25 of 39 on in the package: ARP_ACLAUTH_NISCACHE_DIGESTSDELAY_POOLSDOCSEXAMPLESFOLLOW_XFFFS_AUFSFS_DISKDFS_ROCKGSSAPI_BASEHTCPICAPICMPIPV6KQUEUELARGEFILELAX_HTTPSNMPSSLSSL_CRTDTP_IPFWVIA_DBWCCPWCCPV2Show the 14 options that are off
o You can find the configuration files for this package in the
directory /usr/local/etc/squid.
o The default cache directory is /var/squid/cache/.
The default log directory is /var/log/squid/.
Note:
You must initialize new cache directories before you can start
squid. Do this by running "squid -z" as 'root' or 'squid'.
If your cache directories are already initialized (e.g. after an
upgrade of squid) you do not need to initialize them again.
o When using DiskD storage scheme remember to read documentation:
http://wiki.squid-cache.org/Features/DiskDaemon
and alter your kern.ipc defaults in /boot/loader.conf. DiskD will not
work reliably without this. Last recomendations were:
kern.ipc.msgmnb=8192
kern.ipc.msgssz=64
kern.ipc.msgtql=2048
o The pre-translated error pages are no longer included into the port.
If you need them install www/squid-langpack port as well.
o The default configuration will deny everyone but the local host and
local networks as defined in RFC 1918 for IPv4 and RFCs 4193 and
4291 for IPv6 access to the proxy service. Edit the "http_access
allow/deny" directives in /usr/local/etc/squid/squid.conf
to suit your needs.
o If AUTH_SQL option is set, please, don't forget to install one of
following perl modules depending on database you like:
databases/p5-DBD-mysql (MySQL)
databases/p5-DBD-mysql4 (MariaDB)
databases/p5-DBD-Pg
databases/p5-DBD-SQLite
To enable Squid, set squid_enable=yes in either
/etc/rc.conf, /etc/rc.conf.local or /etc/rc.conf.d/squid
Please see /usr/local/etc/rc.d/squid for further details.
Note:
If you just updated your Squid installation from an earlier version,
make sure to check your Squid configuration against the 3.4 default
configuration file /usr/local/etc/squid/squid.conf.sample.
/usr/local/etc/squid/squid.conf.documented is a fully annotated
configuration file you can consult for further reference.
Additionally, you should check your configuration by calling
'squid -f /path/to/squid.conf -k parse' before starting Squid.
Packages by version and architecture
latest
FreeBSD version
amd64
aarch64
i386
FreeBSD 16
7.7
7.7
–
FreeBSD 15
7.7
7.7
–
FreeBSD 14
7.7
7.7
7.7
quarterly (2026Q4)
FreeBSD version
amd64
aarch64
i386
FreeBSD 15
7.7
7.7
–
FreeBSD 14
7.7
7.7
7.7
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by pkg audit for the packaged version 7.7.
Fixed (45)
Show 45 fixed
VuXML entries whose affected range the packaged version has left.
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (428)
Kurt Jaeger (pi) · 4.11_1
www/squid: add CONFLICTS with incoming squid-devel and rework
- add delayer external acl helper to the build
- add eDirectory_userip external acl helper to the build if LDAP enabled
- add eDirectory and LDAP digest auth helpers to the build if LDAP enabled
- add DB log daemon helper to the build
- add LFS url rewrite helper to the build
- remove useless REINPLACE_CMD from post-patch
- remove DIST_SUBDIR as it's useless now
- simplify REINPLACE_CMD in post-patch-IPV6-off
- regenerate patches to make portlint happy
- reverse sort plist
PR: 246139
Submitted by: Pavel Timofeev <timp87@gmail.com> (maintainer)
www/squid: fix build on GCC architectures
Add --disable-strict-error-checking to CONFIGURE_ARGS for everyone. It adds -Werror, which is against ports tree policy and causes:
Icmp6.cc: In member function 'virtual void Icmp6::SendEcho(Ip::Address&, int, const char*, int)':
Icmp6.cc:165:72: error: converting a packed 'icmp6_hdr' pointer (alignment 1) to a 'short unsigned int' pointer (alignment 2) may result in an unaligned pointer value [-Werror=address-of-packed-member]
165 | icmp->icmp6_cksum = CheckSum((unsigned short *) icmp, icmp6_pktsize);
| ^
In file included from Icmp6.h:20,
from Icmp6.cc:18:
/usr/include/netinet/icmp6.h:72:8: note: defined here
72 | struct icmp6_hdr {
| ^~~~~~~~~
At global scope:
cc1plus: error: unrecognized command line option '-Wno-deprecated-register' [-Werror]
cc1plus: all warnings being treated as errors
PR: 241804
Approved by: timp87@gmail.com (maintainer), mentors (implicit approval)
Bump PORTREVISION for ports depending on the canonical version of GCC as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3 to GCC 9.1 under most circumstances now after revision 507371.
