I found my answer. TCP_MISS/403 means that it was denied so I am blocking gator. I finally found the page that deciphers all the codes in access.log
thanks
Gary
---------- Original Message ----------------------------------
From: Henrik Nordstrom <hno@squid-cache.org>
Date: Wed, 12 Mar 2003 08:28:57 +0100
>On Wednesday 12 March 2003 04.04, Gary Hostetler wrote:
>> I do not see in the acces.log where sites that I block are denied
>> access. I am especailly trying to avoid that dreaded gator.com
>> which I have set up an acl to deny but when I check the log it does
>> tell me Miss on the gator entries but it doesn't tell me that it
>> was denied.
>
>Then it probably was not denied.
>
>> Also when I put a list of domains to deny can that list be 100
>> names long or do I need to break it up. We have about 100 sites
>> that we block on our 3Coms and I would like to cut and paste that
>> list into squid.conf after I put the names one after another with a
>> space in between.
>
>Better to put them in a separate file if the list is long.
>
>acl to_block dstdomain "/path/to/blocklist.txt"
>and blocklist.txt contains a list of domains to block, one per line.
>Lines starting with a # is ignored and assumed to be comments.
>
>Regards
>Henrik
>
>
Received on Thu Mar 13 2003 - 20:22:00 MST
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:14:03 MST