I found my answer. TCP_MISS/403 means that it was denied so I am blocking gator. I finally found the page that deciphers all the codes in access.log
thanks Gary ---------- Original Message ---------------------------------- From: Henrik Nordstrom <[EMAIL PROTECTED]> Date: Wed, 12 Mar 2003 08:28:57 +0100 >On Wednesday 12 March 2003 04.04, Gary Hostetler wrote: >> I do not see in the acces.log where sites that I block are denied >> access. I am especailly trying to avoid that dreaded gator.com >> which I have set up an acl to deny but when I check the log it does >> tell me Miss on the gator entries but it doesn't tell me that it >> was denied. > >Then it probably was not denied. > >> Also when I put a list of domains to deny can that list be 100 >> names long or do I need to break it up. We have about 100 sites >> that we block on our 3Coms and I would like to cut and paste that >> list into squid.conf after I put the names one after another with a >> space in between. > >Better to put them in a separate file if the list is long. > >acl to_block dstdomain "/path/to/blocklist.txt" >and blocklist.txt contains a list of domains to block, one per line. >Lines starting with a # is ignored and assumed to be comments. > >Regards >Henrik > >
