Anomaly detections for one client did not allow internet access

Hi,

suddenly one client of my network (a android handy) is dropped for the internet traffic.

When i switch off the “Anomaly detections” within the Web proxy,
the handy is getting access into the internet.

I am running on stage 185.

How can I find the reason for this and fix it.

Virus check is done on the handy. Nothing found.

Best regards
R.

If the issue depends on the Anomaly detection you should find messages in /var/log/squid/cache.log

Hi,
nothing found which has to do with “Anomaly detection” or the blocked IP within this log file.
Best regards
R.

Hello,

now all clients are no longer connected to the internet.
When I disable “Anomaly detection”, the clients can access the internet.

Best regards
R.

Read the posts from this post onwards.

https://community.ipfire.org/t/squid-was-not-started-at-rpi/11528/12

1 Like

Now there should be error messages in /var/log/messages and /var/log/squid/cache.log.
It would help, if we know these. Just in case an update of the location db removes the problem.
Can you access the internet with a ‘normal’ device in green or blue network? Smartphones sometimes have their own idea about networking.

Hello Together,

update of the location database fixed the problem.
Thanks for help.

Best regards
R.

Then we suppose, that it was just the crash of squid.
Unfortunately without new informations about the bug. :frowning:

I suppose that this was the error he received:

Jun 18 18:15:09 squid-asnbl-helper[24452] WARN: No ASNBL configured. This is acceptable as long as this script is configured to do anything, you just have been warned…
Jun 18 18:15:09 squid-asnbl-helper[24452] ERRO: Response test failed for ASNDB ‘<Database /var/lib/location/database.db>’ (tuple: (‘127.0.0.1’, ‘0’)), aborting
Jun 18 18:15:09 squid-asnbl-helper[24452] ERRO: ASN database response tests failed, aborting
2024/06/18 18:15:09 kid1| ERROR: helperHandleRead: unexpected read from external_acl_type #Hlpr54, 2 bytes ‘BH’
current master transaction: master31449
2024/06/18 18:15:09 kid1| ERROR: helperHandleRead: unexpected read from external_acl_type #Hlpr54, 1 bytes ‘’

2024/06/18 18:15:09 kid1| FATAL: The external_acl_type helpers are crashing too rapidly, need help!

Only the deactivation or uncommenting line 450 in the helper script fixed the wrong update temporarily. A short verfiy on the location db showed that even when the proxy was quiting it was tested as OK. A rename and redownload also did nothing at this time.

Luckily, we can confirm that with the latest location db, everything is working again on all systems even without a temporary solution.

1 Like