> FWIW I
> can switch to another subnet covered by this server and I am restricted
> from accessing sites that are blocked...

How are you accomplishing this? Are you changing the config file so that your ip
is listed in another source declaration? Or are you walking over to another
terminal and using it?

> the contents of "domains" which were used to create the .db file are...
> www.collierville.com
> .gov
> .mil

The 'www' shouldn't go in the domains file, but I don't think it would break
anything. But I can't say the same about the '.gov' and '.mil'. Where did you
find that capability documented? Why not take out the unknowns until it's up and
running?

> I am still able to go anywhere, even adult sites that are blocked by the
> remainder of the ACL's.

Is your ip being seen correctly? If you look at the squid access.log file do you
see 192.168.15.113 logged on each line with your activity?

Could you post your squidGuard.conf file?

Rick Matthews

> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Kevin White
> Sent: Tuesday, May 07, 2002 8:47 AM
> To: [EMAIL PROTECTED]
> Subject: RE: block everything except "good"
>
>
> I've added this like so...
>
>
> >
> > pass good none
> >
>
>
>
> my good folder has this....
>
> -rw-r--r--    1 squid    squid          85 May  6 15:48 domains
> -rw-r--r--    1 squid    squid        8192 May  7 08:28 domains.db
>
>
> the contents of "domains" which were used to create the .db file are...
>
> .ci.collierville.tn.us
> www.collierville.com
> scdag.com
> weatherbug.com
> tn.us
> .gov
> .mil
>
>
> the relevant conf file sections are....
>
> src dispatch-clients {
>         ip                 192.168.15.24 192.168.15.25 192.168.15.20
>       ip                 192.168.15.113
> }
>
> -> Note, my machine is the 113 address used to test this
> configuration....
>
>
> dest good {
>         domainlist      good/domains
> }
>
> and from the ACL
>
>
>
> dispatch-clients {
>                 pass  good none
>         }
>
>
> I am still able to go anywhere, even adult sites that are blocked by the
> remainder of the ACL's.  Any ideas on what I'm still missing?  FWIW I
> can switch to another subnet covered by this server and I am restricted
> from accessing sites that are blocked...
>
>
> logs show
>
> 2002-05-07 08:40:13 [26363] init domainlist
> /usr/local/squidGuard/db/good/domains
> 2002-05-07 08:40:13 [26363] loading dbfile
> /usr/local/squidGuard/db/good/domains.db
>
> and
>
> 2002-05-07 08:40:13 [26363] squidGuard 1.2.0 started (1020778813.016)
> 2002-05-07 08:40:13 [26363] recalculating alarm in 29987 seconds
> 2002-05-07 08:40:13 [26363] squidGuard ready for requests
> (1020778813.019)
>
> Any more ideas?
>
> Thanks for the help so far!!
>
> --
> Kevin White, Linux+, A+
> Computer Support
> Town of Collierville, TN
>
>
>

Reply via email to