Squid stops working every hour at x:42:48

Hi there,

IPFIRE 2.27 Update 178

since yesterday one of our ipfires stopped to work properly.

the squid proxy stops with multiple “signal 6 with status 0” messages. and always on 42 Minute every hour.

have tested different settings, urlfilter and update-accelerator are now off, no other addons installed,

as last option i reinstalled the whole ipfire with backup-restore. The error persists.

any ideas?

19:42:49 squid[29658]: Exiting due to repeated, frequent failures
19:42:49 squid[29658]: Squid Parent: squid-1 process 3515 will not be restarted for 3600 seconds due to repeated, frequent failures
19:42:49 squid[29658]: Squid Parent: squid-1 process 3515 exited due to signal 6 with status 0
19:42:49 squid[29658]: Squid Parent: (squid-1) process 3515 started
19:42:49 squid[29658]: Squid Parent: squid-1 process 3511 exited due to signal 6 with status 0
19:42:48 squid[29658]: Squid Parent: (squid-1) process 3511 started
19:42:48 squid[29658]: Squid Parent: squid-1 process 3509 exited due to signal 6 with status 0
19:42:48 squid[29658]: Squid Parent: (squid-1) process 3509 started
19:42:48 squid[29658]: Squid Parent: squid-1 process 3507 exited due to signal 6 with status 0
19:42:48 squid[29658]: Squid Parent: (squid-1) process 3507 started
19:42:48 squid[29658]: Squid Parent: squid-1 process 3504 exited due to signal 6 with status 0
19:42:48 squid[29658]: Squid Parent: (squid-1) process 3504 started
19:42:48 squid[29658]: Squid Parent: squid-1 process 29660 exited due to signal 6 with status 0
19:08:34 squid[29658]: Squid Parent: (squid-1) process 29660 started
18:42:49 squid[9486]: Exiting due to repeated, frequent failures
18:42:49 squid[9486]: Squid Parent: squid-1 process 24163 will not be restarted for 3600 seconds due t o repeated, frequent failures
18:42:49 squid[9486]: Squid Parent: squid-1 process 24163 exited due to signal 6 with status 0
18:42:49 squid[9486]: Squid Parent: (squid-1) process 24163 started
18:42:49 squid[9486]: Squid Parent: squid-1 process 24161 exited due to signal 6 with status 0
18:42:49 squid[9486]: Squid Parent: (squid-1) process 24161 started
18:42:49 squid[9486]: Squid Parent: squid-1 process 24157 exited due to signal 6 with status 0
18:42:48 squid[9486]: Squid Parent: (squid-1) process 24157 started
18:42:48 squid[9486]: Squid Parent: squid-1 process 24155 exited due to signal 6 with status 0
18:42:48 squid[9486]: Squid Parent: (squid-1) process 24155 started
18:42:48 squid[9486]: Squid Parent: squid-1 process 24153 exited due to signal 6 with status 0
18:42:48 squid[9486]: Squid Parent: (squid-1) process 24153 started
18:42:48 squid[9486]: Squid Parent: squid-1 process 9489 exited due to signal 6 with status 0
15:44:18 squid[9486]: Squid Parent: (squid-1) process 9489 started

Are there other errors before xx:42:48 in the message log at /var/log/messages?

(for some reason this sounds familiar but I can not figure out why…)

1 Like

maybe this one?
Sep 20 20:42:06 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 20:42:06 ipfire1 unbound: [4710:0] info: server stats for thread 0: 273 queries, 233 answers from cache, 40 recursions, 26 prefetch, 0 rejected by ip ratelimiting
Sep 20 20:42:06 ipfire1 unbound: [4710:0] info: server stats for thread 0: requestlist max 2 avg 0.106061 exceeded 0 jostled 0
Sep 20 20:42:06 ipfire1 unbound: [4710:0] info: average recursion processing time 0.019037 sec
Sep 20 20:42:06 ipfire1 unbound: [4710:0] info: histogram of recursion processing times
Sep 20 20:42:06 ipfire1 unbound: [4710:0] info: [25%]=0.0057344 median[50%]=0.01536 [75%]=0.028672
Sep 20 20:42:06 ipfire1 unbound: [4710:0] info: lower(secs) upper(secs) recursions
Sep 20 20:42:06 ipfire1 unbound: [4710:0] info: 0.000000 0.000001 7
Sep 20 20:42:06 ipfire1 unbound: [4710:0] info: 0.002048 0.004096 1
Sep 20 20:42:06 ipfire1 unbound: [4710:0] info: 0.004096 0.008192 5
Sep 20 20:42:06 ipfire1 unbound: [4710:0] info: 0.008192 0.016384 8
Sep 20 20:42:06 ipfire1 unbound: [4710:0] info: 0.016384 0.032768 12
Sep 20 20:42:06 ipfire1 unbound: [4710:0] info: 0.032768 0.065536 7
Sep 20 20:42:06 ipfire1 unbound: [4710:0] notice: Restart of unbound 1.17.1.
Sep 20 20:42:06 ipfire1 unbound: [4710:0] notice: init module 0: validator
Sep 20 20:42:06 ipfire1 unbound: [4710:0] notice: init module 1: iterator
Sep 20 20:42:06 ipfire1 unbound: [4710:0] info: start of service (unbound 1.17.1).

