTP
2024/09/09 06:36:13| WARNING: HTTP requires the use of Via
2024/09/09 06:36:13| Set Current Directory to /var/squid/cache
Segmentation fault


Looking forward for a resolution.

Best,
VivekS
September 09, 2024, 10:47:32 AM #7
DO NOT apply a patch after it has been released. This was 40 days ago...


Cheers,
Franco
September 09, 2024, 02:48:59 PM #8
Hi franco,

The issue of Segmentation fault still persists upon reloading the service, I even updated my machine to 24.7.3_1

Code Select

template reload Deciso/Proxy: OK
template reload OPNsense/ProxySSO: OK
Segmentation fault
Performing sanity check on squid configuration.
2024/09/09 12:46:28| Processing Configuration File: /usr/local/etc/squid/squid.conf (depth 0)
2024/09/09 12:46:28| Starting Authentication on port 127.0.0.1:3128
2024/09/09 12:46:28| Disabling Authentication on port 127.0.0.1:3128 (interception enabled)
2024/09/09 12:46:28| Starting Authentication on port [::1]:3128
2024/09/09 12:46:28| Disabling Authentication on port [::1]:3128 (interception enabled)
2024/09/09 12:46:28| Starting Authentication on port 127.0.0.1:3129
2024/09/09 12:46:28| Disabling Authentication on port 127.0.0.1:3129 (interception enabled)
2024/09/09 12:46:28| Starting Authentication on port [::1]:3129
2024/09/09 12:46:28| Disabling Authentication on port [::1]:3129 (interception enabled)
2024/09/09 12:46:28| WARNING: empty ACL: acl bump_nobumpsites ssl::server_name "/usr/local/etc/squid/nobumpsites.acl"
2024/09/09 12:46:35| Processing Configuration File: /usr/local/etc/squid/pre-auth/20-negotiate.auth.conf (depth 1)
2024/09/09 12:46:35| Processing Configuration File: /usr/local/etc/squid/pre-auth/40-snmp.conf (depth 1)
2024/09/09 12:46:35| Processing Configuration File: /usr/local/etc/squid/pre-auth/dummy.conf (depth 1)
2024/09/09 12:46:35| Processing Configuration File: /usr/local/etc/squid/pre-auth/parentproxy.conf (depth 1)
2024/09/09 12:46:35| Processing Configuration File: /usr/local/etc/squid/auth/10-opnproxy-ext.auth.conf (depth 1)
2024/09/09 12:46:35| Processing Configuration File: /usr/local/etc/squid/auth/dummy.conf (depth 1)
2024/09/09 12:46:35| Processing Configuration File: /usr/local/etc/squid/post-auth/dummy.conf (depth 1)
2024/09/09 12:46:35| WARNING: use of 'reload-into-ims' in 'refresh_pattern' violates HTTP
2024/09/09 12:46:35| WARNING: HTTP requires the use of Via
2024/09/09 12:46:35| Set Current Directory to /var/squid/cache
Segmentation fault


September 09, 2024, 02:57:11 PM #9
I didn't dispute that. But there's also not much I can do at this point having addressed two separate segfaults already. They seem to keep coming...


Cheers,
Franco
October 05, 2024, 10:23:11 PM #10
Quote from: vivekmauli14 on September 09, 2024, 02:48:59 PM
Hi franco,

The issue of Segmentation fault still persists upon reloading the service, I even updated my machine to 24.7.3_1

Code Select

template reload Deciso/Proxy: OK
template reload OPNsense/ProxySSO: OK
Segmentation fault
Performing sanity check on squid configuration.
2024/09/09 12:46:28| Processing Configuration File: /usr/local/etc/squid/squid.conf (depth 0)
2024/09/09 12:46:28| Starting Authentication on port 127.0.0.1:3128
2024/09/09 12:46:28| Disabling Authentication on port 127.0.0.1:3128 (interception enabled)
2024/09/09 12:46:28| Starting Authentication on port [::1]:3128
2024/09/09 12:46:28| Disabling Authentication on port [::1]:3128 (interception enabled)
2024/09/09 12:46:28| Starting Authentication on port 127.0.0.1:3129
2024/09/09 12:46:28| Disabling Authentication on port 127.0.0.1:3129 (interception enabled)
2024/09/09 12:46:28| Starting Authentication on port [::1]:3129
2024/09/09 12:46:28| Disabling Authentication on port [::1]:3129 (interception enabled)
2024/09/09 12:46:28| WARNING: empty ACL: acl bump_nobumpsites ssl::server_name "/usr/local/etc/squid/nobumpsites.acl"
2024/09/09 12:46:35| Processing Configuration File: /usr/local/etc/squid/pre-auth/20-negotiate.auth.conf (depth 1)
2024/09/09 12:46:35| Processing Configuration File: /usr/local/etc/squid/pre-auth/40-snmp.conf (depth 1)
2024/09/09 12:46:35| Processing Configuration File: /usr/local/etc/squid/pre-auth/dummy.conf (depth 1)
2024/09/09 12:46:35| Processing Configuration File: /usr/local/etc/squid/pre-auth/parentproxy.conf (depth 1)
2024/09/09 12:46:35| Processing Configuration File: /usr/local/etc/squid/auth/10-opnproxy-ext.auth.conf (depth 1)
2024/09/09 12:46:35| Processing Configuration File: /usr/local/etc/squid/auth/dummy.conf (depth 1)
2024/09/09 12:46:35| Processing Configuration File: /usr/local/etc/squid/post-auth/dummy.conf (depth 1)
2024/09/09 12:46:35| WARNING: use of 'reload-into-ims' in 'refresh_pattern' violates HTTP
2024/09/09 12:46:35| WARNING: HTTP requires the use of Via
2024/09/09 12:46:35| Set Current Directory to /var/squid/cache
Segmentation fault


