Anomaly detections for one client did not allow internet access

Networking Web Proxy
1

Hi,

suddenly one client of my network (a android handy) is dropped for the internet traffic.

When i switch off the “Anomaly detections” within the Web proxy,
the handy is getting access into the internet.

I am running on stage 185.

How can I find the reason for this and fix it.

Virus check is done on the handy. Nothing found.

Best regards
R.

2

If the issue depends on the Anomaly detection you should find messages in /var/log/squid/cache.log

3

Hi,
nothing found which has to do with “Anomaly detection” or the blocked IP within this log file.
Best regards
R.

4

Hello,

now all clients are no longer connected to the internet.
When I disable “Anomaly detection”, the clients can access the internet.

Best regards
R.

5

Read the posts from this post onwards.

https://community.ipfire.org/t/squid-was-not-started-at-rpi/11528/12

1 Like
6

Now there should be error messages in /var/log/messages and /var/log/squid/cache.log.
It would help, if we know these. Just in case an update of the location db removes the problem.
Can you access the internet with a ‘normal’ device in green or blue network? Smartphones sometimes have their own idea about networking.

7

Hello Together,

update of the location database fixed the problem.
Thanks for help.

Best regards
R.

8

Then we suppose, that it was just the crash of squid.
Unfortunately without new informations about the bug. :frowning:

9

I suppose that this was the error he received:

Jun 18 18:15:09 squid-asnbl-helper[24452] WARN: No ASNBL configured. This is acceptable as long as this script is configured to do anything, you just have been warned…
Jun 18 18:15:09 squid-asnbl-helper[24452] ERRO: Response test failed for ASNDB ‘<Database /var/lib/location/database.db>’ (tuple: (‘127.0.0.1’, ‘0’)), aborting
Jun 18 18:15:09 squid-asnbl-helper[24452] ERRO: ASN database response tests failed, aborting
2024/06/18 18:15:09 kid1| ERROR: helperHandleRead: unexpected read from external_acl_type #Hlpr54, 2 bytes ‘BH’
current master transaction: master31449
2024/06/18 18:15:09 kid1| ERROR: helperHandleRead: unexpected read from external_acl_type #Hlpr54, 1 bytes ‘’

…

2024/06/18 18:15:09 kid1| FATAL: The external_acl_type helpers are crashing too rapidly, need help!

Only the deactivation or uncommenting line 450 in the helper script fixed the wrong update temporarily. A short verfiy on the location db showed that even when the proxy was quiting it was tested as OK. A rename and redownload also did nothing at this time.

Luckily, we can confirm that with the latest location db, everything is working again on all systems even without a temporary solution.

1 Like