have scrolled up, it’s the same an hour earlier

I may be going off on a small tangent so bear with me for a moment. Can you run this command to check for lot of those unbound messages?


EDIT: updated command

grep --color -e "Exiting due to repeated, frequent failures" -e "service stopped" /var/log/messages 

this is everything, have reinstalled at 15:30 Logtime, (17:30 real time / the timezone was corrected at ca 17:47, and there is no gap)

no older Logs are avaliable. but I think there was the same error.

[root@ipfire1 ~]# grep --color -e "Exiting due to repeated, frequent failures" -e "service stopped" /var/log/messages
Sep 20 15:34:08 ipfire1 unbound: [4596:0] info: service stopped (unbound 1.17.1).
Sep 20 15:34:13 ipfire1 unbound: [7397:0] info: service stopped (unbound 1.17.1).
Sep 20 15:35:45 ipfire1 unbound: [7397:0] info: service stopped (unbound 1.17.1).
Sep 20 15:37:08 ipfire1 unbound: [7397:0] info: service stopped (unbound 1.17.1).
Sep 20 15:37:49 ipfire1 unbound: [7397:0] info: service stopped (unbound 1.17.1).
Sep 20 15:38:12 ipfire1 unbound: [7397:0] info: service stopped (unbound 1.17.1).
Sep 20 15:39:35 ipfire1 unbound: [7397:0] info: service stopped (unbound 1.17.1).
Sep 20 15:40:50 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 15:40:55 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 15:42:07 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 15:42:49 ipfire1 squid[8167]: Exiting due to repeated, frequent failures
Sep 20 15:46:54 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 17:48:17 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 17:48:28 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 17:48:33 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 17:50:15 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 17:56:38 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 17:59:07 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 18:01:42 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 18:07:24 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 18:07:47 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 18:12:05 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 18:16:52 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 18:18:15 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 18:20:14 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 18:26:38 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 18:37:38 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 18:37:49 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 18:42:06 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 18:42:49 ipfire1 squid[9486]: Exiting due to repeated, frequent failures
Sep 20 18:48:17 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 18:50:11 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 18:56:34 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 19:01:46 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 19:07:51 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 19:12:09 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 19:16:56 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 19:18:14 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 19:20:13 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 19:23:36 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 19:26:36 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 19:37:47 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 19:38:04 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 19:42:10 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 19:42:49 ipfire1 squid[29658]: Exiting due to repeated, frequent failures
Sep 20 19:48:15 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 19:48:32 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 19:50:14 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 19:56:37 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 20:07:49 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 20:08:24 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 20:12:05 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 20:18:17 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 20:20:16 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 20:26:39 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 20:28:08 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 20:37:50 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 20:38:37 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 20:42:06 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 20:42:49 ipfire1 squid[6800]: Exiting due to repeated, frequent failures
Sep 20 20:48:18 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 20:50:11 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).
Sep 20 20:56:34 ipfire1 unbound: [4710:0] info: service stopped (unbound 1.17.1).

Hmmm. I have the same unbound issue (LOTS of restarts). But I do not have the squid issue.

If you can easily get to the old logs, that would be helpful to run the same command.

I’d be looking for something before the Exiting due to repeated, frequent failures errors. Maybe something like this on the old file:

grep -ve DROP -e BLKLST -e INFO  /var/log/messages | grep --color -B20 -A5 "Exiting due to repeated, frequent failures"

EDIT: This is me being lazy (sorry!). This explains the above command:

https://explainshell.com/explain?cmd=grep+-ve+DROP+-e+BLKLST+-e+INFO++%2Fvar%2Flog%2Fmessages+|+grep+--color+-B20+-A5+"Exiting+due+to+repeated%2C+frequent+failures"


EDIT2: Feel free to redact MAC or IP addresses, etc as needed.

