Proxy problem after upgrade to core 155 - The proxy server is refusing connections

Networking Web Proxy
6

Hi, i have the same problem with proxy not work after upgrade 155 and IPFire normaly start.
Manualy start later over GUI work proxy fine.
Systemprotokoll 03.04.2021
Shutdown normaly
squid[31301]: Squid Parent: squid-1 process 31303 exited with status 0
squid: squid shutdown time: 6 seconds
Auto restart everyday normaly
05:03:20 squid[4855]: Squid Parent: will start 1 kids
05:03:20 squid[4855]: Squid Parent: (squid-1) process 4863 started
05:03:20 squid[4855]: Squid Parent: squid-1 process 4863 exited with status 0
Start over GUI manuell
10:56:16 squid[18039]: Squid Parent: will start 1 kids
10:56:16 squid[18039]: Squid Parent: (squid-1) process 18042 started
and now work it.

Cache.log
2021/04/03 05:03:20| Created PID file (/var/run/squid.pid)
2021/04/03 05:03:20 kid1| Current Directory is /
2021/04/03 05:03:20 kid1| Creating missing swap directories
2021/04/03 05:03:20 kid1| No cache_dir stores are configured.
2021/04/03 05:03:20| Removing PID file (/var/run/squid.pid)

2021/04/03 10:56:16| Created PID file (/var/run/squid.pid)
2021/04/03 10:56:16 kid1| Current Directory is /srv/web/ipfire/cgi-bin
2021/04/03 10:56:16 kid1| Starting Squid Cache version 4.14 for x86_64-pc-linux-gnu…
2021/04/03 10:56:16 kid1| Service Name: squid
2021/04/03 10:56:16 kid1| Process ID 18054
2021/04/03 10:56:16 kid1| Process Roles: worker
2021/04/03 10:56:16 kid1| With 16384 file descriptors available
2021/04/03 10:56:16 kid1| Initializing IP Cache…

I have no idea.

7

I just changed the proxy port in ipfire (default 800, changed to 8001), and it seems to fix the problem.

On that note, I should mention I’m also not using the default port 800 which might be why I’m unaffected.

8

I am using non-transparent proxy on Green and I am using the default port 800. I have not seen any problems since I updated to Core Update 155.

I just rebooted and the Proxy Server was still running and working afterwards.

1 Like
9

I also have strange problems with my proxy after updating to 155. Changed the port to 8001 and that solved it, until today. changed it back to 800 and it works again. So maybe restarting the proxy fixes it and not setting a specific port nr.

10

I too have had the same thing happening at multiple locations. Each firewall after a reboot require a restart of the proxy or as ive tested even as little as clicking “clear cache” in the web gui resets the proxy to work on port 800.
I tested other sites which I have yet to reboot since the initial after update reboot and cache flush run fine until until they get rebooted of course, same goes for them with something as simple as clear cache, or restart proxy via the web gui.
so thats batting 1000 so far on all that updated to 155 using default port 800, 11 so far.

11

Please follow the guidance given in the linked post below for registering the problems you are experiencing as a bug.

1 Like
12

Thanks that fixed it.

13

I still have the problem over port 800 after updating to 156. Do you have other experiences?

14

idem for me.
No solution.
Only reboot Squid/Proxy

15

I thought the problem should be fixed with update 156

16

Well that would have required someone having the problem to raise a bug as was suggested in post 10 of this thread.

I have had a look in bugzilla and there is no bug entry on this topic since 12th April.

The core devs are a small team of people and they are very busy. Things that are raised as formal bugs in bugzilla will get reviewed and if confirmed as an issue with IPFire will get assigned to be fixed.

2 Likes
18

Since it is not only me with the problem I submited a bug report:
https://bugzilla.ipfire.org/show_bug.cgi?id=12623

1 Like
19

Hi to everyone,
i’m getting this issue after upgrade to 157.

Ipfire before was 155 and everything worked fine (squid service too).

20

Hi,
i have tried to enable log management in Proxy configuration and it works.

In my case (with 157) if that option is enabled, the proxy service start correctly with reboot.
Telnet gives me access on 800 port.

21

Hi Everyone, upgraded from Core154 to 158 i have the same problem that the proxy is refusing connections.
It started after Save and restart in the GUI. Log management is still ON.
I will follow the Bugzilla post.

22

I’ve updated to 158 and it’s worse. So far it only seems to effect the ABC News app (Australia). Clearing the cache fixes it for about half an hour then the site it connects to is unavailable.

23

Good evening,
it also happened to me that after the update to 158, the proxy service does not restart automatically at every restart.
I noticed that it is flagged “Suppress version information:” and there is no way to remove it, it wasn’t there before.
I noticed that to restart the web proxy, I just need to click on a button also to clear the cache.

I have another firewall with the same version of ip-fire, same hardware but if I restart it the service starts regularly

My hardware is:
Intel J1900 with 4GB Ram and 32 GB ssd and 4 lan
IPFire 2.25 (x86_64) - Core Update 158

Giuseppe

1 Like
24

Hi all,

first, sorry for replying late on this.

Second, thanks to everyone who is contributing here. Running Squid on a bunch of x86_64 IPFire machines (some of them log queries, but most don’t), I did not observe this behaviour so far, hence I am still trying to figure out what is going on here.

My understanding so far is: We are dealing with Squid not staring properly on x86_64 systems only (but not all of them), doing so since Core Update 154 at least. Re-writing its configuration (i. e. toggling log settings or something similar) solves the issue in all cases.

This seems to be a different issue then, as every other user described Squid to be unresponsive to any query. Or did I misunderstood you?

This was my fault again. Introduced here, I thought it might be a good idea to enable this switch by default, as there is no legitimate reason why Squids version matters. That patch seems to be faulty though, ignoring user requests to actually show the version information. :expressionless:

EDIT: Bug #12665 has been raised for this one.

Anyway, I will dig deeper into this, spare time permitting. Will keep you updated.

Thanks, and best regards,
Peter Müller

2 Likes
25

Peter,
first of all thank you for the tremendous work you are doing with IPFire.

The strange thing is that I have 4 identical hardware firewalls, but only mine, luckily the one at home, has this anomaly.

All are upgrades since at least 152 none is a new install.

They don’t all have the same plugins installed, in mine there are those visible in the attachment.

I tried to remove them and it restarted everything, but the proxy doesn’t start anyway.

Many thanks
immagine

Giuseppe

26

I’m still investigating. Sometimes clearing the cache isn’t enough. Sometimes “save and restart” will work. Other times I do nothing and it seems to be working next time I check the news.

It could also be related to the occasional issue I have with “connectivity check” on ubuntu and the phones.

I believe what I’m seeing is different to the other. Sorry.