After reading
through most of the postings, I still can't figure out why squidguard doesn't
block any urls. I'm running berkeley 3.2.9 and I've give permission to the
squidgurad dirs. I did notice this recouring problem in my squid cache
log:
2002/09/20 07:40:43| Starting Squid Cache
version 2.4.STABLE4 for i586-mandrake-linux-gnu...
2002/09/20 07:40:43| Process ID 4669
2002/09/20 07:40:43| With 1024 file descriptors available
2002/09/20 07:40:43| DNS Socket created on FD 4
2002/09/20 07:40:43| Adding nameserver 205.233.109.40 from squid.conf
2002/09/20 07:40:43| helperOpenServers: Starting 5 'squidGuard' processes
2002/09/20 07:40:43| User-Agent logging is disabled.
2002-09-20 07:40:43 [4670] (squidGuard): can't write to logfile /var/log/squidGuard/log/squidGuard.log
2002-09-20 07:40:43 [4672] (squidGuard): can't write to logfile /var/log/squidGuard/log/squidGuard.log
2002-09-20 07:40:43 [4671] (squidGuard): can't write to logfile /var/log/squidGuard/log/squidGuard.log
2002-09-20 07:40:43 [4673] (squidGuard): can't write to logfile /var/log/squidGuard/log/squidGuard.log
2002-09-20 07:40:43 [4674] (squidGuard): can't write to logfile /var/log/squidGuard/log/squidGuard.log
2002-09-20 07:40:43 [4670] parse error in configfile /etc/squid/squidguard.conf line 14
2002-09-20 07:40:43 [4670] going into emergency mode
2002-09-20 07:40:43 [4671] parse error in configfile /etc/squid/squidguard.conf line 14
2002-09-20 07:40:43 [4671] going into emergency mode
2002-09-20 07:40:43 [4672] parse error in configfile /etc/squid/squidguard.conf line 14
2002-09-20 07:40:43 [4672] going into emergency mode
2002-09-20 07:40:43 [4674] parse error in configfile /etc/squid/squidguard.conf line 14
2002-09-20 07:40:43 [4673] parse error in configfile /etc/squid/squidguard.conf line 14
2002-09-20 07:40:43 [4674] going into emergency mode
2002-09-20 07:40:43 [4673] going into emergency mode
2002/09/20 07:40:43| Unlinkd pipe opened on FD 14
2002/09/20 07:40:43| Swap maxSize 102400 KB, estimated 7876 objects
2002/09/20 07:40:43| Target number of buckets: 393
2002/09/20 07:40:43| Using 8192 Store buckets
2002/09/20 07:40:43| Max Mem size: 8192 KB
2002/09/20 07:40:43| Max Swap size: 102400 KB
2002/09/20 07:40:43| Rebuilding storage in /var/spool/squid (CLEAN)
2002/09/20 07:40:43| Using Least Load store dir selection
2002/09/20 07:40:43| Set Current Directory to /var/spool/squid
2002/09/20 07:40:43| Loaded Icons.
2002/09/20 07:40:44| Accepting HTTP connections at 0.0.0.0, port 3328, FD 16.
2002/09/20 07:40:44| Accepting ICP messages at 0.0.0.0, port 3130, FD 17.
2002/09/20 07:40:44| Accepting HTCP messages on port 4827, FD 18.
2002/09/20 07:40:44| Accepting SNMP messages on port 3401, FD 19.
2002/09/20 07:40:44| WCCP Disabled.
2002/09/20 07:40:44| Ready to serve requests.
2002/09/20 07:40:44| Store rebuilding is 80.6% complete
2002/09/20 07:40:44| Done reading /var/spool/squid swaplog (5084 entries)
2002/09/20 07:40:44| Finished rebuilding storage from disk.
2002/09/20 07:40:44| 5084 Entries scanned
2002/09/20 07:40:44| 0 Invalid entries.
2002/09/20 07:40:44| 0 With invalid flags.
2002/09/20 07:40:44| 5084 Objects loaded.
2002/09/20 07:40:44| 0 Objects expired.
2002/09/20 07:40:44| 0 Objects cancelled.
2002/09/20 07:40:44| 0 Duplicate URLs purged.
2002/09/20 07:40:44| 0 Swapfile clashes avoided.
2002/09/20 07:40:44| Took 0.9 seconds (5436.0 objects/sec).
