Re: [Cooker] Squiguard setup?
On Friday 05 April 2002 08:11 am, you wrote: > [EMAIL PROTECTED] (Brook Humphrey) writes: > > On Friday 05 April 2002 05:39 am, you wrote: > > > try with another filesystem then if you want ... but are you sure your > > > configuration files are correct ? > > > > > > cheers, > > > > Allright squidguard is working but the sample squidguard.conf in the > > /etc/squid directory does not. The problem is that the redirects fail. I > > do have apache installed and It is working correctly but It says I don't > > have the right to access the script when I use this squidguard.conf > > You should replace the 127.0.0.1 IP adresses in order to reflect your > apache web server coordinates (IP address). Make sure your cgi script has > the apache.apache permissions. Yes I already checked the permissions on the cgi script and the cgi directory. I will try changing the 127.0.0.1 thanks. -- -~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~- Brook Humphrey Mobile PC Medic, 420 1st, Cheney, WA 99004, 509-235-9107 http://www.webmedic.net, [EMAIL PROTECTED], [EMAIL PROTECTED] Holiness unto the Lord -~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-
Re: [Cooker] Squiguard setup?
[EMAIL PROTECTED] (Brook Humphrey) writes: > On Friday 05 April 2002 05:39 am, you wrote: > > try with another filesystem then if you want ... but are you sure your > > configuration files are correct ? > > > > cheers, > Allright squidguard is working but the sample squidguard.conf in the > /etc/squid directory does not. The problem is that the redirects fail. I do > have apache installed and It is working correctly but It says I don't have > the right to access the script when I use this squidguard.conf > You should replace the 127.0.0.1 IP adresses in order to reflect your apache web server coordinates (IP address). Make sure your cgi script has the apache.apache permissions. > > # > # SquidGuard CONFIGURATION FILE > # > > # CONFIGURATION DIRECTORIES > dbhome /usr/share/squidGuard-1.2.0/db > logdir /var/log/squidGuard > > # TIME RULES: > # abbrev for weekdays: > # s = sun, m = mon, t =tue, w = wed, h = thu, f = fri, a = sat > > time workhours { > weekly s 09:30-12:00 13:00-19:00 > weekly m 09:00-12:00 13:00-19:00 > weekly t 09:00-11:00 12:00-19:00 > weekly w 09:00-12:00 12:00-18:00 > weekly h 09:00-13:00 13:00-18:00 > weekly f 09:00-12:00 13:30-18:00 > weekly a 08:20-13:00 13:30-19:00 > } > > # SOURCE ADDRESSES: > src privilegedsource { > iplist privilegedsource/ips > } > > src bannedsource { > iplist bannedsource/ips > } > > > > src lansource { > iplist lansource/lan > } > > # DESTINATION CLASSES: > dest porn { > domainlist porn/domains > urllist porn/urls > expressionlist porn/expressions > } > > dest adult { > domainlist adult/domains > urllist adult/urls > expressionlist adult/expressions > } > > dest audio-video { > domainlist audio-video/domains > urllist audio-video/urls > } > > dest forums { > domainlist forums/domains > urllist forums/urls > expressionlist forums/expressions > } > > dest hacking { > domainlist hacking/domains > urllist hacking/urls > } > > dest redirector { > domainlist redirector/domains > urllist redirector/urls > expressionlist redirector/expressions > } > > dest warez { > domainlist warez/domains > urllist warez/urls > } > > dest ads { > domainlist ads/domains > urllist ads/urls > } > > dest aggressive { > domainlist aggressive/domains > urllist aggressive/urls > } > > dest drugs { > domainlist drugs/domains > urllist drugs/urls > } > > dest gambling { > domainlist gambling/domains > urllist gambling/urls > } > > dest publicite { > domainlist publicite/domains > urllist publicite/urls > expressionlist publicite/expressions > } > > dest violence { > domainlist violence/domains > urllist violence/urls > expressionlist violence/expressions > } > > > dest banneddestination { > domainlist banneddestination/domains > urllist banneddestination/urls > expressionlist banneddestination/expressions > } > > dest advertising { > domainlist advertising/domains > urllist advertising/urls > redirect http://127.0.0.1/cgi-bin/nulbanner.png > log /var/log/squidGuard/advertising.log > > > } > > # ACLs > acl { > privilegedsource { > pass !advertising all > redirect > http://127.0.0.1/cgi-bin/squidGuard.cgi?clientaddr=%a&srcclass=&targetclass=%t&url=0 > > } > > bannedsource { > pass none > redirect > http://127.0.0.1/cgi-bin/squidGuard.cgi?clientaddr=%a&srcclass=&targetclass=%t&url=0 > > } > > lansource { > pass !adult !audio-video !forums !hacking !redirector !warez > !ads !aggressive !drugs !gambling !publicite !violence !banneddestination > !advertising all > redirect > http://127.0.0.1/cgi-bin/squidGuard.cgi?clientaddr=%a&srcclass=&targetclass=%t&url=0 > } > > > default { > pass none > redirect > http://127.0.0.1/cgi-bin/squidGuard.cgi?clientaddr=%a&srcclass=&targetclass=%t&url=0 > > } > } cheers, -- Florin http://www.mandrakesoft.com
Re: [Cooker] Squiguard setup?
