Re: [squid-users] block dodgy sites with squidguard

2012-08-11 Thread Amos Jeffries
On 11/08/2012 7:46 p.m., J Webster wrote: I would like to allow access to some 18+ sites on the proxy server but prevent anyone looking at dodgy illegal sites. Is there a way to do that with squidguard because the filter dest only seems to be on porn. Would I have to write my own access control

Re: [squid-users] Need acl to block logs of https denied status codes.

2012-08-11 Thread Amos Jeffries
On 12/08/2012 3:19 p.m., Nil Nik wrote: Hello, I have to stop logging of status code 400-404 500 502 503. I have used following acl: acl denied_status http_status 400-404 500 502 503 log_access deny denied_status Its not working for https logs. Please suggest me.

Re: [squid-users] Compute digest as content is written to cache

2012-08-11 Thread Amos Jeffries
On 11/08/2012 10:21 p.m., Jack Bates wrote: On 11/08/12 12:30 AM, Amos Jeffries wrote: On 11/08/2012 7:22 p.m., Jack Bates wrote: I am interested in intercepting content as it is written to the cache, and computing a digest from the content. Do you know if this can be done in some kind of add o

[squid-users] Need acl to block logs of https denied status codes.

2012-08-11 Thread Nil Nik
Hello, I have to stop logging of status code 400-404 500 502 503. I have used following acl: acl denied_status http_status 400-404 500 502 503 log_access deny denied_status Its not working for https logs. Please suggest me.

Re: [squid-users] Put all port 80, 443 http https rtmp connections from openvpn through squid?

2012-08-11 Thread Eliezer Croitoru
On 8/11/2012 8:23 PM, J Webster wrote: squid is a http proxy and not rtmp. rtmp use other ports then 80\443 and cannot be used over squid(you can if it's tcp and you allow CONNECT and unsafe ports which is not safe.. and will make the vpn connection vulnerable and maybe useless) if you have a s

Re: [squid-users] Put all port 80, 443 http https rtmp connections from openvpn through squid?

2012-08-11 Thread J Webster
squid is a http proxy and not rtmp. rtmp use other ports then 80\443 and cannot be used over squid(you can if it's tcp and you allow CONNECT and unsafe ports which is not safe.. and will make the vpn connection vulnerable and maybe useless) if you have a solid reason to do so it can be a nice

Re: [squid-users] squidguard spyware log

2012-08-11 Thread Eliezer Croitoru
On 8/11/2012 8:06 PM, J Webster wrote: I see some logs of spyware sites being blocked by squidguard. I presume these are sites that have cross domain xml or javascript or other things built in. Will squidguard block the whole page even if there is one script in it that might be spyware? 2012-08-

Re: [squid-users] Put all port 80, 443 http https rtmp connections from openvpn through squid?

2012-08-11 Thread Eliezer Croitoru
On 8/11/2012 6:15 PM, J Webster wrote: But once the tunnel reaches the OpenVPN server, you can direct port 80 yes as the machine is a router. of course you can. it's a basic IPTABLES rules and since openvpn uses a tunX interface you can intercept all traffic from the tunX interface to the prox

[squid-users] squidguard spyware log

2012-08-11 Thread J Webster
I see some logs of spyware sites being blocked by squidguard. I presume these are sites that have cross domain xml or javascript or other things built in. Will squidguard block the whole page even if there is one script in it that might be spyware? 2012-08-11 17:10:31 [3630] Request(default/sp

Re: [squid-users] Put all port 80, 443 http https rtmp connections from openvpn through squid?

2012-08-11 Thread Alex Crow
On 11/08/12 14:27, Eliezer Croitoru wrote: On 8/11/2012 2:57 PM, J Webster wrote: But once the tunnel reaches the OpenVPN server, you can direct port 80 and 443 traffic from it via the proxy server can't you? Once it gets to the OpenVPN server (where you would also have the proxy server), isn't

Re: [squid-users] Put all port 80, 443 http https rtmp connections from openvpn through squid?

2012-08-11 Thread J Webster
But once the tunnel reaches the OpenVPN server, you can direct port 80 and 443 traffic from it via the proxy server can't you? Once it gets to the OpenVPN server (where you would also have the proxy server), isn't it decrypted? Lots of companies have VPN tunnels and then route web traffic through

Re: [squid-users] Put all port 80, 443 http https rtmp connections from openvpn through squid?

