Its written clearly in the manual:
access_log <module>:<place> [<logformat name> [acl acl ...]]

In your case:
acl DENY_ACCESS http_status 403
access_log squid DENY_ACCESS

"squid" refers to a predefined logformat, see
http://www.squid-cache.org/Doc/config/logformat/


On Tue, Jul 10, 2012 at 10:23 PM, ml ml <[email protected]> wrote:
> Hello Amos,
>
> thanks. I am using Squid Version 3.1.19 and those rules:
>
> acl DENY_ACCESS http_status 403
> access_log daemon:/var/log/squid/DENY.log squid DENY_ACCESS
>
> However i get:
>
> 2012/07/10 15:18:13| aclParseAclList: ACL name 'DENY_ACCESS' not found.
> FATAL: Bungled squid.conf line 695: access_log
> daemon:/var/log/squid/DENY.log squid DENY_ACCESS
> Squid Cache (Version 3.1.19): Terminated abnormally.
>
> What am i doing wrong here?
>
> Thanks,
> Mario
>
> On Tue, Jul 10, 2012 at 2:45 PM, Amos Jeffries <[email protected]> wrote:
>> On 11/07/2012 12:25 a.m., ml ml wrote:
>>>
>>> Hello List,
>>>
>>> can i only Log/Debug TCP_DENIED/403 hits? I have a LOT of traffic and
>>> i am only interested in TCP_DENIED
>>>
>>> Thanks,
>>> Mario
>>
>>
>> http://www.squid-cache.org/Doc/config/access_log/
>>
>> Takes ACLs such as the http_status ACL.
>>
>> Amos

Reply via email to