At 21:43 09/02/2002 -0500, Rick Matthews wrote: > > -----Original Message----- > > From: Jaap Lelie > > Sent: Monday, September 02, 2002 3:02 PM > > > > This is my first posting to the list... so please forgive my ignorance... > > ;-) I will try and learn as we go. > >Hey, we're all here to learn. > > > Wazzup: > > I have implemented SquidGuard to work with the squid proxy as it is > > installed in smoothwall corp server 2.0, some of you may know the > > package. All works quite well (thanks to those responsible!), > > however I can't seem to get it working with the 'ident' option. > >Was squidGuard installed, up and running, blocking appropriately and >logging before you started implementing ident? Or did you do it all >at once?
SquidGuard was up, running and blocking, happy as a clam. > > What have I done: I have installed a service on my NT box to answer > > ident requests. I have included the 'ident_lookup on' parameter in > > squid.conf (in fact, I let a CGI script include that parameter in > > the squid.conf it generates). > > > Then, I do a proggie called 'restartsquid' which does lotsa things > > to get squid to re-read the configs etc.... > >I run 'squid -k reconfigure' to do the same thing (except I don't >have any 'proggies'). True. I did that as well too. > > Bottom line: > > Every time squid gets reinitialized, I see an error as soon as > > 'ident_lookup on' is encountered. I'm running squid 2.4 STABLE7, as > > included in corpserv 2.0, fully patched (to those whom this actually > > means anything ;-)). > >It sounds like you have a Smoothwall problem. You are running Squid >2.4 STABLE4, and the 'ident_lookup' parameter was removed way back >in the 2.2 release of Squid. (See: ><http://sunsite.bilkent.edu.tr/pub/infosystems/Squid/Versions/v2/2.2/>) > >So you need to skip the CGI script and configure it manually >(which I wouldn't recommend unless you know everything it is doing), >or you need something updated. > >The changes that I made to squid.conf for ident included: > >acl my_users ident bob carol ted alice >http_access allow my_users >acl ident_aware_hosts src 192.168.44.0/255.255.255.0 >ident_lookup_access allow ident_aware_hosts > >Hope that helps! >Rick Matthews [EMAIL PROTECTED] Sure did! Seems I'm using the wrong parameter here, I'll try the ident_lookup_access instead. Thanks for the tip !!
--- Outgoing mail is certified Virus Free. http://www.lelie.net/notice.html Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.384 / Virus Database: 216 - Release Date: 08/21/2002
msg01222/pgp00000.pgp
Description: PGP signature