On Friday 05 April 2002 05:39 am, you wrote: > try with another filesystem then if you want ... but are you sure your > configuration files are correct ? > > cheers, Allright squidguard is working but the sample squidguard.conf in the /etc/squid directory does not. The problem is that the redirects fail. I do have apache installed and It is working correctly but It says I don't have the right to access the script when I use this squidguard.conf # # SquidGuard CONFIGURATION FILE # # CONFIGURATION DIRECTORIES dbhome /usr/share/squidGuard-1.2.0/db logdir /var/log/squidGuard # TIME RULES: # abbrev for weekdays: # s = sun, m = mon, t =tue, w = wed, h = thu, f = fri, a = sat time workhours { weekly s 09:30-12:00 13:00-19:00 weekly m 09:00-12:00 13:00-19:00 weekly t 09:00-11:00 12:00-19:00 weekly w 09:00-12:00 12:00-18:00 weekly h 09:00-13:00 13:00-18:00 weekly f 09:00-12:00 13:30-18:00 weekly a 08:20-13:00 13:30-19:00 } # SOURCE ADDRESSES: src privilegedsource { iplist privilegedsource/ips } src bannedsource { iplist bannedsource/ips } src lansource { iplist lansource/lan } # DESTINATION CLASSES: dest porn { domainlist porn/domains urllist porn/urls expressionlist porn/expressions } dest adult { domainlist adult/domains urllist adult/urls expressionlist adult/expressions } dest audio-video { domainlist audio-video/domains urllist audio-video/urls } dest forums { domainlist forums/domains urllist forums/urls expressionlist forums/expressions } dest hacking { domainlist hacking/domains urllist hacking/urls } dest redirector { domainlist redirector/domains urllist redirector/urls expressionlist redirector/expressions } dest warez { domainlist warez/domains urllist warez/urls } dest ads { domainlist ads/domains urllist ads/urls } dest aggressive { domainlist aggressive/domains urllist aggressive/urls } dest drugs { domainlist drugs/domains urllist drugs/urls } dest gambling { domainlist gambling/domains urllist gambling/urls } dest publicite { domainlist publicite/domains urllist publicite/urls expressionlist publicite/expressions } dest violence { domainlist violence/domains urllist violence/urls expressionlist violence/expressions } dest banneddestination { domainlist banneddestination/domains urllist banneddestination/urls expressionlist banneddestination/expressions } dest advertising { domainlist advertising/domains urllist advertising/urls redirect http://127.0.0.1/cgi-bin/nulbanner.png log /var/log/squidGuard/advertising.log } # ACLs acl { privilegedsource { pass !advertising all redirect http://127.0.0.1/cgi-bin/squidGuard.cgi?clientaddr=%a&srcclass=%s&targetclass=%t&url=%u } bannedsource { pass none redirect http://127.0.0.1/cgi-bin/squidGuard.cgi?clientaddr=%a&srcclass=%s&targetclass=%t&url=%u } lansource { pass !adult !audio-video !forums !hacking !redirector !warez !ads !aggressive !drugs !gambling !publicite !violence !banneddestination !advertising all redirect http://127.0.0.1/cgi-bin/squidGuard.cgi?clientaddr=%a&srcclass=%s&targetclass=%t&url=%u } default { pass none redirect http://127.0.0.1/cgi-bin/squidGuard.cgi?clientaddr=%a&srcclass=%s&targetclass=%t&url=%u } } -- -~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~- Brook Humphrey Mobile PC Medic, 420 1st, Cheney, WA 99004, 509-235-9107 http://www.webmedic.net, [EMAIL PROTECTED], [EMAIL PROTECTED] Holiness unto the Lord -~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-
Re: [Cooker] Squiguard setup?
