Re: Squid not starting from rc in Jail, however works when run from root as command??

Kaya Saman wrote:
Hi guys,

I've just built a new BSD server running on a Mini-ITX NAS chassis and it's working beautifully :-)

I also took the time to learn how to build jails too as this is only my second BSD build so am still really new to it although not to UNIX as I use Solaris and Linux frequently.

Anyhow I'm trying to migrate config which was on an old SPARC server running Solaris 9 with a version of Squid got from the Blastwave repos and currently I'm having major issues with it.

Basically I think I've worked through to figure out that running as user Squid or Proxy doesn't give me access to ports <1024, basically the 'well known' ports.

Here is the error message I get from Squid when trying to start it using the rc.d file:

May 31 17:47:11 proxy squid[4360]: Cannot open HTTP Port
May 31 17:47:11 proxy squid[4358]: Squid Parent: child process 4360 exited due to signal 6
May 31 17:47:14 proxy squid[4358]: Squid Parent: child process 4364 started
May 31 17:47:15 proxy squid[4364]: Cannot open HTTP Port
May 31 17:47:15 proxy squid[4358]: Squid Parent: child process 4364 exited due to signal 6
May 31 17:47:18 proxy squid[4358]: Squid Parent: child process 4367 started
May 31 17:47:18 proxy squid[4367]: Cannot open HTTP Port
May 31 17:47:18 proxy squid[4358]: Squid Parent: child process 4367 exited due to signal 6
May 31 17:47:21 proxy squid[4358]: Squid Parent: child process 4370 started
May 31 17:47:21 proxy squid[4370]: Cannot open HTTP Port
May 31 17:47:21 proxy squid[4358]: Squid Parent: child process 4370 exited due to signal 6


If however I start Squid using /usr/local/sbin/squid -NCd1 as root I get this and Squid works:

proxy# /usr/local/sbin/squid -NCd1
2010/05/31 17:55:54| Starting Squid Cache version 2.7.STABLE7 for amd64-portbld-freebsd8.0...
2010/05/31 17:55:54| Process ID 4484
2010/05/31 17:55:54| With 11095 file descriptors available
2010/05/31 17:55:54| Using kqueue for the IO loop
2010/05/31 17:55:54| Performing DNS Tests...
2010/05/31 17:55:54| Successful DNS name lookup tests...
2010/05/31 17:55:54| DNS Socket created at 0.0.0.0, port 39116, FD 6
2010/05/31 17:55:54| Adding nameserver 192.168.1.100 from /etc/resolv.conf
2010/05/31 17:55:54| Adding nameserver 192.168.1.101 from /etc/resolv.conf
2010/05/31 17:55:54| logfileOpen: opening log /var/log/squid/access.log
2010/05/31 17:55:54| Unlinkd pipe opened on FD 11
2010/05/31 17:55:54| Swap maxSize 102400 + 8192 KB, estimated 8507 objects
2010/05/31 17:55:54| Target number of buckets: 425
2010/05/31 17:55:54| Using 8192 Store buckets
2010/05/31 17:55:54| Max Mem size: 8192 KB
2010/05/31 17:55:54| Max Swap size: 102400 KB
2010/05/31 17:55:54| logfileOpen: opening log /var/log/squid/store.log
2010/05/31 17:55:54| Rebuilding storage in /usr/local/squid/cache (DIRTY)
2010/05/31 17:55:54| Using Least Load store dir selection
2010/05/31 17:55:54| Set Current Directory to /var/spool/squid
2010/05/31 17:55:54| Loaded Icons.
2010/05/31 17:55:54| Accepting accelerated HTTP connections at 192.168.1.110, port 80, FD 13.
2010/05/31 17:55:54| Accepting ICP messages at 0.0.0.0, port 3130, FD 14.
2010/05/31 17:55:54| Accepting SNMP messages on port 3401, FD 15.
2010/05/31 17:55:54| WCCP Disabled.
2010/05/31 17:55:54| Configuring x-ray Parent x-ray/80/0
2010/05/31 17:55:54| Configuring zeta-ray Parent zeta-ray/80/0
2010/05/31 17:55:54| Configuring delta-ray Parent delta-ray/80/0
2010/05/31 17:55:54| Configuring g-stat-1 Parent g-stat-1/80/0
2010/05/31 17:55:54| Ready to serve requests.
2010/05/31 17:55:54| Done reading /usr/local/squid/cache swaplog (0 entries)
2010/05/31 17:55:54| Finished rebuilding storage from disk.
2010/05/31 17:55:54| 0 Entries scanned
2010/05/31 17:55:54| 0 Invalid entries.
2010/05/31 17:55:54| 0 With invalid flags.
2010/05/31 17:55:54| 0 Objects loaded.
2010/05/31 17:55:54| 0 Objects expired.
2010/05/31 17:55:54| 0 Objects cancelled.
2010/05/31 17:55:54| 0 Duplicate URLs purged.
2010/05/31 17:55:54| 0 Swapfile clashes avoided.
2010/05/31 17:55:54| Took 0.4 seconds ( 0.0 objects/sec).
2010/05/31 17:55:54| Beginning Validation Procedure
2010/05/31 17:55:54| Completed Validation Procedure
2010/05/31 17:55:54| Validated 0 Entries
2010/05/31 17:55:54| store_swap_size = 0k
2010/05/31 17:55:55| storeLateRelease: released 0 objects



