Hi,
>How can I find which group is blocking the domain (could be mail or eva,
however don't find
>anything). I also looked on ip, however cannot find where it is being
blocked.
Best bet is to set squidguard up to log what's blocked, and then just grep
the logs. Not pretty, but it works.
For example, in your squidguard.conf you'd have something like:
dest thisgroup {
domainlist thisgroup/domains
log thisgroup.log
redirect http://whatever/
}
Changing 'thisgroup' as appropriate. You can then grep the logs for the
site, e.g.
grep blockedsite *log
and you'll get a response like:
/logs/squidguard/notbus.log:2002-05-02 16:55:04 [22005]
Request(itstaff/notbus/-) http://www.ebay.co.uk/ 10.0.0.1/- - GET
the "Request" shows that the source group was 'itstaff' and the destination
group was 'notbus'.
Hope this helps. When I get round to it I plan to do a nice tidy script to
do this...
Nik
PS I'd welcome suggestions as to a better way to do this.
Can somebody forward me some hints? For unblocking just remove it from the
list, or do I need to restart squidguard.
regards,
./koen
This message has been checked by KONE Corporation for the presence of
computer viruses