2002/09/20 07:40:44| Beginning Validation Procedure
2002/09/20 07:40:44| Completed Validation Procedure
2002/09/20 07:40:44| Validated 5084 Entries
2002/09/20 07:40:44| store_swap_size = 65448k
2002/09/20 07:40:44| storeLateRelease: released 0 objects
2002/09/20 07:40:43| Process ID 4669
2002/09/20 07:40:43| With 1024 file descriptors available
2002/09/20 07:40:43| DNS Socket created on FD 4
2002/09/20 07:40:43| Adding nameserver 205.233.109.40 from squid.conf
2002/09/20 07:40:43| helperOpenServers: Starting 5 'squidGuard' processes
2002/09/20 07:40:43| User-Agent logging is disabled.
2002-09-20 07:40:43 [4670] (squidGuard): can't write to logfile /var/log/squidGuard/log/squidGuard.log
2002-09-20 07:40:43 [4672] (squidGuard): can't write to logfile /var/log/squidGuard/log/squidGuard.log
2002-09-20 07:40:43 [4671] (squidGuard): can't write to logfile /var/log/squidGuard/log/squidGuard.log
2002-09-20 07:40:43 [4673] (squidGuard): can't write to logfile /var/log/squidGuard/log/squidGuard.log
2002-09-20 07:40:43 [4674] (squidGuard): can't write to logfile /var/log/squidGuard/log/squidGuard.log
2002-09-20 07:40:43 [4670] parse error in configfile /etc/squid/squidguard.conf line 14
2002-09-20 07:40:43 [4670] going into emergency mode
2002-09-20 07:40:43 [4671] parse error in configfile /etc/squid/squidguard.conf line 14
2002-09-20 07:40:43 [4671] going into emergency mode
2002-09-20 07:40:43 [4672] parse error in configfile /etc/squid/squidguard.conf line 14
2002-09-20 07:40:43 [4672] going into emergency mode
2002-09-20 07:40:43 [4674] parse error in configfile /etc/squid/squidguard.conf line 14
2002-09-20 07:40:43 [4673] parse error in configfile /etc/squid/squidguard.conf line 14
2002-09-20 07:40:43 [4674] going into emergency mode
2002-09-20 07:40:43 [4673] going into emergency mode
2002/09/20 07:40:43| Unlinkd pipe opened on FD 14
2002/09/20 07:40:43| Swap maxSize 102400 KB, estimated 7876 objects
2002/09/20 07:40:43| Target number of buckets: 393
2002/09/20 07:40:43| Using 8192 Store buckets
2002/09/20 07:40:43| Max Mem size: 8192 KB
2002/09/20 07:40:43| Max Swap size: 102400 KB
2002/09/20 07:40:43| Rebuilding storage in /var/spool/squid (CLEAN)
2002/09/20 07:40:43| Using Least Load store dir selection
2002/09/20 07:40:43| Set Current Directory to /var/spool/squid
2002/09/20 07:40:43| Loaded Icons.
2002/09/20 07:40:44| Accepting HTTP connections at 0.0.0.0, port 3328, FD 16.
2002/09/20 07:40:44| Accepting ICP messages at 0.0.0.0, port 3130, FD 17.
2002/09/20 07:40:44| Accepting HTCP messages on port 4827, FD 18.
2002/09/20 07:40:44| Accepting SNMP messages on port 3401, FD 19.
2002/09/20 07:40:44| WCCP Disabled.
2002/09/20 07:40:44| Ready to serve requests.
2002/09/20 07:40:44| Store rebuilding is 80.6% complete
2002/09/20 07:40:44| Done reading /var/spool/squid swaplog (5084 entries)
2002/09/20 07:40:44| Finished rebuilding storage from disk.
2002/09/20 07:40:44| 5084 Entries scanned
2002/09/20 07:40:44| 0 Invalid entries.
2002/09/20 07:40:44| 0 With invalid flags.
2002/09/20 07:40:44| 5084 Objects loaded.
2002/09/20 07:40:44| 0 Objects expired.
2002/09/20 07:40:44| 0 Objects cancelled.
2002/09/20 07:40:44| 0 Duplicate URLs purged.
2002/09/20 07:40:44| 0 Swapfile clashes avoided.
2002/09/20 07:40:44| Took 0.9 seconds (5436.0 objects/sec).
