pfSense » pfSense Packages

Confirmed the above fix is still functional in 2.4.4r but the default package is still broken.

As a workaround you can enable the advanced settings in the antivirus tab and make that change to the c-icap.conf file there. It then survives other changes.

This is a problem in the FreeBSD c-icap port. The port itself contains a patch that adds the ListenAddress line.

https://github.com/freebsd/freebsd-ports/blob/master/www/c-icap/files/patch-c-icap.conf.in

Suggested fix: https://github.com/stephenw10/FreeBSD-ports/commit/d21954ad3b4e44e4df6e43e88ac22d589d8cf1b7

If the FreeBSD port is wrong, though, it should be fixed upstream. Then we wouldn't need to make any changes.

Someone installing c-icap on FreeBSD will get an incorrect example config to start with.

Hi Jim,

the guy from the mailing list is me.
The "Listen" directive was removed from 0.4 to 0.5.
Upstream port should be fine.

We also had the same problem and switched in templating¹. No idea how you guys at pfsense do this.

Hope this helps you to fix it.

Michael

[1]https://github.com/opnsense/plugins/pull/658/files

The upstream port is not fine. See the file I linked. The FreeBSD port is explicitly adding the ListenAddress directive to the default c-icap.conf which is deprecated.

We can certainly fix it by altering the c-icap config, sure, but the FreeBSD port would still have a broken default config. I'd like to see a fix upstreamed no matter what we choose to do here.

upgraded to squid 0.4.44_5 but c-icap is still not starting.