Re: [squid-users] squid3 + squidguard on Debian
To block all subdomain's of a site add *.uploaded.net to the db file. Regards. On Wednesday, January 30, 2013 1:13:52 PM, Andre Lorenz wrote: Hi jeffrey, it is listet with: uploaded.net other entries are getting denied. after adding entries i run following commands -- squidGuard -C all -- squid3 -k reconfigure -- squid3 reload and also squid3 restart nothing helped :-( andre - Ursprüngliche Mail - Von: jeffrey j donovan dono...@beth.k12.pa.us An: Andre Lorenz an...@ns-cw.net CC: squid-users squid-users@squid-cache.org Gesendet: Mittwoch, 30. Januar 2013 04:59:24 Betreff: Re: [squid-users] squid3 + squidguard on Debian On Jan 29, 2013, at 3:38 AM, Andre Lorenz an...@ns-cw.net wrote: as example. i have blocked domain uploaded.net. i can call via browser, but if i run on commandline: echo http://fra-7m18-stor08.uploaded.net - - GET | /usr/bin/squidGuard -c /etc/squid/squidGuard.conf greetings how is uploaded.net listed in your flat file/db. ? what does squidguard.conf about that flat file ? do other items in the db get denied ? if yes, then you need to shutdown, recompile DB with squid guard, and reload squid. -j
[squid-users] squid3 + squidguard on Debian
Hello together, actually i'm a little bit confused. i have debian 6 system, set up with squid3 and squidqurad. now squidguard is not blocking all domains/sides inside the db. if i call a blocked side inside the browser i can access this side. as example. i have blocked domain uploaded.net. i can call via browser, but if i run on commandline: echo http://fra-7m18-stor08.uploaded.net - - GET | /usr/bin/squidGuard -c /etc/squid/squidGuard.conf i'm getting the redirect statement. http://www.google.com -/- - GET if i run ps -ef| grep squid i'm getting root 31513 1 0 09:07 ?00:00:00 /usr/sbin/squid3 -YC -f /etc/squid3/squid.conf proxy31515 31513 8 09:07 ?00:00:49 (squid) -YC -f /etc/squid3/squid.conf proxy31517 31515 0 09:07 ?00:00:00 (squidGuard) -c /etc/squid/squidGuard.conf proxy31518 31515 0 09:07 ?00:00:00 (squidGuard) -c /etc/squid/squidGuard.conf proxy31519 31515 0 09:07 ?00:00:00 (squidGuard) -c /etc/squid/squidGuard.conf proxy31520 31515 0 09:07 ?00:00:00 (squidGuard) -c /etc/squid/squidGuard.conf proxy31521 31515 0 09:07 ?00:00:00 (squidGuard) -c /etc/squid/squidGuard.conf which is obviously correct. i also rebuild the the database several times. any ideas ?? thanks in advance. Andre
Re: [squid-users] squid3 + squidguard on Debian
On 29/01/2013 9:38 p.m., Andre Lorenz wrote: Hello together, actually i'm a little bit confused. i have debian 6 system, set up with squid3 and squidqurad. now squidguard is not blocking all domains/sides inside the db. if i call a blocked side inside the browser i can access this side. as example. i have blocked domain uploaded.net. i can call via browser, but if i run on commandline: echo http://fra-7m18-stor08.uploaded.net - - GET | /usr/bin/squidGuard -c /etc/squid/squidGuard.conf i'm getting the redirect statement. http://www.google.com -/- - GET Firstly, tried calling it with the line Squid would have used with IP addresses etc all in place? Secondly, this is not a redirect statement from SquidGuard. This is a re-write statement. The result of redirect statement is a 30x redirection message to the client. The result of a re-write statement is a 200 OK response to the client with body content supplied by the alternative server (think Phishing attack or response hijacking). if i run ps -ef| grep squid i'm getting root 31513 1 0 09:07 ?00:00:00 /usr/sbin/squid3 -YC -f /etc/squid3/squid.conf proxy31515 31513 8 09:07 ?00:00:49 (squid) -YC -f /etc/squid3/squid.conf proxy31517 31515 0 09:07 ?00:00:00 (squidGuard) -c /etc/squid/squidGuard.conf proxy31518 31515 0 09:07 ?00:00:00 (squidGuard) -c /etc/squid/squidGuard.conf proxy31519 31515 0 09:07 ?00:00:00 (squidGuard) -c /etc/squid/squidGuard.conf proxy31520 31515 0 09:07 ?00:00:00 (squidGuard) -c /etc/squid/squidGuard.conf proxy31521 31515 0 09:07 ?00:00:00 (squidGuard) -c /etc/squid/squidGuard.conf which is obviously correct. i also rebuild the the database several times. any ideas ?? Contact the SquidGuard developers or use support channels? SquidGuard is not part of the Squid Project, and not really supported here. Amos