Running uname -a gives me this:

FreeBSD Zeta-Ray.optiplex-networks.com 8.0-RELEASE FreeBSD 8.0-RELEASE #0: Sat Nov 21 15:02:08 UTC 2009 root@xxxxxxxxxxxxxxxxxxxxx:/usr/obj/usr/src/sys/GENERIC amd64

and also Squid was built from ports too!!

Because I built the system in a Jail I am using this syntax to bind the port to the IP address:

http_port 192.168.1.110:80 accel defaultsite=domain.com vhost

When I mean Jail I am talking about FreeBDS Jails and not chroot syntax :-)

Can anybody offer me any advice or anywhere else to turn as I really don't know what's going on????

Many thanks!


Kaya
_______________________________________________
freebsd-questions@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@xxxxxxxxxxx"

Just to add that I've tested my config on the default Squid port, 3128 instead of port 80 using the provided http_port line above which then starts when used in conjunction with the rc script......

I'm using config based around this as a reverse proxy:

http://wiki.squid-cache.org/ConfigExamples/Reverse/MultipleWebservers

Since this is a production based system I really need to get the rc script working but not sure where to begin going about it as I seem to have one of those very specific or not too much observed problems!!

Regards,

Kaya

_______________________________________________
freebsd-questions@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • Re: Squid not starting from rc in Jail, however works when run from root as command??
    ... Anyhow I'm trying to migrate config which was on an old SPARC server ... running Solaris 9 with a version of Squid got from the Blastwave repos ... 192.168.1.110, port 80, FD 13. ... and also Squid was built from ports too!! ...
    (freebsd-questions)
  • Squid not starting from rc in Jail, however works when run from root as command??
    ... I've just built a new BSD server running on a Mini-ITX NAS chassis and it's working beautifully :-) ... Anyhow I'm trying to migrate config which was on an old SPARC server running Solaris 9 with a version of Squid got from the Blastwave repos and currently I'm having major issues with it. ... Basically I think I've worked through to figure out that running as user Squid or Proxy doesn't give me access to ports <1024, ...
    (freebsd-questions)
  • transparent Squid + pf
    ... I am trying Transparent Squid with FreeBSD 6.2. ... rdr on $ext_if proto tcp from any to any port 80 -> ... packets going out through $ext_if with source ...
    (freebsd-questions)
  • Re: Should a "squid" user have a shell?
    ... The only reason I'm not using the squid port is because I found a ... that has detailed instructions on installing squid for an Enterprise ... this if you if you want to add extra configure settings not supported ...
    (freebsd-questions)
  • Re: SELinux security alert/Squid -
    ... connect to an alternative port, while going through their proxy, before. ... Well then should it not be possible to tell SELinux that this particular ... SELinux is preventing the squid daemon from connecting to network ... SELinux has denied the squid daemon from connecting to 8180. ...
    (Fedora)