Oops - I thought the old logs were available. My bad!

try this command for today’s log

First: Thanks for your help
second:

[root@ipfire1 ~]# grep -ve DROP -e BLKLST -e INFO  /var/log/messages | grep --color -B20 -A5 "Exiting due to repeated, frequent failures"
Sep 20 15:42:37 ipfire1 dhcpd: DHCPACK on 192.168.0.204 to xx:xx:xx:xx:xx:xx via green0
Sep 20 15:42:38 localhost.localdomain haproxy[8067]: 217.xxx.xxx.xxx:56641 [20/Sep/2023:15:41:17.066] ft_ssl_vip bk_ssl_default/server1 1/0/81291 14127 cD 40/40/39/38/0 0/0
Sep 20 15:42:38 localhost.localdomain haproxy[8067]: 217.xxx.xxx.xxx:61237 [20/Sep/2023:15:41:38.212] ft_ssl_vip bk_ssl_default/server1 1/0/60768 9874 cD 40/40/39/38/0 0/0
Sep 20 15:42:40 localhost.localdomain haproxy[8067]: 80.187.xxx.xxx:26118 [20/Sep/2023:15:42:33.992] ft_ssl_vip bk_ssl_default/server1 3542/0/6449 5740 SD 40/40/39/38/0 0/0
Sep 20 15:42:40 localhost.localdomain haproxy[8067]: 192.168.30.168:59986 [20/Sep/2023:15:41:40.435] ft_ssl_vip bk_ssl_default/server1 1/0/60029 5778 cD 39/39/38/37/0 0/0
Sep 20 15:42:41 localhost.localdomain haproxy[8067]: 80.187.xxx.xxx:26257 [20/Sep/2023:15:42:39.480] ft_ssl_vip bk_ssl_default/server1 605/1/2240 8526 -- 38/38/37/36/0 0/0
Sep 20 15:42:46 localhost.localdomain haproxy[8067]: 80.187.xxx.xxx:22472 [20/Sep/2023:15:42:45.089] ft_ssl_vip bk_ssl_default/server1 1/0/1841 6364 -- 40/40/39/38/0 0/0
Sep 20 15:42:48 ipfire1 squid[8167]: Squid Parent: squid-1 process 8169 exited due to signal 6 with status 0
Sep 20 15:42:48 ipfire1 squid[8167]: Squid Parent: (squid-1) process 9019 started
Sep 20 15:42:48 ipfire1 squid[8167]: Squid Parent: squid-1 process 9019 exited due to signal 6 with status 0
Sep 20 15:42:48 ipfire1 squid[8167]: Squid Parent: (squid-1) process 9021 started
Sep 20 15:42:48 ipfire1 squid[8167]: Squid Parent: squid-1 process 9021 exited due to signal 6 with status 0
Sep 20 15:42:48 ipfire1 squid[8167]: Squid Parent: (squid-1) process 9023 started
Sep 20 15:42:49 ipfire1 squid[8167]: Squid Parent: squid-1 process 9023 exited due to signal 6 with status 0
Sep 20 15:42:49 ipfire1 squid[8167]: Squid Parent: (squid-1) process 9026 started
Sep 20 15:42:49 localhost.localdomain haproxy[8067]: 80.187.xxx.xxx:22519 [20/Sep/2023:15:42:47.170] ft_ssl_vip bk_ssl_default/server1 98/0/2018 7505 -- 40/40/39/38/0 0/0
Sep 20 15:42:49 ipfire1 squid[8167]: Squid Parent: squid-1 process 9026 exited due to signal 6 with status 0
Sep 20 15:42:49 ipfire1 squid[8167]: Squid Parent: (squid-1) process 9028 started
Sep 20 15:42:49 ipfire1 squid[8167]: Squid Parent: squid-1 process 9028 exited due to signal 6 with status 0
Sep 20 15:42:49 ipfire1 squid[8167]: Squid Parent: squid-1 process 9028 will not be restarted for 3600 seconds due to repeated, frequent failures
Sep 20 15:42:49 ipfire1 squid[8167]: Exiting due to repeated, frequent failures
Sep 20 15:42:50 localhost.localdomain haproxy[8067]: xx.xxx.xxx.xxx:53876 [20/Sep/2023:15:41:16.020] ft_ssl_vip bk_ssl_default/server1 1/1/94825 67334 cD 40/40/39/38/0 0/0
Sep 20 15:42:50 localhost.localdomain haproxy[8067]: xx.xxx.xxx.xxx:53877 [20/Sep/2023:15:41:16.023] ft_ssl_vip bk_ssl_default/server1 1/0/94822 144318 cD 39/39/38/37/0 0/0
Sep 20 15:42:50 localhost.localdomain haproxy[8067]: xx.xxx.xxx.xxx:53902 [20/Sep/2023:15:41:50.827] ft_ssl_vip bk_ssl_default/server1 1/0/60153 3492 cD 38/38/37/36/0 0/0
