Re: [Cooker] Squiguard setup?
[EMAIL PROTECTED] (Brook Humphrey) writes: I would usually like to think I'm not completely stupid but how do I setup squidguard? I manually set most of it up but I get cannot access /cgi-bin/squidguard.cgi on this server. Hello there, 1. you could use the sample configuration file provided in the squidGuard docs 2. make sure you have the right permissions for the /usr/share/squidGuard-1.2.0/db files, squid.squid that is. 3. make sure you have a redirect_program /usr/bin/squidGuard -c /etc/squid/squidGuard.conf line in your /etc/squid/squid.conf file 4. restart squid. If you have any further questions, don't hesitate. cheers, -- Florin http://www.mandrakesoft.com
Re: [Cooker] Squiguard setup?
-BEGIN PGP SIGNED MESSAGE- Hash: MD5 Hello Florin, Friday, April 5, 2002, 2:03:18 AM, you wrote: [EMAIL PROTECTED] (Brook Humphrey) writes: I would usually like to think I'm not completely stupid but how do I setup squidguard? I manually set most of it up but I get cannot access /cgi-bin/squidguard.cgi on this server. Hello there, 1. you could use the sample configuration file provided in the squidGuard docs Ok I saw that one but I didn't use it. I used the sample one in /etc/squid 2. make sure you have the right permissions for the /usr/share/squidGuard-1.2.0/db files, squid.squid that is. It actually loaded all these files fine. I even used webmin to update the blacklists. All this went fine. 3. make sure you have a redirect_program /usr/bin/squidGuard -c /etc/squid/squidGuard.conf line in your /etc/squid/squid.conf file Once again I wasn't exactly sure but I had webmin add this and it was correct. 4. restart squid. I did this also. Shortly after this squid started consuming cpu again and only gave this page is unavailable far everything I go to. When I restarted squid it didn't fix this. It seems as though the squid cache is getting corrupted. Would using XFS file system make a difference for this since it handles writes an a batch and doesn't write to the hard drive immediately. I will go back to reiser if I have to as I've never seen the corruption problems in the last year of use the xfs gives me. The strange part is that I've heard others say the exact same thing about reiser but I've never experienced it. If you have any further questions, don't hesitate. cheers, - -- Best regards, Brookmailto:[EMAIL PROTECTED] -BEGIN PGP SIGNATURE- Version: 2.6 iQEVAwUAPKz+H1Ek0TOYP3AbAQHLrgf+LRld4uJ/iYRWI1jVLK42Gv9JrnJsVXxS e04lmQFN4tdYuMKz5YpWtTFeoSW5FgcAkM4rGmlJbiprUXONNJ6gKohlXaEvHpX2 kwNsmePTAk+7klEh8+nPuTfC8zBeipxvMwzW8g3JaIvtYMAn1Q+U1qxXWTYFEc1D 6vhk8bh/z1J5Bn5ClDeORjvBbfMf7Hh5hdmO30TE1i/TDIS01ihPBtaX6OCQ4JMG 6e0Y5JDtr5D0LraDFxelyjAqePLOEiUPJS0T99cP2+z5IsuOGZ/n9OJG7+fvi656 wdfjujzQmPwmPXnFEEAJ/opOgOGybpIwkUtc6u8dI8Z3XhLyNY9yoQ== =Vg9J -END PGP SIGNATURE-
Re: [Cooker] Squiguard setup?
try with another filesystem then if you want ... but are you sure your configuration files are correct ? cheers, -- Florin http://www.mandrakesoft.com
Re: [Cooker] Squiguard setup?
On Friday 05 April 2002 05:39 am, you wrote: try with another filesystem then if you want ... but are you sure your configuration files are correct ? cheers, Ah yes I checked them real good a couple times just to make sure. when I reinstall squid I will try cleaning the cache when this happens. I will also use the conf file from the docs instead I should be able to report back shortly. -- -~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~- Brook Humphrey Mobile PC Medic, 420 1st, Cheney, WA 99004, 509-235-9107 http://www.webmedic.net, [EMAIL PROTECTED], [EMAIL PROTECTED] Holiness unto the Lord -~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-
Re: [Cooker] Squiguard setup?
