Hi What is the latest with this issue?
I thought I would try ident today to see if I could get it working. I am not using ident to match the acl's, only for logging. It seems to only work, however only sporadically though (for me). Squid logs the ident for every request. By setting up a custom log on a destination, I see that squidGuard only receives the ident information sometimes. ie: 2002-10-02 16:14:40 [1305] Request(jay/media/-) http://www.iinet.net.au/~jat/song.mp3 10.20.10.100/- - GET 2002-10-02 16:16:46 [1305] Request(jay/url/-) http://www.dictionary.com/fun/ 10.20.10.100/- jturner GET 2002-10-02 16:17:20 [1305] Request(jay/media/-) http://www.iinet.net.au/~jat/song.mp3 10.20.10.100/- - GET 2002-10-02 16:20:27 [1374] Request(jay/media/-) http://www.iinet.net.au/~jat/song.mp3 10.20.10.100/- - GET As you can see, it came through with dictionary.com, but not on the mp3 request. I am using php to do my logging and on my denied page I am logging to the screen the ident details. Sometimes the ident info is there, other times it's not. But it is always listed in squid's access.log. 1033546640.489 6 10.20.10.100 TCP_MISS/200 1592 GET http://www.iinet.net.au/~jat/song.mp3 jturner DIRECT/10.20.10.224 text/html Any ideas? It did appear, though I can't accurately confirm, that the ident info would not appear until I got access to a site that was not blocked. Then subsequent blocked pages would show the ident, for a period of time. This may just be a massive coincidence. Here are the standard details: squid - 2.4STABLE6 (non transparent) squidGuard - 1.1.4 (An upgrade is planned but I am dreading the potential Berkley DB problems that we are all aware of) Berkley DB Version - unsure how to actually get this.!? RedHat 7.3 Accessing from a Win2000 Pro client with IE6 with a proxy address set in the browser. Regards Jay -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Ian Spare Sent: Monday, 30 September 2002 3:35 PM To: 'Jaap Lelie'; [EMAIL PROTECTED] Subject: RE: ident Ah, well, There's your problem I think, smoothwall is running as a transparent proxy if memory serves me correctly so Squid isn't going work with ident. There's no reason you can't get this working though, your clients would need to explicitly use the proxy in some way either setting it in the options of using a PAC file. As for altering the smoothwall config, you can alter it. I had a version running at my home office for a look-see and I found some problems with the Squid conf as shipped and just changed it around. However, what would work better if you've got any number of clients at all is to build another squid proxy and use the smoothwall as its parent cache. That way you can get a 'better' proxy configuration and more cache space, you also look at not running in the transparent mode. There's nothing wrong with transparent mode but my personal preference is to have the control that PAC files etc give us. Ian