Sep 20 15:42:50 localhost.localdomain haproxy[8067]: xx.xxx.xxx.xxx:53903 [20/Sep/2023:15:41:50.824] ft_ssl_vip bk_ssl_default/server1 1/0/60164 3492 cD 37/37/36/35/0 0/0
Sep 20 15:42:51 localhost.localdomain haproxy[8067]: 80.187.xxx.xxx:28267 [20/Sep/2023:15:42:51.168] ft_ssl_vip bk_ssl_default/server1 8/1/398 6416 -- 37/37/36/35/0 0/0
--
Sep 20 18:42:37 ipfire1 dhcpd: DHCPREQUEST for 192.168.0.204 from xx:xx:xx:xx:xx:xx via green0
Sep 20 18:42:37 ipfire1 dhcpd: DHCPACK on 192.168.0.204 to xx:xx:xx:xx:xx:xx via green0
Sep 20 18:42:38 localhost.localdomain haproxy[8067]: 80.187.xxx.xxx:21458 [20/Sep/2023:16:41:37.903] ft_ssl_vip bk_ssl_default/server1 19/1/60270 5778 cD 22/22/21/21/0 0/0
Sep 20 18:42:45 localhost.localdomain haproxy[8067]: 80.187.xxx.xxx:11311 [20/Sep/2023:16:41:45.356] ft_ssl_vip bk_ssl_default/server1 1/0/60276 5778 cD 21/21/20/20/0 0/0
Sep 20 18:42:46 localhost.localdomain haproxy[8067]: 46.223.x.xxx:14791 [20/Sep/2023:16:42:46.558] ft_ssl_vip bk_ssl_default/server1 5/1/231 6276 -- 21/21/20/20/0 0/0
Sep 20 18:42:48 localhost.localdomain haproxy[8067]: 80.187.xx.xxx:9700 [20/Sep/2023:16:42:47.613] ft_ssl_vip bk_ssl_default/server1 10/0/494 6406 -- 22/22/21/21/0 0/0
Sep 20 18:42:48 ipfire1 squid[9486]: Squid Parent: squid-1 process 9489 exited due to signal 6 with status 0
Sep 20 18:42:48 ipfire1 squid[9486]: Squid Parent: (squid-1) process 24153 started
Sep 20 18:42:48 ipfire1 squid[9486]: Squid Parent: squid-1 process 24153 exited due to signal 6 with status 0
Sep 20 18:42:48 ipfire1 squid[9486]: Squid Parent: (squid-1) process 24155 started
Sep 20 18:42:48 ipfire1 squid[9486]: Squid Parent: squid-1 process 24155 exited due to signal 6 with status 0
Sep 20 18:42:48 ipfire1 squid[9486]: Squid Parent: (squid-1) process 24157 started
Sep 20 18:42:49 localhost.localdomain haproxy[8067]: xx.xxx.xxx.xxx:54108 [20/Sep/2023:16:41:48.863] ft_ssl_vip bk_ssl_default/server1 2/1/60172 7487 cD 22/22/21/21/0 0/0
Sep 20 18:42:49 ipfire1 squid[9486]: Squid Parent: squid-1 process 24157 exited due to signal 6 with status 0
Sep 20 18:42:49 ipfire1 squid[9486]: Squid Parent: (squid-1) process 24161 started
Sep 20 18:42:49 localhost.localdomain haproxy[8067]: xx.xxx.xxx.xxx:54109 [20/Sep/2023:16:41:48.863] ft_ssl_vip bk_ssl_default/server1 2/1/60181 7486 cD 21/21/20/20/0 0/0
Sep 20 18:42:49 ipfire1 squid[9486]: Squid Parent: squid-1 process 24161 exited due to signal 6 with status 0
Sep 20 18:42:49 ipfire1 squid[9486]: Squid Parent: (squid-1) process 24163 started
Sep 20 18:42:49 ipfire1 squid[9486]: Squid Parent: squid-1 process 24163 exited due to signal 6 with status 0
Sep 20 18:42:49 ipfire1 squid[9486]: Squid Parent: squid-1 process 24163 will not be restarted for 3600 seconds due to repeated, frequent failures
Sep 20 18:42:49 ipfire1 squid[9486]: Exiting due to repeated, frequent failures
Sep 20 18:42:55 localhost.localdomain haproxy[8067]: 80.187.67.121:9778 [20/Sep/2023:16:42:48.684] ft_ssl_vip bk_ssl_default/server1 10/0/7218 6389 -- 22/22/21/20/0 0/0
Sep 20 18:43:00 localhost.localdomain haproxy[8067]: 93.199.127.88:44224 [20/Sep/2023:16:42:55.034] ft_ssl_vip bk_ssl_default/server2 4/1/5220 6426 -- 22/22/21/0/0 0/0
