cd /usr/local/squidGuard/db
grep urlthatisblocked.com -i */domains */urls | less
If that doesn't get it then you're probably matching an
expression-list. Look at the redirect error that clients are getting
(the standard cgi tells them what category they're blocked under)
On Wed, 2002-05-15 at 03:30, Nik Barron wrote:
> Hi,
>
> >How can I find which group is blocking the domain (could be mail or eva,
> however don't find
> >anything). I also looked on ip, however cannot find where it is being
> blocked.
>
> Best bet is to set squidguard up to log what's blocked, and then just grep
> the logs. Not pretty, but it works.
>
> For example, in your squidguard.conf you'd have something like:
>
> dest thisgroup {
> domainlist thisgroup/domains
> log thisgroup.log
> redirect http://whatever/
> }
>
> Changing 'thisgroup' as appropriate. You can then grep the logs for the
> site, e.g.
>
> grep blockedsite *log
>
> and you'll get a response like:
>
> /logs/squidguard/notbus.log:2002-05-02 16:55:04 [22005]
> Request(itstaff/notbus/-) http://www.ebay.co.uk/ 10.0.0.1/- - GET
>
> the "Request" shows that the source group was 'itstaff' and the destination
> group was 'notbus'.
>
> Hope this helps. When I get round to it I plan to do a nice tidy script to
> do this...
>
> Nik
>
> PS I'd welcome suggestions as to a better way to do this.
>
>
> Can somebody forward me some hints? For unblocking just remove it from the
> list, or do I need to restart squidguard.
> regards,
> ./koen
> This message has been checked by KONE Corporation for the presence of
> computer viruses
