Your squidguard.conf is wrong.

for squidguard 1.2.0, the word "source" should be "src" for your source
classes and "dest" (not Destination") for your destination classes.

Also. your ACL for LAN clearly states "pass any". so of course it's not
blocking. Your block rules are not inside any ACL.

Your squidGuard.conf file should be this. Notice the access controls are
encapsulated with "acl { }"

# DIRECTORIES
dbhome /usr/share/squidGuard-1.2.0/db
logdir /var/log/squidGuard

# SOURCE ADDRESSES
src lan {
        ip 192.168.0.0/24
}

# DESTINATION CLASSES

dest pornographie {
   urllist        adult/urls
   domainlist    adult/domains
}


dest audio-video {
   urllist        audio-video/urls
   domainlist    audio-video/domains
}

dest drogues {
   urllist        drugs/urls
   domainlist    drugs/domains
}

dest forums {
   urllist        forums/urls
   domainlist    forums/domains
}

dest jeux {
   urllist        gambling/urls
   domainlist    gambling/domains
}

dest hackers {
   urllist        hacking/urls
   domainlist    hacking/domains
}

dest redirecteurs {
   urllist        redirector/urls
   domainlist    redirector/domains
}

dest violence {
   urllist        violence/urls
   domainlist    violence/domains
}

dest warez {
   urllist        warez/urls
   domainlist    warez/domains
}

# ACL's

acl {
lan {
  pass !pornographie !agressif !audio-video !drogues !forums !jeux
!hackers !redirecteurs !violence !warez all
  redirect
http://www.linux-pour-lesnuls.com/squidGuard.cgi?clientaddr=%a&srcclass=%s&t
argetclass=%t&url=%u

  }

  default {
        pass none
      redirect http://www.yahoo.fr
        }
}


-----Original Message-----
From: deny1 [mailto:[EMAIL PROTECTED]
Sent: June 7, 2004 5:22 AM
To: [EMAIL PROTECTED]
Subject: [squid-users] squidguard


hi

i use squid with squidguard to refuse warez or other ads sites


despite that ,i surf without problems sites in this blacklist
 here is my squidguard.conf

# CONFIGURATION DIRECTORIES
dbhome /usr/share/squidGuard-1.2.0/db
logdir /var/log/squidGuard


source LAN {
   ip  192.168.0.0/24
}

destination pornographie {
   urllist        adult/urls
   domainlist    adult/domains
}


destination audio-video {
   urllist        audio-video/urls
   domainlist    audio-video/domains
}

destination drogues {
   urllist        drugs/urls
   domainlist    drugs/domains
}

destination forums {
   urllist        forums/urls
   domainlist    forums/domains
}

destination jeux {
   urllist        gambling/urls
   domainlist    gambling/domains
}

destination hackers {
   urllist        hacking/urls
   domainlist    hacking/domains
}

destination redirecteurs {
   urllist        redirector/urls
   domainlist    redirector/domains
}

destination violence {
   urllist        violence/urls
   domainlist    violence/domains
}

destination warez {
   urllist        warez/urls
   domainlist    warez/domains
}


LAN {
  pass !pornographie !agressif !audio-video !drogues !forums !jeux
!hackers !redirecteurs !violence !warez
  redirect
http://www.linux-pour-lesnuls.com/squidGuard.cgi?clientaddr=%a&srcclass=%s&t
argetclass=%t&url=%u

  }





acl {
 LAN {
   pass any
   redirect
http://www.linux-pour-lesnuls.com/squidGuard.cgi?clientaddr=%a&srcclass=%s&t
argetclass=%t&url=%u

 }



acl {
 default {
   redirect
http://www.linux-pour-lesnuls.com/squidGuard.cgi?clientaddr=%a&srcclass=%s&t
argetclass=%t&url=%u

   pass none
  }
}


i think its a problem about the cgi script squidguard.cgi
which don-t block anything
if i launched this script on console ,it works
but with the url
http://www.linux-pour-lesnuls.com/squidGuard.cgi
i waiting a long for a response


thanks

Reply via email to