Hello, I'm using Squid 2.5Stable4 compiled with --enable-linux-netfilter.
I'm also using Dansguardian for content filtering. All traffic is redirected by ipfilter to port 8080 (Dansguardian), which then forwards to 3128 if necessary. My question is about the logfiles. Both programs log all traffic. While some may consider this redundant, I enjoy the information that Dansguardian's logging provides. My problem is that in my setup, the client IP isn't logged correctly in squid's access.log. It shows up like this: 1077206929.504 307 <local squid/firewall IP> TCP_MISS/200 173 GET <remote URL> - DIRECT/<remote IP> text/plain The <local squid/firewall> is always the same, which makes it impossible for me to track down the client going by squid's access log. In the meantime, I've told Dansguardian to do squid-style logging. This works great, and the client IP shows up correctly in DG's access.log. That's great and all, but I lose DG's native logging in the process. Has anyone been through this, and is there anything I can do? I apologize if this is a DG question.. if so, just let me know and I won't bother the squid list with it again. I appreciate it.
