The redirect without the 302 is what you want; it will leave the
requested url.

I think the problem is that you have tried it both ways at the same
time.

Here's a summary of the redirects in your squidGuard.conf file:

dest ads                redirect http://www.r9esd.k12.or.us/denied/blank.gif
dest adult              redirect 302:http://www.r9esd.k12.or.us/denied
dest aggressive redirect 302:http://www.r9esd.k12.or.us/denied
dest audio-video        redirect 302:http://www.r9esd.k12.or.us/denied
dest drugs              redirect 302:http://www.r9esd.k12.or.us/denied
dest forums             redirect 302:http://www.r9esd.k12.or.us/denied
dest gambling   redirect 302:http://www.r9esd.k12.or.us/denied
dest hacking    redirect 302:http://www.r9esd.k12.or.us/denied
dest mail               redirect 302:http://www.r9esd.k12.or.us/denied
dest porn               redirect 302:http://www.r9esd.k12.or.us/denied
dest proxy              redirect 302:http://www.r9esd.k12.or.us/denied
dest publicite  redirect
302:http://www.r9esd.k12.or.us/denied/blank.gif
dest redirector redirect 302:http://www.r9esd.k12.or.us/denied
dest violence   redirect 302:http://www.r9esd.k12.or.us/denied
dest warez              redirect 302:http://www.r9esd.k12.or.us/denied
dest r9esd.nonacademic  redirect
302:http://www.r9esd.k12.or.us/denied
dest r9esd.adult        redirect 302:http://www.r9esd.k12.or.us/denied
dest d12.exceptions
dest r9esd.exceptions
acl
   squidbox
      redirect 302:http://www.r9esd.k12.or.us/denied
   r9esd
      redirect http://www.r9esd.k12.or.us/denied <remove this
   d9
   hrcsd
   d12
   default
      redirect http://www.r9esd.k12.or.us/denied <remove this
-------- End ------------

Every destination group (that needs one) has a redirect. The only
redirect that you need in the ACL is for default.

Then remove the 302s and you should be good to go.

Rick Matthews


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Dave
Karlson
Sent: Monday, March 04, 2002 3:24 PM
To: [EMAIL PROTECTED]
Subject: REDIRECT vs REDIRECT 302:


Hi all,

I've got squid and squidguard working pretty well..... BUT

The one issue I am having is how the REDIRECT is working in my rules

I want the "address" in the browser to keep the 'denied URL' rather
than changing to the redirect address.

>From the documentation, I see this is (supposed to be) controlled by
adding/removing the 302: before the URL on the REDIRECT line.

However, I have tried it both ways and can't get it to work the way
I want.   REGARDLESS of the 302: (or lack there of), my 'redirect
address' (http://www.r9esd.k12.or.us/denied) ALWAYS shows up in the
address box in users' browsers.  i.e. user types www.badsite.com and
the URL is immediately changed to http://www.r9esd.k12.or.us/denied
as they are directed to the 'denied page'.

Any ideas?

my squidguard.conf is below.

THANKS!

