R u able to https filtering with squid in 2.1.5 If yes pls let me know how.
Thanks Mohan On Aug 16, 2015 2:56 AM, "Chuck Mariotti" <[email protected]> wrote: > I should point out that at one point there was a "DNS Rebind" message in > the best browser for one of the sites internally (not sure if that's > related). > > -----Original Message----- > From: List [mailto:[email protected]] On Behalf Of Chuck > Mariotti > Sent: August-15-15 1:16 PM > To: pfSense Support and Discussion Mailing List <[email protected]> > Subject: [pfSense] pfSense 2.1.5 to 2.2.4 update problems... > > I had a need to update to the latest pfSense. I had a replacement machine > with the latest 2.2.4. Took the config file from 2.1.5 and restored it... > > It got stuck on the restoring packages and I eventually unlocked and just > left it as-is. > > Swapped over the connection to the replacement and some internal websites > (https) stopped being available to the public... internally no problems. > > I looked quickly but could not find what was happening with a simple > update. So I switched it back to the original. > > I reinstalled 2.1.5 on the replacement machine... restored the config... > switched it over and all worked perfectly. > > I ran the in-place update and it completed without issues (including > packages)... but again, many internal sites not available to the public > side. > > Did I miss something in the upgrade method? There is a patch that was > previously applied but I don't think it was related and it didn't say it > was enabled. > > Fix SHA1 certs > > > http://github.com/pfsense/pfsense/commit/fd750cd064a46f364a7e06c9fe27d46ce11cd09a.patch > > Unfortunately, I did not have much time to debug since there was an > unrelated hardware failure which extended the appox downtime from 5-10mins > to about 3 hours.... So was mostly interesting it restoring things back to > normal. > > To be honest, I don't know if it was both http(s) or just https only that > was not accessible... I think it was https but it's too late to test it > again. There is a NLBS serving up some of those sites if that matters. > > Any suggestions would be greatful. > > Regards, > > Chuck > _______________________________________________ > pfSense mailing list > https://lists.pfsense.org/mailman/listinfo/list > Support the project with Gold! https://pfsense.org/gold > _______________________________________________ > pfSense mailing list > https://lists.pfsense.org/mailman/listinfo/list > Support the project with Gold! https://pfsense.org/gold > _______________________________________________ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