Re: [squid-users] squid3 + squidguard on Debian
I have similar setup (Deb6 + squidguard), and I've had similar trouble with SquidGuard not behaving, and I've found it has trouble with subdomains - if you have eg these 2 entries in the same blacklist file uploaded.net thing.uploaded.net it won't block ??one or either?? I can't remember behaviour exactly, but it caused me trouble. hope that helps Jim Potter On 29 January 2013 10:37, Amos Jeffries squ...@treenet.co.nz wrote: On 29/01/2013 9:38 p.m., Andre Lorenz wrote: Hello together, actually i'm a little bit confused. i have debian 6 system, set up with squid3 and squidqurad. now squidguard is not blocking all domains/sides inside the db. if i call a blocked side inside the browser i can access this side. as example. i have blocked domain uploaded.net. i can call via browser, but if i run on commandline: echo http://fra-7m18-stor08.uploaded.net - - GET | /usr/bin/squidGuard -c /etc/squid/squidGuard.conf i'm getting the redirect statement. http://www.google.com -/- - GET Firstly, tried calling it with the line Squid would have used with IP addresses etc all in place? Secondly, this is not a redirect statement from SquidGuard. This is a re-write statement. The result of redirect statement is a 30x redirection message to the client. The result of a re-write statement is a 200 OK response to the client with body content supplied by the alternative server (think Phishing attack or response hijacking). if i run ps -ef| grep squid i'm getting root 31513 1 0 09:07 ?00:00:00 /usr/sbin/squid3 -YC -f /etc/squid3/squid.conf proxy31515 31513 8 09:07 ?00:00:49 (squid) -YC -f /etc/squid3/squid.conf proxy31517 31515 0 09:07 ?00:00:00 (squidGuard) -c /etc/squid/squidGuard.conf proxy31518 31515 0 09:07 ?00:00:00 (squidGuard) -c /etc/squid/squidGuard.conf proxy31519 31515 0 09:07 ?00:00:00 (squidGuard) -c /etc/squid/squidGuard.conf proxy31520 31515 0 09:07 ?00:00:00 (squidGuard) -c /etc/squid/squidGuard.conf proxy31521 31515 0 09:07 ?00:00:00 (squidGuard) -c /etc/squid/squidGuard.conf which is obviously correct. i also rebuild the the database several times. any ideas ?? Contact the SquidGuard developers or use support channels? SquidGuard is not part of the Squid Project, and not really supported here. Amos
Re: [squid-users] squid3 + squidguard on Debian
On Jan 29, 2013, at 3:38 AM, Andre Lorenz an...@ns-cw.net wrote: as example. i have blocked domain uploaded.net. i can call via browser, but if i run on commandline: echo http://fra-7m18-stor08.uploaded.net - - GET | /usr/bin/squidGuard -c /etc/squid/squidGuard.conf greetings how is uploaded.net listed in your flat file/db. ? what does squidguard.conf about that flat file ? do other items in the db get denied ? if yes, then you need to shutdown, recompile DB with squid guard, and reload squid. -j
Re: [squid-users] squid3 + squidguard on Debian
Hi jeffrey, it is listet with: uploaded.net other entries are getting denied. after adding entries i run following commands -- squidGuard -C all -- squid3 -k reconfigure -- squid3 reload and also squid3 restart nothing helped :-( andre - Ursprüngliche Mail - Von: jeffrey j donovan dono...@beth.k12.pa.us An: Andre Lorenz an...@ns-cw.net CC: squid-users squid-users@squid-cache.org Gesendet: Mittwoch, 30. Januar 2013 04:59:24 Betreff: Re: [squid-users] squid3 + squidguard on Debian On Jan 29, 2013, at 3:38 AM, Andre Lorenz an...@ns-cw.net wrote: as example. i have blocked domain uploaded.net. i can call via browser, but if i run on commandline: echo http://fra-7m18-stor08.uploaded.net - - GET | /usr/bin/squidGuard -c /etc/squid/squidGuard.conf greetings how is uploaded.net listed in your flat file/db. ? what does squidguard.conf about that flat file ? do other items in the db get denied ? if yes, then you need to shutdown, recompile DB with squid guard, and reload squid. -j