***************************
logdir /usr/local/squidGuard/log
dbhome /usr/local/squidGuard/db
src squidbox {
   ip    [SNIP]
   }
src r9esd {
   ip    [SNIP]
   }
src d9 {
   ip    [SNIP]
   }
src hrcsd {
   ip    [SNIP]
   }
src d12 {
   ip    [SNIP]
   }
dest ads {
   domainlist ads/domains
   urllist    ads/urls
   redirect http://www.r9esd.k12.or.us/denied/blank.gif
   log ads.log
   }
dest adult {
   domainlist adult/domains
   urllist    adult/urls
   redirect 302:http://www.r9esd.k12.or.us/denied
   log denied.log
   }
dest aggressive {
   domainlist aggressive/domains
   urllist    aggressive/urls
   redirect 302:http://www.r9esd.k12.or.us/denied
   log denied.log
   }
dest audio-video {
   domainlist audio-video/domains
   urllist    audio-video/urls
   redirect 302:http://www.r9esd.k12.or.us/denied
   log denied.log
   }
dest drugs {
   domainlist drugs/domains
   urllist    drugs/urls
   redirect 302:http://www.r9esd.k12.or.us/denied
   log denied.log
   }
dest forums {
   domainlist forums/domains
   urllist    forums/urls
   redirect 302:http://www.r9esd.k12.or.us/denied
   log denied.log
   }
dest gambling {
   domainlist gambling/domains
   urllist    gambling/urls
   redirect 302:http://www.r9esd.k12.or.us/denied
   log denied.log
   }
dest hacking {
   domainlist hacking/domains
   urllist    hacking/urls
   redirect 302:http://www.r9esd.k12.or.us/denied
   log denied.log
   }
dest mail {
   domainlist mail/domains
   redirect 302:http://www.r9esd.k12.or.us/denied
   log denied.log
   }
dest porn {
   domainlist porn/domains
   urllist    porn/urls
   redirect 302:http://www.r9esd.k12.or.us/denied
   log denied.log
   }
dest proxy {
   domainlist proxy/domains
   urllist    proxy/urls
   redirect 302:http://www.r9esd.k12.or.us/denied
   log denied.log
   }
dest publicite {
   domainlist publicite/domains
   urllist    publicite/urls
   redirect 302:http://www.r9esd.k12.or.us/denied/blank.gif
   log ads.log
   }
dest redirector {
   domainlist redirector/domains
   urllist    redirector/urls
   redirect 302:http://www.r9esd.k12.or.us/denied
   log denied.log
   }
dest violence {
   domainlist violence/domains
   urllist    violence/urls
   redirect 302:http://www.r9esd.k12.or.us/denied
   log denied.log
   }
dest warez {
   domainlist warez/domains
   urllist    warez/urls
   redirect 302:http://www.r9esd.k12.or.us/denied
   log denied.log
   }
dest r9esd.nonacademic {
   domainlist r9esd.nonacademic/domains
   urllist    r9esd.nonacademic/urls
   redirect 302:http://www.r9esd.k12.or.us/denied
   log denied.log
   }
dest r9esd.adult {
   domainlist r9esd.adult/domains
   urllist    r9esd.adult/urls
   redirect 302:http://www.r9esd.k12.or.us/denied
   log denied.log
   }
dest d12.exceptions {
   domainlist d12.exceptions/domains
   urllist    d12.exceptions/urls
   log exceptions.log
   }
dest r9esd.exceptions {
   domainlist r9esd.exceptions/domains
   urllist    r9esd.exceptions/urls
   log exceptions.log
   }
acl {
   squidbox {
      pass r9esd.exceptions !r9esd.adult !r9esd.nonacademic !in-addr
!ads !adult !aggressive !drugs !forums !gambling !hacking !porn
!proxy !publicite !redirector !violence !warez all
      redirect 302:http://www.r9esd.k12.or.us/denied
      }
   r9esd {
      pass r9esd.exceptions !r9esd.adult !r9esd.nonacademic !in-addr
!ads !adult !aggressive !drugs !forums !gambling !hacking !porn
!proxy !publicite !redirector !violence !warez all
      redirect http://www.r9esd.k12.or.us/denied
      }
   d9 {
      pass r9esd.exceptions !r9esd.adult !r9esd.nonacademic !in-addr
!ads !adult !aggressive !drugs !forums !gambling !hacking !porn
!proxy !publicite !redirector !violence !warez all
      }
   hrcsd {
      pass r9esd.exceptions !r9esd.adult !r9esd.nonacademic !in-addr
!ads !adult !aggressive !drugs !forums !gambling !hacking !porn
!proxy !publicite !redirector !violence !warez all
      }
   d12 {
      pass d12.exceptions r9esd.exceptions !r9esd.adult
!r9esd.nonacademic !in-addr !ads !adult !aggressive !drugs !forums
!gambling !hacking !porn !proxy !publicite !redirector !violence
!warez all
      }
   default {
      pass none
      redirect http://www.r9esd.k12.or.us/denied
      }
 }
***************************

- Dave Karlson
  Director, Information Technology
  Region Nine Education Service District
  The Dalles, Oregon
  (voice) 541-298-3140
  (fax) 541-298-3141

Reply via email to