Squid web proxy not starting

[ralus]

Hello Community

I have installed the Squid web proxy on my opnsense V.25.1.3.
I have used the following URL as Remote Access Control List.
ftp://ftp.ut-capitole.fr/pub/reseau/cache/squidguard_contrib/blacklists.tar.gz

Now when I try to start the Squid service I get the following error message:
ERROR 'ai-nude.adult' is a subdomain of '.adult'
ERROR: You need to remove 'ai-nude.adult' from the ACL named 'remoteblacklist_UT1 dstdomain "/usr/local/etc/squid/squid.conf line: 66:acl

How can I fix this error?

[gerardo.orellana]

Hi!, you cloud fix this problem?, I can't start squid in my opensense

[meyergru]

The specific problem is that both .adult and ai-nude.adult are present in the configured squid block lists.

You could argue the list is defective in containing both (if it does, IDK), you combined it with another blacklist that contains similar items or that Squid is way too defensice about this problem.

The first problem you can take to the maintainer of the blacklist, the second you can solve by using only one of the two conflicting lists, the third by complaining upstream to the Squid maintainers. None of these are original OpnSense problems.

That being said, Squid can bark for many different reasons and then, does not start. Some you can identify in the logs - one should look there and not just assume facing the same problem as someone else. It may well be a different configuration problem.