Sep 20 18:43:05 localhost.localdomain haproxy[8067]: 80.187.67.121:10490 [20/Sep/2023:16:43:05.697] ft_ssl_vip bk_ssl_default/server1 8/0/263 6585 -- 22/22/21/21/0 0/0
Sep 20 18:43:06 localhost.localdomain haproxy[8067]: 80.187.67.121:10504 [20/Sep/2023:16:43:06.012] ft_ssl_vip bk_ssl_default/server1 3/0/271 6234 -- 22/22/21/21/0 0/0
Sep 20 18:43:07 localhost.localdomain haproxy[8067]: 80.187.67.121:10143 [20/Sep/2023:16:42:55.634] ft_ssl_vip bk_ssl_default/server1 19/1/12288 6390 -- 22/22/21/21/0 0/0
--
Sep 20 19:42:20 ipfire1 dhcpd: DHCPREQUEST for 192.168.50.102 from 00:19:99:d2:64:e9 via blue0
Sep 20 19:42:20 ipfire1 dhcpd: DHCPACK on 192.168.50.102 to 00:19:99:d2:64:e9 via blue0
Sep 20 19:42:21 localhost.localdomain haproxy[8067]: 93.199.xxx.xx:37438 [20/Sep/2023:17:42:16.098] ft_ssl_vip bk_ssl_default/server2 5/1/5254 6436 -- 15/15/14/0/0 0/0
Sep 20 19:42:30 localhost.localdomain haproxy[8067]: 93.199.xxx.xx:45992 [20/Sep/2023:17:42:25.270] ft_ssl_vip bk_ssl_default/server2 3/1/5240 6426 -- 19/19/18/0/0 0/0
Sep 20 19:42:37 ipfire1 dhcpd: DHCPREQUEST for 192.168.0.204 from xx:xx:xx:xx:xx:xx via green0
Sep 20 19:42:37 ipfire1 dhcpd: DHCPACK on 192.168.0.204 to xx:xx:xx:xx:xx:xx via green0
Sep 20 19:42:40 localhost.localdomain haproxy[8067]: 52.97.150.117:20321 [20/Sep/2023:17:41:40.464] ft_ssl_vip bk_ssl_default/server1 4/1/60105 3501 cD 18/18/17/17/0 0/0
Sep 20 19:42:47 localhost.localdomain haproxy[8067]: 79.248.215.146:54899 [20/Sep/2023:17:41:47.189] ft_ssl_vip bk_ssl_default/server1 1/1/60164 5820 cD 17/17/16/16/0 0/0
Sep 20 19:42:48 ipfire1 squid[29658]: Squid Parent: squid-1 process 29660 exited due to signal 6 with status 0
Sep 20 19:42:48 ipfire1 squid[29658]: Squid Parent: (squid-1) process 3504 started
Sep 20 19:42:48 ipfire1 squid[29658]: Squid Parent: squid-1 process 3504 exited due to signal 6 with status 0
Sep 20 19:42:48 ipfire1 squid[29658]: Squid Parent: (squid-1) process 3507 started
Sep 20 19:42:48 ipfire1 squid[29658]: Squid Parent: squid-1 process 3507 exited due to signal 6 with status 0
Sep 20 19:42:48 ipfire1 squid[29658]: Squid Parent: (squid-1) process 3509 started
Sep 20 19:42:48 ipfire1 squid[29658]: Squid Parent: squid-1 process 3509 exited due to signal 6 with status 0
Sep 20 19:42:48 ipfire1 squid[29658]: Squid Parent: (squid-1) process 3511 started
Sep 20 19:42:49 ipfire1 squid[29658]: Squid Parent: squid-1 process 3511 exited due to signal 6 with status 0
Sep 20 19:42:49 ipfire1 squid[29658]: Squid Parent: (squid-1) process 3515 started
Sep 20 19:42:49 ipfire1 squid[29658]: Squid Parent: squid-1 process 3515 exited due to signal 6 with status 0
Sep 20 19:42:49 ipfire1 squid[29658]: Squid Parent: squid-1 process 3515 will not be restarted for 3600 seconds due to repeated, frequent failures
Sep 20 19:42:49 ipfire1 squid[29658]: Exiting due to repeated, frequent failures
Sep 20 19:43:00 localhost.localdomain haproxy[8067]: 93.199.xxx.xx:35836 [20/Sep/2023:17:42:55.260] ft_ssl_vip bk_ssl_default/server2 5/0/5213 6426 -- 17/17/16/0/0 0/0
Sep 20 19:43:14 ipfire1 dhcpd: DHCPREQUEST for 192.168.1.85 from 00:22:33:44:55:a5 via green0
Sep 20 19:43:14 ipfire1 dhcpd: DHCPACK on 192.168.1.85 to aa:bb:cc:44:55:55 via green0
Sep 20 19:43:18 localhost.localdomain haproxy[8067]: 217.xxx.xxx.xxx:57501 [20/Sep/2023:17:42:18.308] ft_ssl_vip bk_ssl_default/server1 1/0/60161 5820 cD 16/16/15/15/0 0/0
