Sorry that I forgot to include that other logfile statement earlier.
Once that is in place you'll be able to see what squidGuard is 
receiving from squid.

Do you have squid set up as a transparent proxy? Idents don't work
with transparent proxy.

Let me know what you find!

Rick


> -----Original Message-----
> From: Neil Watson [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, September 24, 2002 7:08 PM
> To: Rick Matthews; [EMAIL PROTECTED]
> Subject: Re: ident
> 
> 
> On September 24, 2002 07:26 pm, Rick Matthews wrote:
> > > Thanks for your help.  Alas no luck.
> >
> > What's luck got to do with it? ;-)
> >
> > > The ads.log and the porn.log are never written to.
> >
> > If squidGuard *tried* to write to them and couldn't there would be
> > errors in squidGuard.log. If the squidGuard log is *empty* that's
> > bad, too, since squidGuard writes good and bad notifications to the
> > log. Have you checked squidGuard.log?
> 
> Last two lines of squid's access.log:
> 
> 127.0.0.1 TCP_MISS/200 568 GET http://slashdot.org/ neil DIRECT/216.138.221.7 
>image/png
> 127.0.0.1 TCP_MISS/200 568 GET http://slashdot.org/ - DIRECT/216.138.221.7 image/png
> 
> Why does neil show up in the first line but not the second?
> 
> Last lines of squidGuard's squidguard.log:
> 
> 2002-09-24 20:03:03 [8225] init urllist /usr/local/squidGuard/db/porn/urls
> 2002-09-24 20:03:04 [8225] init domainlist /usr/local/squidGuard/db/ads/domains
> 2002-09-24 20:03:04 [8225] init urllist /usr/local/squidGuard/db/ads/urls
> 2002-09-24 20:03:04 [8225] init expressionlist 
>/usr/local/squidGuard/db/ads/ads.expressions
> 2002-09-24 20:03:04 [8225] squidGuard 1.2.0 started (1032912126.984)
> 2002-09-24 20:03:04 [8225] squidGuard ready for requests (1032912184.523)
> 
> So it looks like squid is figuring out the user (the neil entry) but is not passing 
>it along to squidGuard. You may 
> recall that my squidGuard.conf file had:
> 
> logdir /usr/local/squidGuard/log
> dbhome /usr/local/squidGuard/db
> 
> src neil {
>     ip 127.0.0.1  
> #the ip was 10.0.0.10/8 but judging from the squid access.log I changed it to 
>127.0.0.1.  No change however :(
>     user   neil
> }
> 
> src lisamarie {
>     ip    10.0.0.10/8    
>     user  lisamarie 
> }
> 
> 
> #src kids {
> #    ip    10.0.0.10/8    
> #}
> 
> dest porn {
>     domainlist porn/domains
>     urllist    porn/urls
>     logfile    porn.log
>     redirect   
>http://watson-wilson.ca/starfrontiers/images/title.php?size=15&text=denied
> }
> 
> dest ads {
>     domainlist  ads/domains
>     urllist     ads/urls
>     expressionlist  ads/ads.expressions
>     logfile     ads.log
>     redirect    http://watson-wilson.ca/starfrontiers/images/1x1.gif
> }
> 
> 
> acl {
>     neil {
>         pass !ads !porn all
>     }
> 
>     lisamarie {
>         pass all
>     }
> 
> #    kids {
> #        pass !porn all
> #    }
> 
>     default {
>         pass none
>         redirect 
>http://watson-wilson.ca/starfrontiers/images/title.php?size=15&text=denied
>     }
> }
> 
> 
> 
> 
> -- 
> Neil Watson
> Network Administrator
> watson-wilson.ca
> 
> 


Reply via email to