2002/09/20 07:40:44| Beginning Validation Procedure
2002/09/20 07:40:44| Completed Validation Procedure
2002/09/20 07:40:44| Validated 5084 Entries
2002/09/20 07:40:44| store_swap_size = 65448k
2002/09/20 07:40:44| storeLateRelease: released 0 objects
I'm running squid as
squid and have give full permission to all squidguard dirs despite what this log
is indicating. Here's my squidguard.conf file:
#----------------------------------------------------------------
# SquidGuard CONFIGURATION FILE
#----------------------------------------------------------------
# CONFIGURATION DIRECTORIES
dbhome /usr/share/squidGuard-1.2.0/db
logdir /var/log/squidGuard
# TIME RULES:
# abbrev for weekdays:
# s = sun, m = mon, t =tue, w = wed, h = thu, f = fri, a = sat
# SOURCE ADDRESSES:
source {
}
time test {
weekly * 08:00 - 16:00
}
source privileged {
}
source bannedsource within test {
ip 10.0.0.0/24
ip 10.0.0.0-10.110.110.0
ip 10.10.11.1
iplist bannedsource/ips
}
source lansource within test {
ip 10.0.0.0/24
ip 10.10.11.1
ip 10.0.0.0-10.110.110.0
iplist lansource/lan
}
# DESTINATION CLASSES:
destination bl_warez {
}
destination bl_violence {
}
destination bl_proxy {
}
destination bl_porn {
}
destination bl_hacking {
}
destination bl_gambling {
}
destination bl_drugs {
}
destination bl_audio-video {
}
destination bl_aggressive {
}
destination bl_ads {
}
destination porn within test {
domainlist porn/domains
urllist porn/urls
expressionlist porn/expressions
}
dest adult {
domainlist adult/domains
urllist adult/urls
expressionlist adult/expressions
}
dest audio-video {
domainlist audio-video/domains
urllist audio-video/urls
}
dest forums {
domainlist forums/domains
urllist forums/urls
expressionlist forums/expressions
}
dest hacking {
domainlist hacking/domains
urllist hacking/urls
}
dest redirector {
domainlist redirector/domains
urllist redirector/urls
expressionlist redirector/expressions
}
dest warez {
domainlist warez/domains
urllist warez/urls
}
dest ads {
domainlist ads/domains
urllist ads/urls
}
dest aggressive {
domainlist aggressive/domains
urllist aggressive/urls
}
dest drugs {
domainlist drugs/domains
urllist drugs/urls
}
dest gambling {
domainlist gambling/domains
urllist gambling/urls
}
dest publicite {
domainlist publicite/domains
urllist publicite/urls
expressionlist publicite/expressions
}
dest violence {
domainlist violence/domains
urllist violence/urls
expressionlist violence/expressions
}
dest banneddestination {
domainlist banneddestination/domains
urllist banneddestination/urls
expressionlist banneddestination/expressions
}
dest advertising {
domainlist advertising/domains
urllist advertising/urls
redirect http://127.0.0.1/cgi-bin/nulbanner.png
log /var/log/squidGuard/advertising.log
}
# ACLs
acl {
privileged {
pass none
}
bannedsource within test {
pass !bl_warez !bl_violence !bl_proxy !bl_porn !bl_hacking !bl_gambling !bl_drugs !bl_audio-video !bl_aggressive !bl_ads any
redirect http://127.0.0.1/cgi-bin/squidGuard.cgi?clientaddr=%a&srcclass=%s&targetclass=%t&url=%u
}
lansource within test {
pass !bl_warez !bl_violence !bl_proxy !bl_porn !bl_hacking !bl_gambling !bl_drugs !bl_audio-video !bl_aggressive !bl_ads any
redirect http://127.0.0.1/cgi-bin/squidGuard.cgi?clientaddr=%a&srcclass=%s&targetclass=%t&url=%u
}
default within test {
pass !bl_warez !bl_violence !bl_proxy !bl_porn !bl_hacking !bl_gambling !bl_drugs !bl_audio-video !bl_aggressive !bl_ads any
redirect http://127.0.0.1/cgi-bin/squidGuard.cgi?clientaddr=%a&srcclass=%s&targetclass=%t&url=%u
}
}
Does anyone have any idea what may be wrong? Thanks in advance.
shawn
