--- St John Tech Support <[EMAIL PROTECTED]> wrote:
> in your squid.conf file set
> Client_netmask 255.255.255.255 then it will log each
> IP rather then the net.
> 
> Brent
> 
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On
> Behalf Of Ryan Kather
> Sent: Tuesday, February 05, 2002 8:48 AM
> To: [EMAIL PROTECTED]
> Subject: IP Address logging.
> 
> 
>      I've configured squidguard here at one of our
> sites, and I noticed some things about it's logging.
> It doesn't seem to log ip addresses that made
> requests
> only the network on which the request originated. 
> I'm
> sure it's something simple, also I was wondering if
> I
> could have it log client names from ident without
> filtering users by ident.  My config file is as
> follows.
> 
> logdir /var/log/squid
> dbhome /var/db/squidguard
> 
> destination porn_expressions {
>       log             porn_expressions
>       expressionlist  porn_expressions/expressions
>       redirect        http://10.254.4.20:80/porn_expressions/
> }
> 
> destination bl_violence {
>       log             violence
>       domainlist      blacklists/violence/domains
>       redirect        http://10.254.4.20:80/violence/
> }
> 
> destination bl_gambling {
>       log             gambling
>       domainlist      blacklists/gambling/domains
>       urllist         blacklists/gambling/urls
>       redirect        http://10.254.4.20:80/gambling/
> }
> 
> destination good {
>       domainlist      good/domains
>       urllist         good/urls
> }
> 
> destination bl_proxy {
>       log             proxy
>       domainlist      blacklists/proxy/domains
>       redirect        http://10.254.4.20:80/proxy/
> }
> 
> destination bl_hacking {
>       log             hacking
>       domainlist      blacklists/hacking/domains
>       urllist         blacklists/hacking/urls
>       redirect        http://10.254.4.20:80/hacking/
> }
> 
> destination bl_warez {
>       log             warez
>       domainlist      blacklists/warez/domains
>       urllist         blacklists/warez/urls
>       redirect        http://10.254.4.20:80/warez/
> }
> 
> 
> dest bl_porn {
>       log             porn
>       domainlist      blacklists/porn/domains
>       urllist         blacklists/porn/urls
>       redirect        http://10.254.4.20:80/pornographic/
> }
> 
> acl {
>       default {
>               pass good !bl_porn !porn_expressions !bl_warez
> !bl_hacking !bl_gambling !bl_violence !bl_proxy any
>       }
> }
> 
> My log file for porn reads
> 2001-12-28 14:08:31 [16154]
> Request(default/bl_porn/-)
> http://www.whitehouse.com/ 10.0.0.0/- - GET
> 2001-12-28 14:08:31 [16154]
> Request(default/bl_porn/-)
> http://www.whitehouse.com/favicon.ico 10.0.0.0/- -
> GET
> 2001-12-28 14:08:36 [16154]
> Request(default/bl_porn/-)
> http://www.bestteen.net/ 10.0.0.0/- - GET
> 
> I'm interested in finding IPs instead of networks. 
> If
> anyone knows how I can resolve this please respond,
> thank you.
> 
> __________________________________________________
> Do You Yahoo!?
> Send FREE Valentine eCards with Yahoo! Greetings!
> http://greetings.yahoo.com
> 


__________________________________________________
Do You Yahoo!?
Send FREE Valentine eCards with Yahoo! Greetings!
http://greetings.yahoo.com

Reply via email to