[squid-users] Squid 3.4.11 crashing on FreeBSD 10 (64-bit)

[Odhiambo Washington]

On 20 January 2015 at 21:50, Amos Jeffries <squid3 at treenet.co.nz> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 21/01/2015 6:11 a.m., Odhiambo Washington wrote:
> > On 20 January 2015 at 16:16, Odhiambo Washington wrote:
> >
> > 1. I see these in cache.log
> >
> >
> > 2015/01/20 20:00:18| WARNING: no_suid: setuid(0): (1) Operation
> > not permitted 2015/01/20 20:00:18| WARNING: no_suid: setuid(0): (1)
> > Operation not permitted 2015/01/20 20:00:18| WARNING: no_suid:
> > setuid(0): (1) Operation not permitted 2015/01/20 20:00:18|
> > WARNING: no_suid: setuid(0): (1) Operation not permitted 2015/01/20
> > 20:00:18| WARNING: no_suid: setuid(0): (1) Operation not permitted
> > 2015/01/20 20:00:18| WARNING: no_suid: setuid(0): (1) Operation
> > not permitted 2015/01/20 20:00:18| WARNING: no_suid: setuid(0): (1)
> > Operation not permitted 2015/01/20 20:00:18| WARNING: no_suid:
> > setuid(0): (1) Operation not permitted 2015/01/20 20:00:18|
> > WARNING: no_suid: setuid(0): (1) Operation not permitted 2015/01/20
> > 20:00:18| WARNING: no_suid: setuid(0): (1) Operation not permitted
> > 2015/01/20 20:00:18| WARNING: no_suid: setuid(0): (1) Operation
> > not permitted 2015/01/20 20:00:18| WARNING: no_suid: setuid(0): (1)
> > Operation not permitted 2015/01/20 20:00:18| WARNING: no_suid:
> > setuid(0): (1) Operation not permitted 2015/01/20 20:00:18|
> > WARNING: no_suid: setuid(0): (1) Operation not permitted 2015/01/20
> > 20:00:18| WARNING: no_suid: setuid(0): (1) Operation not permitted
>
> Not to worry about. An artifact of how Squid runs helpers vs BSD
> default permissions for fork()ed processes. Squid is just unable to
> drop root permissions silently (for now) because the OS already did it.
>


Okay.


>
> > 2015/01/20 20:00:18| Logfile: opening log
> > stdio:/usr/local/squid/logs/access.log
> >
> >
> > But then I have no joy because of "2015/01/20 20:03:55| WARNING:
> > Forwarding loop detected for:.."
> >
> > I am almost thinking FreeBSD 9.3 would be better... I haven't seen
> > so much grief.
>
> I am beginning to wonder if the PF version may has changed in FreeBSD.
>

Perhaps I should check, because I am finding it very weird.


>
> In OpenBSD (4.6 IIRC) PF went from a version where rdr-to rules worked
> to one where only divert-to would work reliably and rdr-to only
> sometimes. It may be that the changover has finally hit FreeBSD.
>

The OpenBSD one is quite different from the FreeBSD one. They 'parted' ways
in development/syntax.


>
> > ADDENDUM: When compiled with --enable-ipf-transparent, it fails to
> > compile as follows:
> >
>
> As Yuri said, PF --enable-pf-transparent (no 'I') or IPFW
> - --enable-ipfw-transparent (note the 'W') for FreeBSD.
>

I know this. I was just mentioning. I think I believe Yuri that IPFilter
isn't in FreeBSD.
I think I am going to have to suck it in, because I am happy with it in
many servers, working nicely with Squid.



-- 
Best regards,
Odhiambo WASHINGTON,
Nairobi,KE
+254733744121/+254722743223
"I can't hear you -- I'm using the scrambler."
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20150120/f71481e0/attachment-0001.html>