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.
PR: 238330
Update security/nettle to 3.5.1
- Bump PORTREVISION of dependent ports for shlib change
- Fix build of devel/pijul [1]
Changes: https://git.lysator.liu.se/nettle/nettle/blob/master/NEWS
PR: 238991
Exp-run by: antoine
Thanks to: tobik [1]
www/squid: fix build with GCC-based architectures
Add -Wno-error=stringop-truncation to CFLAGS when using GCC.
PR: 237276
Approved by: timp87@gmail.com (maintainer timeout), mat (mentor)
Differential Revision: https://reviews.freebsd.org/D20104
www/squid: Fix build with GSSAPI options
In some circumstances squid's configure script cannot detect properly which
GSSAPI is being used to build with and break build. Applied patch from
upstream ticket and also passes path of desired krb5-config to be used
during build
PR: 236959
Approved by: maintainer timeout (2 weeks)
Obtained from: https://bugs.squid-cache.org/show_bug.cgi?id=4933 (based on)
Sponsored by: Rubicon Communications, LLC (Netgate)
Fix build of www/squid and www/squid-devel with clang 8
This fixes an error with a defaulted copy constructor:
../../src/security/ServerOptions.h:38:5: error: explicitly defaulted copy constructor is implicitly deleted [-Werror,-Wdefaulted-function-deleted]
ServerOptions(const ServerOptions &) = default;
^
../../src/security/ServerOptions.h:110:29: note: copy constructor of 'ServerOptions' is implicitly deleted because field 'clientCaStack' has a deleted copy constructor
X509_NAME_STACK_Pointer clientCaStack;
^
/usr/include/c++/v1/memory:2494:3: note: copy constructor is implicitly deleted because 'unique_ptr<stack_st_X509_NAME, Security::ServerOptions::sk_X509_NAME_free_wrapper>' has a user-declared move constructor
unique_ptr(unique_ptr&& __u) noexcept
^
The copy constructor can instead be deleted.
Approved by: timp87@gmail.com (maintainer)
PR: 236210
MFH: 2019Q2
Bump PORTREVISION for ports depending on the canonical version of GCC defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t GCC 8.2 under most circumstances.
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.
PR: 231590
www/squid: fix bug in 4.3, no connections are accepted after ECONNABORTED
- without the fix, squid locks up every couple of hours, no longer
accept(2)-ing new connections, and needs to be restarted.
PR: 231950
Submitted by: Mark.Martinec@ijs.si
Reviewed by: Oleh Hushchenkov <gor@clogic.com.ua>
Approved by: Pavel Timofeev <timp87@gmail.com> (maintainer)
Obtained from: https://bugs.squid-cache.org/show_bug.cgi?id=4889
Switch default version of samba to 4.7 Samba 4.6 will be discontinued in a few weeks
Reviewed by: mat
Differential Revision: https://reviews.freebsd.org/D16904
Bump PORTREVISION for ports depending on the canonical version of GCC in the ports tree (via Mk/bsd.default-versions.mk and lang/gcc) which has now moved from GCC 6 to GCC 7 by default.
This includes ports
- featuring USE_GCC=yes or USE_GCC=any,
- featuring USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and those
- with USES=compiler specifying one of openmp, nestedfct, c11, c++0x,
c++11-lib, c++11-lang, c++14-lang, c++17-lang, or gcc-c++11-lib.
PR: 222542
www/squid: Fix configure errors for libssl
- Fix building with ports' OpenSSL/LibreSSL
- Use GSSAPI descriptions from Mk/Uses/gssapi.mk
- Use more OPTIONS features
PR: 208584
Submitted by: timp87@gmail.com (maintainer)
MFH: 2016Q2
Add conflicts against the new squid-devel port
Rework transparent proxy / firewall related options
PR: 203860
Submitted by: timp87@gmail.com (maintainer)
www/squid: Add all available official patches up to 14031
It fixes two annoying and long-standing problems:
- header forgery detection (using sslbump) leads to crash
- add chained certificates and signing certificate to
peek-then-bumped connections.
PR: 207901
MFH: 2016Q2
Submitted by: Pavel Timofeev <timp87@gmail.com> (maintainer)
Reported by: Christophe Anselme-Moizan <christophe.anselmemoizan@orange.com>