On Friday 05 April 2002 05:39 am, you wrote: > try with another filesystem then if you want ... but are you sure your > configuration files are correct ? > > cheers, Ah yes I checked them real good a couple times just to make sure. when I reinstall squid I will try cleaning the cache when this happens. I will also use the conf file from the docs instead I should be able to report back shortly. -- -~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~- Brook Humphrey Mobile PC Medic, 420 1st, Cheney, WA 99004, 509-235-9107 http://www.webmedic.net, [EMAIL PROTECTED], [EMAIL PROTECTED] Holiness unto the Lord -~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-~`'~-
Re: [Cooker] Squiguard setup?
try with another filesystem then if you want ... but are you sure your configuration files are correct ? cheers, -- Florin http://www.mandrakesoft.com
Re: [Cooker] Squiguard setup?
-BEGIN PGP SIGNED MESSAGE- Hash: MD5 Hello Florin, Friday, April 5, 2002, 2:03:18 AM, you wrote: > [EMAIL PROTECTED] (Brook Humphrey) writes: >> I would usually like to think I'm not completely stupid but how do I setup >> squidguard? I manually set most of it up but I get cannot access >> /cgi-bin/squidguard.cgi on this server. > Hello there, > 1. you could use the sample configuration file provided in the squidGuard > docs Ok I saw that one but I didn't use it. I used the sample one in /etc/squid > 2. make sure you have the right permissions for the >/usr/share/squidGuard-1.2.0/db files, squid.squid that is. It actually loaded all these files fine. I even used webmin to update the blacklists. All this went fine. > 3. make sure you have a >redirect_program /usr/bin/squidGuard -c /etc/squid/squidGuard.conf >line in your /etc/squid/squid.conf file Once again I wasn't exactly sure but I had webmin add this and it was correct. > 4. restart squid. I did this also. Shortly after this squid started consuming cpu again and only gave this page is unavailable far everything I go to. When I restarted squid it didn't fix this. It seems as though the squid cache is getting corrupted. Would using XFS file system make a difference for this since it handles writes an a batch and doesn't write to the hard drive immediately. I will go back to reiser if I have to as I've never seen the corruption problems in the last year of use the xfs gives me. The strange part is that I've heard others say the exact same thing about reiser but I've never experienced it. > If you have any further questions, don't hesitate. > cheers, - -- Best regards, Brookmailto:[EMAIL PROTECTED] -BEGIN PGP SIGNATURE- Version: 2.6 iQEVAwUAPKz+H1Ek0TOYP3AbAQHLrgf+LRld4uJ/iYRWI1jVLK42Gv9JrnJsVXxS e04lmQFN4tdYuMKz5YpWtTFeoSW5FgcAkM4rGmlJbiprUXONNJ6gKohlXaEvHpX2 kwNsmePTAk+7klEh8+nPuTfC8zBeipxvMwzW8g3JaIvtYMAn1Q+U1qxXWTYFEc1D 6vhk8bh/z1J5Bn5ClDeORjvBbfMf7Hh5hdmO30TE1i/TDIS01ihPBtaX6OCQ4JMG 6e0Y5JDtr5D0LraDFxelyjAqePLOEiUPJS0T99cP2+z5IsuOGZ/n9OJG7+fvi656 wdfjujzQmPwmPXnFEEAJ/opOgOGybpIwkUtc6u8dI8Z3XhLyNY9yoQ== =Vg9J -END PGP SIGNATURE-
Re: [Cooker] Squiguard setup?
[EMAIL PROTECTED] (Brook Humphrey) writes: > I would usually like to think I'm not completely stupid but how do I setup > squidguard? I manually set most of it up but I get cannot access > /cgi-bin/squidguard.cgi on this server. Hello there, 1. you could use the sample configuration file provided in the squidGuard docs 2. make sure you have the right permissions for the /usr/share/squidGuard-1.2.0/db files, squid.squid that is. 3. make sure you have a redirect_program /usr/bin/squidGuard -c /etc/squid/squidGuard.conf line in your /etc/squid/squid.conf file 4. restart squid. If you have any further questions, don't hesitate. cheers, -- Florin http://www.mandrakesoft.com