Re: [squid-users] squid3 + squidguard on Debian

I have similar setup (Deb6 + squidguard), and I've had similar trouble with
SquidGuard not behaving, and I've found it has trouble with subdomains - if
you have eg these 2 entries in the same blacklist file

uploaded.net
thing.uploaded.net

it won't block ??one or either?? I can't remember behaviour exactly, but it
caused me trouble.

hope that helps

Jim Potter

On 29 January 2013 10:37, Amos Jeffries <squid3_at_treenet.co.nz> wrote:
>
> On 29/01/2013 9:38 p.m., Andre Lorenz wrote:
>>
>> Hello together,
>>
>> actually i'm a little bit confused.
>>
>> i have debian 6 system, set up with squid3 and squidqurad.
>> now squidguard is not blocking all domains/sides inside the db.
>>
>> if i call a blocked side inside the browser i can access this side.
>> as example. i have blocked domain uploaded.net. i can call via browser,
>> but if i run
>> on commandline:
>> echo "http://fra-7m18-stor08.uploaded.net - - GET" | /usr/bin/squidGuard
>> -c /etc/squid/squidGuard.conf
>>
>> i'm getting the redirect statement.
>> http://www.google.com -/- - GET
>
>
> Firstly, tried calling it with the line Squid would have used with IP
> addresses etc all in place?
>
>
> Secondly, this is not a redirect statement from SquidGuard. This is a
> re-write statement.
>
> The result of redirect statement is a 30x redirection message to the
> client.
> The result of a re-write statement is a 200 OK response to the client with
> body content supplied by the alternative server (think Phishing attack or
> response hijacking).
>
>
>
>> if i run ps -ef| grep squid i'm getting
>> root 31513 1 0 09:07 ? 00:00:00 /usr/sbin/squid3 -YC -f
>> /etc/squid3/squid.conf
>> proxy 31515 31513 8 09:07 ? 00:00:49 (squid) -YC -f
>> /etc/squid3/squid.conf
>> proxy 31517 31515 0 09:07 ? 00:00:00 (squidGuard) -c
>> /etc/squid/squidGuard.conf
>> proxy 31518 31515 0 09:07 ? 00:00:00 (squidGuard) -c
>> /etc/squid/squidGuard.conf
>> proxy 31519 31515 0 09:07 ? 00:00:00 (squidGuard) -c
>> /etc/squid/squidGuard.conf
>> proxy 31520 31515 0 09:07 ? 00:00:00 (squidGuard) -c
>> /etc/squid/squidGuard.conf
>> proxy 31521 31515 0 09:07 ? 00:00:00 (squidGuard) -c
>> /etc/squid/squidGuard.conf
>>
>> which is obviously correct.
>>
>> i also rebuild the the database several times.
>> any ideas ??
>
>
> Contact the SquidGuard developers or use support channels?
>
> SquidGuard is not part of the Squid Project, and not really supported
> here.
>
> Amos
Received on Tue Jan 29 2013 - 10:53:50 MST