I've configured squidguard here at one of our
sites, and I noticed some things about it's logging.
It doesn't seem to log ip addresses that made requests
only the network on which the request originated. I'm
sure it's something simple, also I was wondering if I
could have it log client names from ident without
filtering users by ident. My config file is as
follows.
logdir /var/log/squid
dbhome /var/db/squidguard
destination porn_expressions {
log porn_expressions
expressionlist porn_expressions/expressions
redirect http://10.254.4.20:80/porn_expressions/
}
destination bl_violence {
log violence
domainlist blacklists/violence/domains
redirect http://10.254.4.20:80/violence/
}
destination bl_gambling {
log gambling
domainlist blacklists/gambling/domains
urllist blacklists/gambling/urls
redirect http://10.254.4.20:80/gambling/
}
destination good {
domainlist good/domains
urllist good/urls
}
destination bl_proxy {
log proxy
domainlist blacklists/proxy/domains
redirect http://10.254.4.20:80/proxy/
}
destination bl_hacking {
log hacking
domainlist blacklists/hacking/domains
urllist blacklists/hacking/urls
redirect http://10.254.4.20:80/hacking/
}
destination bl_warez {
log warez
domainlist blacklists/warez/domains
urllist blacklists/warez/urls
redirect http://10.254.4.20:80/warez/
}
dest bl_porn {
log porn
domainlist blacklists/porn/domains
urllist blacklists/porn/urls
redirect http://10.254.4.20:80/pornographic/
}
acl {
default {
pass good !bl_porn !porn_expressions !bl_warez
!bl_hacking !bl_gambling !bl_violence !bl_proxy any
}
}
My log file for porn reads
2001-12-28 14:08:31 [16154] Request(default/bl_porn/-)
http://www.whitehouse.com/ 10.0.0.0/- - GET
2001-12-28 14:08:31 [16154] Request(default/bl_porn/-)
http://www.whitehouse.com/favicon.ico 10.0.0.0/- - GET
2001-12-28 14:08:36 [16154] Request(default/bl_porn/-)
http://www.bestteen.net/ 10.0.0.0/- - GET
I'm interested in finding IPs instead of networks. If
anyone knows how I can resolve this please respond,
thank you.
__________________________________________________
Do You Yahoo!?
Send FREE Valentine eCards with Yahoo! Greetings!
http://greetings.yahoo.com