On Friday 05 April 2002 05:39 am, you wrote:
try with another filesystem then if you want ... but are you sure your
configuration files are correct ?
cheers,
Allright squidguard is working but the sample squidguard.conf in the
/etc/squid directory does not. The problem is that the redirects fail. I do
have apache installed and It is working correctly but It says I don't have
the right to access the script when I use this squidguard.conf
#
# SquidGuard CONFIGURATION FILE
#
# CONFIGURATION DIRECTORIES
dbhome /usr/share/squidGuard-1.2.0/db
logdir /var/log/squidGuard
# TIME RULES:
# abbrev for weekdays:
# s = sun, m = mon, t =tue, w = wed, h = thu, f = fri, a = sat
time workhours {
weekly s 09:30-12:00 13:00-19:00
weekly m 09:00-12:00 13:00-19:00
weekly t 09:00-11:00 12:00-19:00
weekly w 09:00-12:00 12:00-18:00
weekly h 09:00-13:00 13:00-18:00
weekly f 09:00-12:00 13:30-18:00
weekly a 08:20-13:00 13:30-19:00
}
# SOURCE ADDRESSES:
src privilegedsource {
iplist privilegedsource/ips
}
src bannedsource {
iplist bannedsource/ips
}
src lansource {
iplist lansource/lan
}
# DESTINATION CLASSES:
dest porn {
domainlist porn/domains
urllist porn/urls
expressionlist porn/expressions
}
dest adult {
domainlist adult/domains
urllist adult/urls
expressionlist adult/expressions
}
dest audio-video {
domainlist audio-video/domains
urllist audio-video/urls
}
dest forums {
domainlist forums/domains
urllist forums/urls
expressionlist forums/expressions
}
dest hacking {
domainlist hacking/domains
urllist hacking/urls
}
dest redirector {
domainlist redirector/domains
urllist redirector/urls
expressionlist redirector/expressions
}
dest warez {
domainlist warez/domains
urllist warez/urls
}
dest ads {
domainlist ads/domains
urllist ads/urls
}
dest aggressive {
domainlist aggressive/domains
urllist aggressive/urls
}
dest drugs {
domainlist drugs/domains
urllist drugs/urls
}
dest gambling {
domainlist gambling/domains
urllist gambling/urls
}
dest publicite {
domainlist publicite/domains
urllist publicite/urls
expressionlist publicite/expressions
}
dest violence {
domainlist violence/domains
urllist violence/urls
expressionlist violence/expressions
}
dest banneddestination {
domainlist banneddestination/domains
urllist banneddestination/urls
expressionlist banneddestination/expressions
}
dest advertising {
domainlist advertising/domains
urllist advertising/urls
redirect http://127.0.0.1/cgi-bin/nulbanner.png
log /var/log/squidGuard/advertising.log
}
# ACLs
acl {
privilegedsource {
pass !advertising all
redirect
http://127.0.0.1/cgi-bin/squidGuard.cgi?clientaddr=%asrcclass=%stargetclass=%turl=%u
}
bannedsource {
pass none
redirect
http://127.0.0.1/cgi-bin/squidGuard.cgi?clientaddr=%asrcclass=%stargetclass=%turl=%u
}
lansource {
pass !adult !audio-video !forums !hacking !redirector !warez
!ads !aggressive !drugs !gambling !publicite !violence !banneddestination
!advertising all
redirect
http://127.0.0.1/cgi-bin/squidGuard.cgi?clientaddr=%asrcclass=%stargetclass=%turl=%u
}
default {
pass none
redirect
http://127.0.0.1/cgi-bin/squidGuard.cgi?clientaddr=%asrcclass=%stargetclass=%turl=%u
}
}
--
-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-
Brook Humphrey
Mobile PC Medic, 420 1st, Cheney, WA 99004, 509-235-9107
http://www.webmedic.net, [EMAIL PROTECTED], [EMAIL PROTECTED]
Holiness unto the Lord
-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-
Re: [Cooker] Squiguard setup?
On Friday 05 April 2002 08:11 am, you wrote: [EMAIL PROTECTED] (Brook Humphrey) writes: On Friday 05 April 2002 05:39 am, you wrote: try with another filesystem then if you want ... but are you sure your configuration files are correct ? cheers, Allright squidguard is working but the sample squidguard.conf in the /etc/squid directory does not. The problem is that the redirects fail. I do have apache installed and It is working correctly but It says I don't have the right to access the script when I use this squidguard.conf You should replace the 127.0.0.1 IP adresses in order to reflect your apache web server coordinates (IP address). Make sure your cgi script has the apache.apache permissions. Yes I already checked the permissions on the cgi script and the cgi directory. I will try changing the 127.0.0.1 thanks. -- -~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~- Brook Humphrey Mobile PC Medic, 420 1st, Cheney, WA 99004, 509-235-9107 http://www.webmedic.net, [EMAIL PROTECTED], [EMAIL PROTECTED] Holiness unto the Lord -~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-
Re: [Cooker] Squiguard setup?
