Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

www/squid - UT1 blacklist not showing category #4392

Open
gobiursus opened this issue Dec 10, 2024 · 3 comments
Open

www/squid - UT1 blacklist not showing category #4392

gobiursus opened this issue Dec 10, 2024 · 3 comments

Comments

@gobiursus
Copy link

Important notices
Before you add a new report, we ask you kindly to acknowledge the following:

Describe the bug
A clear and concise description of what the bug is, including last known working version (if any).

I was following this tutorial to set up web filtering on my OPNsense instance: https://docs.opnsense.org/manual/how-tos/proxywebfilter.html
But UT1 blacklist is not showing any category after I successfully download and apply the list.
Please help!

Expected behavior
A clear and concise description of what you expected to happen.
Show the categorizes

Environment
Software version used and hardware type if relevant.

OPNsense 24.7.10_2-amd64
QEMU Virtual CPU version 2.5+ (4 cores, 4 threads)
Network Mellanox ConnectX-3

@vnguyen1
Copy link

Yes, I have the same issue here.
And now, when I enable the Remote Blacklist UT1, I can't start the Proxy Service.
Error Code:

Starting squid.
CPU Usage: 4.279 seconds = 4.201 user + 0.079 sys
Maximum Resident Size: 1317024 KB
Page faults with physical i/o: 0
2024/12/11 16:08:15| Processing Configuration File: /usr/local/etc/squid/squid.conf (depth 0)
2024/12/11 16:08:15| Starting Authentication on port 127.0.0.1:3128
2024/12/11 16:08:15| Disabling Authentication on port 127.0.0.1:3128 (interception enabled)
2024/12/11 16:08:15| Starting Authentication on port [::1]:3128
2024/12/11 16:08:15| Disabling Authentication on port [::1]:3128 (interception enabled)
2024/12/11 16:08:15| Starting Authentication on port 127.0.0.1:3129
2024/12/11 16:08:15| Disabling Authentication on port 127.0.0.1:3129 (interception enabled)
2024/12/11 16:08:15| Starting Authentication on port [::1]:3129
2024/12/11 16:08:15| Disabling Authentication on port [::1]:3129 (interception enabled)
2024/12/11 16:08:19| ERROR: '.ai-nude.adult' is a subdomain of '.adult'
2024/12/11 16:08:19| ERROR: You need to remove '.ai-nude.adult' from the ACL named 'remoteblacklist_UT1'
2024/12/11 16:08:19| Not currently OK to rewrite swap log.
2024/12/11 16:08:19| storeDirWriteCleanLogs: Operation aborted.
2024/12/11 16:08:19| FATAL: Bungled /usr/local/etc/squid/squid.conf line 56: acl remoteblacklist_UT1 dstdomain "/usr/local/etc/squid/acl/UT1"
2024/12/11 16:08:19| Squid Cache (Version 6.10): Terminated abnormally.
/usr/local/etc/rc.d/squid: WARNING: failed to start squid

@droumanet
Copy link

Confirmed here too.
A (weird) workaround is to create multiples lists one by one.
image

By the way, what are requirement for using these functionalities? My FW become unable to pass any frame after a few moment and RAM seems 90% busy in dashboard.
My hardware is 12GB RAM, 250GB disk and Intel(R) Core(TM) i5-6500 CPU @ 3.20GHz (4 cores, 4 threads)

@AUSK1LL9
Copy link

AUSK1LL9 commented Dec 21, 2024

Can confirm, I am having the same issue. However I can not get any list to work. Even simplified list like cooking or adult. I have tried FTp HHTTPS. Recycled service, deleted and remade. Removed and re-added os-squid plugin. Same issue.
squid-6.12
OPNsense 24.7.11_2-amd64
FreeBSD 14.1-RELEASE-p6
OpenSSL 3.0.15

image

Logs:
image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

4 participants