I apologize... I wrote that in a rush and I shouldn't have. Here's the corrected version: ------------------------------------------------
The redirect without the 302 is what you want; it will leave the requested url showing in the browser address window. I think you might have been getting unpredictable results because it looks like you were trying it both ways at the same time. Here's a summary of the redirects in your squidGuard.conf file: dest ads redirect http://www.r9esd.k12.or.us/denied/blank.gif dest adult redirect 302:http://www.r9esd.k12.or.us/denied dest aggressive redirect 302:http://www.r9esd.k12.or.us/denied dest audio-video redirect 302:http://www.r9esd.k12.or.us/denied dest drugs redirect 302:http://www.r9esd.k12.or.us/denied dest forums redirect 302:http://www.r9esd.k12.or.us/denied dest gambling redirect 302:http://www.r9esd.k12.or.us/denied dest hacking redirect 302:http://www.r9esd.k12.or.us/denied dest mail redirect 302:http://www.r9esd.k12.or.us/denied dest porn redirect 302:http://www.r9esd.k12.or.us/denied dest proxy redirect 302:http://www.r9esd.k12.or.us/denied dest publicite redirect 302:http://www.r9esd.k12.or.us/denied/blank.gif dest redirector redirect 302:http://www.r9esd.k12.or.us/denied dest violence redirect 302:http://www.r9esd.k12.or.us/denied dest warez redirect 302:http://www.r9esd.k12.or.us/denied dest r9esd.nonacademic redirect 302:http://www.r9esd.k12.or.us/denied dest r9esd.adult redirect 302:http://www.r9esd.k12.or.us/denied dest d12.exceptions dest r9esd.exceptions acl squidbox redirect 302:http://www.r9esd.k12.or.us/denied <remove this r9esd redirect http://www.r9esd.k12.or.us/denied <remove this d9 hrcsd d12 default redirect http://www.r9esd.k12.or.us/denied <leave this one -------- End ------------ Every destination group (that needs one) has a redirect. The only redirect that you need in the ACL is for default. Then remove the 302s from the redirects and you should be good to go. Again, sorry about the previous post. Rick Matthews -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Dave Karlson Sent: Monday, March 04, 2002 3:24 PM To: [EMAIL PROTECTED] Subject: REDIRECT vs REDIRECT 302: Hi all, I've got squid and squidguard working pretty well..... BUT The one issue I am having is how the REDIRECT is working in my rules I want the "address" in the browser to keep the 'denied URL' rather than changing to the redirect address. >From the documentation, I see this is (supposed to be) controlled by adding/removing the 302: before the URL on the REDIRECT line. However, I have tried it both ways and can't get it to work the way I want. REGARDLESS of the 302: (or lack there of), my 'redirect address' (http://www.r9esd.k12.or.us/denied) ALWAYS shows up in the address box in users' browsers. i.e. user types www.badsite.com and the URL is immediately changed to http://www.r9esd.k12.or.us/denied as they are directed to the 'denied page'. Any ideas? my squidguard.conf is below. THANKS! *************************** logdir /usr/local/squidGuard/log dbhome /usr/local/squidGuard/db src squidbox { ip [SNIP] } src r9esd { ip [SNIP] } src d9 { ip [SNIP] } src hrcsd { ip [SNIP] } src d12 { ip [SNIP] } dest ads { domainlist ads/domains urllist ads/urls redirect http://www.r9esd.k12.or.us/denied/blank.gif log ads.log } dest adult { domainlist adult/domains urllist adult/urls redirect 302:http://www.r9esd.k12.or.us/denied log denied.log } dest aggressive { domainlist aggressive/domains urllist aggressive/urls redirect 302:http://www.r9esd.k12.or.us/denied log denied.log } dest audio-video { domainlist audio-video/domains urllist audio-video/urls redirect 302:http://www.r9esd.k12.or.us/denied log denied.log } dest drugs { domainlist drugs/domains urllist drugs/urls redirect 302:http://www.r9esd.k12.or.us/denied log denied.log } dest forums { domainlist forums/domains urllist forums/urls redirect 302:http://www.r9esd.k12.or.us/denied log denied.log } dest gambling { domainlist gambling/domains urllist gambling/urls redirect 302:http://www.r9esd.k12.or.us/denied log denied.log } dest hacking { domainlist hacking/domains urllist hacking/urls redirect 302:http://www.r9esd.k12.or.us/denied log denied.log } dest mail { domainlist mail/domains redirect 302:http://www.r9esd.k12.or.us/denied log denied.log } dest porn { domainlist porn/domains urllist porn/urls redirect 302:http://www.r9esd.k12.or.us/denied log denied.log } dest proxy { domainlist proxy/domains urllist proxy/urls redirect 302:http://www.r9esd.k12.or.us/denied log denied.log } dest publicite { domainlist publicite/domains urllist publicite/urls redirect 302:http://www.r9esd.k12.or.us/denied/blank.gif log ads.log } dest redirector { domainlist redirector/domains urllist redirector/urls redirect 302:http://www.r9esd.k12.or.us/denied log denied.log } dest violence { domainlist violence/domains urllist violence/urls redirect 302:http://www.r9esd.k12.or.us/denied log denied.log } dest warez { domainlist warez/domains urllist warez/urls redirect 302:http://www.r9esd.k12.or.us/denied log denied.log } dest r9esd.nonacademic { domainlist r9esd.nonacademic/domains urllist r9esd.nonacademic/urls redirect 302:http://www.r9esd.k12.or.us/denied log denied.log } dest r9esd.adult { domainlist r9esd.adult/domains urllist r9esd.adult/urls redirect 302:http://www.r9esd.k12.or.us/denied log denied.log } dest d12.exceptions { domainlist d12.exceptions/domains urllist d12.exceptions/urls log exceptions.log } dest r9esd.exceptions { domainlist r9esd.exceptions/domains urllist r9esd.exceptions/urls log exceptions.log } acl { squidbox { pass r9esd.exceptions !r9esd.adult !r9esd.nonacademic !in-addr !ads !adult !aggressive !drugs !forums !gambling !hacking !porn !proxy !publicite !redirector !violence !warez all redirect 302:http://www.r9esd.k12.or.us/denied } r9esd { pass r9esd.exceptions !r9esd.adult !r9esd.nonacademic !in-addr !ads !adult !aggressive !drugs !forums !gambling !hacking !porn !proxy !publicite !redirector !violence !warez all redirect http://www.r9esd.k12.or.us/denied } d9 { pass r9esd.exceptions !r9esd.adult !r9esd.nonacademic !in-addr !ads !adult !aggressive !drugs !forums !gambling !hacking !porn !proxy !publicite !redirector !violence !warez all } hrcsd { pass r9esd.exceptions !r9esd.adult !r9esd.nonacademic !in-addr !ads !adult !aggressive !drugs !forums !gambling !hacking !porn !proxy !publicite !redirector !violence !warez all } d12 { pass d12.exceptions r9esd.exceptions !r9esd.adult !r9esd.nonacademic !in-addr !ads !adult !aggressive !drugs !forums !gambling !hacking !porn !proxy !publicite !redirector !violence !warez all } default { pass none redirect http://www.r9esd.k12.or.us/denied } } *************************** - Dave Karlson Director, Information Technology Region Nine Education Service District The Dalles, Oregon (voice) 541-298-3140 (fax) 541-298-3141