[EMAIL PROTECTED] (Brook Humphrey) writes:
On Friday 05 April 2002 05:39 am, you wrote:
try with another filesystem then if you want ... but are you sure your
configuration files are correct ?
cheers,
Allright squidguard is working but the sample squidguard.conf in the
/etc/squid directory does not. The problem is that the redirects fail. I do
have apache installed and It is working correctly but It says I don't have
the right to access the script when I use this squidguard.conf
You should replace the 127.0.0.1 IP adresses in order to reflect your
apache web server coordinates (IP address). Make sure your cgi script has the
apache.apache permissions.
#
# SquidGuard CONFIGURATION FILE
#
# CONFIGURATION DIRECTORIES
dbhome /usr/share/squidGuard-1.2.0/db
logdir /var/log/squidGuard
# TIME RULES:
# abbrev for weekdays:
# s = sun, m = mon, t =tue, w = wed, h = thu, f = fri, a = sat
time workhours {
weekly s 09:30-12:00 13:00-19:00
weekly m 09:00-12:00 13:00-19:00
weekly t 09:00-11:00 12:00-19:00
weekly w 09:00-12:00 12:00-18:00
weekly h 09:00-13:00 13:00-18:00
weekly f 09:00-12:00 13:30-18:00
weekly a 08:20-13:00 13:30-19:00
}
# SOURCE ADDRESSES:
src privilegedsource {
iplist privilegedsource/ips
}
src bannedsource {
iplist bannedsource/ips
}
src lansource {
iplist lansource/lan
}
# DESTINATION CLASSES:
dest porn {
domainlist porn/domains
urllist porn/urls
expressionlist porn/expressions
}
dest adult {
domainlist adult/domains
urllist adult/urls
expressionlist adult/expressions
}
dest audio-video {
domainlist audio-video/domains
urllist audio-video/urls
}
dest forums {
domainlist forums/domains
urllist forums/urls
expressionlist forums/expressions
}
dest hacking {
domainlist hacking/domains
urllist hacking/urls
}
dest redirector {
domainlist redirector/domains
urllist redirector/urls
expressionlist redirector/expressions
}
dest warez {
domainlist warez/domains
urllist warez/urls
}
dest ads {
domainlist ads/domains
urllist ads/urls
}
dest aggressive {
domainlist aggressive/domains
urllist aggressive/urls
}
dest drugs {
domainlist drugs/domains
urllist drugs/urls
}
dest gambling {
domainlist gambling/domains
urllist gambling/urls
}
dest publicite {
domainlist publicite/domains
urllist publicite/urls
expressionlist publicite/expressions
}
dest violence {
domainlist violence/domains
urllist violence/urls
expressionlist violence/expressions
}
dest banneddestination {
domainlist banneddestination/domains
urllist banneddestination/urls
expressionlist banneddestination/expressions
}
dest advertising {
domainlist advertising/domains
urllist advertising/urls
redirect http://127.0.0.1/cgi-bin/nulbanner.png
log /var/log/squidGuard/advertising.log
}
# ACLs
acl {
privilegedsource {
pass !advertising all
redirect
http://127.0.0.1/cgi-bin/squidGuard.cgi?clientaddr=%asrcclass=targetclass=%turl=0
}
bannedsource {
pass none
redirect
http://127.0.0.1/cgi-bin/squidGuard.cgi?clientaddr=%asrcclass=targetclass=%turl=0
}
lansource {
pass !adult !audio-video !forums !hacking !redirector !warez
!ads !aggressive !drugs !gambling !publicite !violence !banneddestination
!advertising all
redirect
http://127.0.0.1/cgi-bin/squidGuard.cgi?clientaddr=%asrcclass=targetclass=%turl=0
}
default {
pass none
redirect
http://127.0.0.1/cgi-bin/squidGuard.cgi?clientaddr=%asrcclass=targetclass=%turl=0
}
}
cheers,
--
Florin http://www.mandrakesoft.com
[Cooker] Squiguard setup?
I would usually like to think I'm not completely stupid but how do I setup squidguard? I manually set most of it up but I get cannot access /cgi-bin/squidguard.cgi on this server. -- -~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~- Brook Humphrey Mobile PC Medic, 420 1st, Cheney, WA 99004, 509-235-9107 http://www.webmedic.net, [EMAIL PROTECTED], [EMAIL PROTECTED] Holiness unto the Lord -~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-