Hello,
I have the same issue + the proxy server started blocking all the sites. I have disabled and deleted all of the blocking lists with no luck. The issue temporary stopped when I renamed the /cache folder but started when I created a new one (with the same name) and restarted the service. I hope that helps.

Best regards!
November 09, 2024, 03:08:05 PM #11
Same or similar problem:
Segmentation fault
Performing sanity check on squid configuration.
2024/11/09 07:05:36| Processing Configuration File: /usr/local/etc/squid/squid.conf (depth 0)
2024/11/09 07:05:36| Starting Authentication on port 127.0.0.1:3128
2024/11/09 07:05:36| Disabling Authentication on port 127.0.0.1:3128 (interception enabled)
2024/11/09 07:05:36| Starting Authentication on port [::1]:3128
2024/11/09 07:05:36| Disabling Authentication on port [::1]:3128 (interception enabled)
2024/11/09 07:05:36| Processing Configuration File: /usr/local/etc/squid/pre-auth/40-snmp.conf (depth 1)
2024/11/09 07:05:36| Processing Configuration File: /usr/local/etc/squid/pre-auth/dummy.conf (depth 1)
2024/11/09 07:05:36| Processing Configuration File: /usr/local/etc/squid/pre-auth/parentproxy.conf (depth 1)
2024/11/09 07:05:36| Processing Configuration File: /usr/local/etc/squid/auth/dummy.conf (depth 1)
2024/11/09 07:05:36| Processing Configuration File: /usr/local/etc/squid/post-auth/dummy.conf (depth 1)
2024/11/09 07:05:36| WARNING: use of 'reload-into-ims' in 'refresh_pattern' violates HTTP
2024/11/09 07:05:36| Set Current Directory to /var/squid/cache
Segmentation fault
November 10, 2024, 11:08:59 PM #12
Hello there,

I also have the same or similar problem.

You can find my logs below if it helps.

template reload Deciso/Proxy: OK

Segmentation fault
Performing sanity check on squid configuration.
2024/11/10 21:51:31| Processing Configuration File: /usr/local/etc/squid/squid.conf (depth 0)
2024/11/10 21:51:31| Starting Authentication on port 127.0.0.1:3128
2024/11/10 21:51:31| Disabling Authentication on port 127.0.0.1:3128 (interception enabled)
2024/11/10 21:51:31| Starting Authentication on port [::1]:3128
2024/11/10 21:51:31| Disabling Authentication on port [::1]:3128 (interception enabled)
2024/11/10 21:51:31| Starting Authentication on port 127.0.0.1:3129
2024/11/10 21:51:31| Disabling Authentication on port 127.0.0.1:3129 (interception enabled)
2024/11/10 21:51:31| Starting Authentication on port [::1]:3129
2024/11/10 21:51:31| Disabling Authentication on port [::1]:3129 (interception enabled)
2024/11/10 21:51:31| WARNING: empty ACL: acl bump_nobumpsites ssl::server_name "/usr/local/etc/squid/nobumpsites.acl"
2024/11/10 21:51:31| Processing Configuration File: /usr/local/etc/squid/pre-auth/40-snmp.conf (depth 1)
2024/11/10 21:51:31| Processing Configuration File: /usr/local/etc/squid/pre-auth/dummy.conf (depth 1)
2024/11/10 21:51:31| Processing Configuration File: /usr/local/etc/squid/pre-auth/parentproxy.conf (depth 1)
2024/11/10 21:51:31| Processing Configuration File: /usr/local/etc/squid/auth/10-opnproxy-ext.auth.conf (depth 1)
2024/11/10 21:51:31| Processing Configuration File: /usr/local/etc/squid/auth/dummy.conf (depth 1)
2024/11/10 21:51:31| Processing Configuration File: /usr/local/etc/squid/post-auth/dummy.conf (depth 1)
2024/11/10 21:51:31| WARNING: HTTP requires the use of Via
2024/11/10 21:51:32| Set Current Directory to /var/squid/cache
Segmentation fault


I hope for a solution soon.

Thank you for any updates.

Cheers,
Nicos
Cheers,
Nicos
Print
Go Up Pages1
User actions