Sep 20 19:43:22 localhost.localdomain haproxy[8067]: 46.223.x.xxx:36943 [20/Sep/2023:17:42:22.722] ft_ssl_vip bk_ssl_default/server1 5/1/60121 5820 cD 15/15/14/14/0 0/0
--
Sep 20 20:42:27 localhost.localdomain haproxy[8067]: xx.xxx.xxx.xxx:54792 [20/Sep/2023:18:41:27.673] ft_ssl_vip bk_ssl_default/server1 2/0/60187 7582 cD 15/15/14/14/0 0/0
Sep 20 20:42:30 localhost.localdomain haproxy[8067]: 80.187.xxx.xxx:26214 [20/Sep/2023:18:42:30.356] ft_ssl_vip bk_ssl_default/server1 9/0/377 6233 -- 15/15/14/14/0 0/0
Sep 20 20:42:31 localhost.localdomain haproxy[8067]: 80.187.xxx.xxx:26224 [20/Sep/2023:18:42:30.777] ft_ssl_vip bk_ssl_default/server1 16/1/300 6234 -- 15/15/14/14/0 0/0
Sep 20 20:42:31 localhost.localdomain haproxy[8067]: 80.187.xxx.xxx:26240 [20/Sep/2023:18:42:31.126] ft_ssl_vip bk_ssl_default/server1 8/1/310 6235 -- 15/15/14/14/0 0/0
Sep 20 20:42:31 localhost.localdomain haproxy[8067]: 80.187.xxx.xxx:26252 [20/Sep/2023:18:42:31.482] ft_ssl_vip bk_ssl_default/server1 9/0/334 6234 -- 15/15/14/14/0 0/0
Sep 20 20:42:34 localhost.localdomain haproxy[8067]: 80.134.xxx.xxx:60422 [20/Sep/2023:18:41:34.798] ft_ssl_vip bk_ssl_default/server1 1/0/60163 5778 cD 14/14/13/13/0 0/0
Sep 20 20:42:36 ipfire1 dhcpd: DHCPREQUEST for 192.168.0.204 from xx:xx:xx:xx:xx:xx via green0
Sep 20 20:42:36 ipfire1 dhcpd: DHCPACK on 192.168.0.204 to xx:xx:xx:xx:xx:xx via green0
Sep 20 20:42:48 ipfire1 squid[6800]: Squid Parent: squid-1 process 6803 exited due to signal 6 with status 0
Sep 20 20:42:48 ipfire1 squid[6800]: Squid Parent: (squid-1) process 14307 started
Sep 20 20:42:48 ipfire1 squid[6800]: Squid Parent: squid-1 process 14307 exited due to signal 6 with status 0
Sep 20 20:42:48 ipfire1 squid[6800]: Squid Parent: (squid-1) process 14309 started
Sep 20 20:42:48 ipfire1 squid[6800]: Squid Parent: squid-1 process 14309 exited due to signal 6 with status 0
Sep 20 20:42:48 ipfire1 squid[6800]: Squid Parent: (squid-1) process 14311 started
Sep 20 20:42:49 ipfire1 squid[6800]: Squid Parent: squid-1 process 14311 exited due to signal 6 with status 0
Sep 20 20:42:49 ipfire1 squid[6800]: Squid Parent: (squid-1) process 14313 started
Sep 20 20:42:49 ipfire1 squid[6800]: Squid Parent: squid-1 process 14313 exited due to signal 6 with status 0
Sep 20 20:42:49 ipfire1 squid[6800]: Squid Parent: (squid-1) process 14317 started
Sep 20 20:42:49 ipfire1 squid[6800]: Squid Parent: squid-1 process 14317 exited due to signal 6 with status 0
Sep 20 20:42:49 ipfire1 squid[6800]: Squid Parent: squid-1 process 14317 will not be restarted for 3600 seconds due to repeated, frequent failures
Sep 20 20:42:49 ipfire1 squid[6800]: Exiting due to repeated, frequent failures
Sep 20 20:43:06 localhost.localdomain haproxy[8067]: 217.xxx.xxx.xxx:63535 [20/Sep/2023:18:42:06.629] ft_ssl_vip bk_ssl_default/server1 1/1/60145 6018 cD 15/15/14/14/0 0/0
Sep 20 20:43:07 localhost.localdomain haproxy[8067]: 217.xxx.xxx.xxx:63540 [20/Sep/2023:18:42:06.873] ft_ssl_vip bk_ssl_default/server1 1/0/60677 14973 cD 14/14/13/13/0 0/0
Sep 20 20:43:14 ipfire1 dhcpd: DHCPREQUEST for 192.168.1.85 from 00:22:33:44:55:a5 via green0
Sep 20 20:43:14 ipfire1 dhcpd: DHCPACK on 192.168.1.85 to aa:bb:cc:44:55:55 via green0
Sep 20 20:43:16 ipfire1 sshd[14400]: Accepted password for root from 192.168.1.4 port 37982 ssh2