2012-08-11 Thread Eliezer Croitoru
On 8/11/2012 2:57 PM, J Webster wrote: But once the tunnel reaches the OpenVPN server, you can direct port 80 and 443 traffic from it via the proxy server can't you? Once it gets to the OpenVPN server (where you would also have the proxy server), isn't it decrypted? Lots of companies have VPN tun

Re: [squid-users] Put all port 80, 443 http https rtmp connections from openvpn through squid?

2012-08-11 Thread J Webster
But once the tunnel reaches the OpenVPN server, you can direct port 80 and 443 traffic from it via the proxy server can't you? Once it gets to the OpenVPN server (where you would also have the proxy server), isn't it decrypted? Lots of companies have VPN tunnels and then route web traffic through

Re: [squid-users] Put all port 80, 443 http https rtmp connections from openvpn through squid?

2012-08-11 Thread Alex Crow
On 11/08/12 08:20, J Webster wrote: Is there a way to push all openvpn connections using http ports through a transparent squid and how? Also, can I log which openvpn certificate/client is accessing which pages in this way? I assume I would have to use an alternative port or use firewall rules

Re: [squid-users] Compute digest as content is written to cache

2012-08-11 Thread Jack Bates
On 11/08/12 12:30 AM, Amos Jeffries wrote: On 11/08/2012 7:22 p.m., Jack Bates wrote: I am interested in intercepting content as it is written to the cache, and computing a digest from the content. Do you know if this can be done in some kind of add on, or would it require a change to the core?

Re: [squid-users] take out something from squidguard.conf without restarting squid

2012-08-11 Thread Go Wow
After you make change to config of SG run squid -k reconfigure. If you make changes to dest urls list or domain list then you have to recreate .db files. --Original Message-- From: J Webster To: squid-users@squid-cache.org Subject: [squid-users] take out something from squidguard.conf wit

Re: [squid-users] squidguard not blocking

2012-08-11 Thread Go Wow
Your SG process is stopping, so after you start SG do a ps aux l grep squidGuard and check whether SG process is running. -Sent via Blackberry -Original Message- From: J Webster Date: Sat, 11 Aug 2012 09:29:32 To: Cc: squid-users@squid-cache.org Subject: Re: [squid-users] squidguard

[squid-users] take out something from squidguard.conf without restarting squid

2012-08-11 Thread J Webster
If I want to remove one of the dest restrictions form squidguard, how can I do this without restarting squid?

[squid-users] block dodgy sites with squidguard

2012-08-11 Thread J Webster
I would like to allow access to some 18+ sites on the proxy server but prevent anyone looking at dodgy illegal sites. Is there a way to do that with squidguard because the filter dest only seems to be on porn. Would I have to write my own access control list to prevent this?

Re: [squid-users] squidguard not blocking

2012-08-11 Thread J Webster
It wa spermissions on all the conf and db files - I thought I changed them but apparently not: 2012-08-11 08:41:22 [1096] init urllist /var/lib/squidguard/weapons/urls 2012-08-11 08:41:22 [1096] loading dbfile /var/lib/squidguard/weapons/urls.db 2012-08-11 08:41:22 [1093] squidGuard 1.3 started

Re: [squid-users] Compute digest as content is written to cache

2012-08-11 Thread Amos Jeffries
On 11/08/2012 7:22 p.m., Jack Bates wrote: I am interested in intercepting content as it is written to the cache, and computing a digest from the content. Do you know if this can be done in some kind of add on, or would it require a change to the core? What type of digest and to what purpose?

Re: [squid-users] squidguard not blocking

2012-08-11 Thread J Webster
# # CONFIG FILE FOR SQUIDGUARD # #dbhome /usr/local/squidGuard/db #logdir /usr/local/squidGuard/logs dbhome /var/lib/squidguard logdir /var/log/squidguard dest porn { domainlist porn/domains urllist porn/urls } dest aggressive { domainlist aggressive/domains

[squid-users] Compute digest as content is written to cache

2012-08-11 Thread Jack Bates
I am interested in intercepting content as it is written to the cache, and computing a digest from the content. Do you know if this can be done in some kind of add on, or would it require a change to the core?

[squid-users] Put all port 80, 443 http https rtmp connections from openvpn through squid?

2012-08-11 Thread J Webster
Is there a way to push all openvpn connections using http ports through a transparent squid and how? Also, can I log which openvpn certificate/client is accessing which pages in this way? I assume I would have to use an alternative port or use firewall rules to only allow squid connections from