the older ones are purged due to reinstall, may be they are in the backup…

have checked the logs befor reinstall:

there is some openvpn net2net error with an expired connection, but this one doesnt exist at all
the actual n2n is named just PBC not PBXn2n as before, it seems to be a part of an old config

Sep 20 16:48:09 ipfire1 PBXn2n[8381]: TLS: tls_process: killed expiring key
Sep 20 16:48:10 ipfire1 PBXn2n[8381]: TLS: soft reset sec=3600/3600 bytes=219427838/-1 pkts=526526/0
Sep 20 16:48:10 ipfire1 PBXn2n[8381]: VERIFY OK: depth=1, C=DE, ST=Deutschland, L=CITY, O=CONTOSO Co. KG, CN=CONTOSO Co. KG CA, emailAddress=admin@contoso.com
Sep 20 16:48:10 ipfire1 PBXn2n[8381]: VERIFY OK: depth=0, C=DE, ST=Deutschland, O=CONTOSO Co. KG, CN=pbx
Sep 20 16:48:10 ipfire1 PBXn2n[8381]: Outgoing Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
Sep 20 16:48:10 ipfire1 PBXn2n[8381]: Outgoing Data Channel: Using 512 bit message hash 'SHA512' for HMAC authentication
Sep 20 16:48:10 ipfire1 PBXn2n[8381]: Incoming Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
Sep 20 16:48:10 ipfire1 PBXn2n[8381]: Incoming Data Channel: Using 512 bit message hash 'SHA512' for HMAC authentication
Sep 20 16:48:10 ipfire1 PBXn2n[8381]: Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 2048 bit RSA, signature: RSA-SHA256
Sep 20 16:48:15 ipfire1 openvpnserver[8269]: wws25/192.168.50.25:63269 VERIFY SCRIPT OK: depth=1, C=DE, ST=Deutschland, L=CITY, O=CONTOSO Co. KG, CN=CONTOSO Co. KG CA, emailAddress=admin@contoso.com
Sep 20 16:48:15 ipfire1 openvpnserver[8269]: wws25/192.168.50.25:63269 VERIFY OK: depth=1, C=DE, ST=Deutschland, L=CITY, O=CONTOSO Co. KG, CN=CONTOSO Co. KG CA, emailAddress=admin@contoso.com
Sep 20 16:48:15 ipfire1 openvpnserver[8269]: wws25/192.168.50.25:63269 VERIFY SCRIPT OK: depth=0, C=DE, ST=Deutschland, O=CONTOSO Co. KG, CN=wws25
Sep 20 16:48:15 ipfire1 openvpnserver[8269]: wws25/192.168.50.25:63269 VERIFY OK: depth=0, C=DE, ST=Deutschland, O=CONTOSO Co. KG, CN=wws25
Sep 20 16:48:15 ipfire1 openvpnserver[8269]: wws25/192.168.50.25:63269 peer info: IV_VER=2.5.7
Sep 20 16:48:15 ipfire1 openvpnserver[8269]: wws25/192.168.50.25:63269 peer info: IV_PLAT=win
Sep 20 16:48:15 ipfire1 openvpnserver[8269]: wws25/192.168.50.25:63269 peer info: IV_PROTO=6
Sep 20 16:48:15 ipfire1 openvpnserver[8269]: wws25/192.168.50.25:63269 peer info: IV_NCP=2
Sep 20 16:48:15 ipfire1 openvpnserver[8269]: wws25/192.168.50.25:63269 peer info: IV_CIPHERS=AES-256-GCM:AES-128-GCM:AES-256-CBC
Sep 20 16:48:15 ipfire1 openvpnserver[8269]: wws25/192.168.50.25:63269 peer info: IV_LZ4=1
Sep 20 16:48:15 ipfire1 openvpnserver[8269]: wws25/192.168.50.25:63269 peer info: IV_LZ4v2=1
Sep 20 16:48:15 ipfire1 openvpnserver[8269]: wws25/192.168.50.25:63269 peer info: IV_LZO=1
Sep 20 16:48:15 ipfire1 openvpnserver[8269]: wws25/192.168.50.25:63269 peer info: IV_COMP_STUB=1
Sep 20 16:48:15 ipfire1 openvpnserver[8269]: wws25/192.168.50.25:63269 peer info: IV_COMP_STUBv2=1
Sep 20 16:48:15 ipfire1 openvpnserver[8269]: wws25/192.168.50.25:63269 peer info: IV_TCPNL=1
Sep 20 16:48:15 ipfire1 openvpnserver[8269]: wws25/192.168.50.25:63269 TLS: Username/Password authentication deferred for username '' 
Sep 20 16:48:15 ipfire1 openvpnserver[8269]: wws25/192.168.50.25:63269 Outgoing Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
Sep 20 16:48:15 ipfire1 openvpnserver[8269]: wws25/192.168.50.25:63269 Outgoing Data Channel: Using 512 bit message hash 'SHA512' for HMAC authentication
Sep 20 16:48:15 ipfire1 openvpnserver[8269]: wws25/192.168.50.25:63269 Incoming Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
Sep 20 16:48:15 ipfire1 openvpnserver[8269]: wws25/192.168.50.25:63269 Incoming Data Channel: Using 512 bit message hash 'SHA512' for HMAC authentication
Sep 20 16:48:15 ipfire1 openvpnserver[8269]: MANAGEMENT: CMD 'client-auth-nt 1 8'
Sep 20 16:48:15 ipfire1 openvpnserver[8269]: wws25/192.168.50.25:63269 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 2048 bit RSA, signature: RSA-SHA256
Sep 20 16:48:18 ipfire1 unbound: [4625:0] info: service stopped (unbound 1.17.1).

now i go to sleep and try to come online in the afternoon, I’m on business trip an will not be able to try to solve this or search for errors.

THIS is what I was looking for!

Do you have SquidClamAV installed?

and this:

1 Like

Hi, still there :slight_smile: but this is the last post for today.
This threads I’ve read before I posted my Request, but they are not the solution for my problem

Do you have SquidClamAV installed?

no, only addon I have is Haproxy to manage External Access to our different services on Port 443 with only one IP

1 Like

Hmmmm. I’ve run out of ideas. Hopefully someone with more skills will stop by and add their comments.

I am guessing here but it might help others to take a screenshot of this WebGUI page:

https://ipfire.localdomain:444/cgi-bin/proxy.cgi

It is at the menu Network > Web Proxy.

1 Like

the problem has now become smaller. The proxy does not hang so often now. Today it occurred only once. Yesterday not at all.
very strange…