Hello,
I'm using Squid 2.5Stable4 compiled with --enable-linux-netfilter.
I'm also using Dansguardian for content filtering. All traffic is
redirected by ipfilter to port 8080 (Dansguardian), which then forwards to
3128 if necessary.
My question is about the logfiles. Both programs log all tra
>
> 1077206929.504307 TCP_MISS/200 173 GET
> - DIRECT/ text/plain
>
> The is always the same, which makes it impossible
> for me to track down the client going by squid's access log.
>
Did you enable this header httpd_accel_uses_host_header,emulate_httpd_log?
Regards,
Muthukumar.
>
>>
>> 1077206929.504307 TCP_MISS/200 173 GET
>> - DIRECT/ text/plain
>>
>> The is always the same, which makes it
>> impossible for me to track down the client going by squid's access
>> log.
>>
> Did you enable this header
> httpd_accel_uses_host_header,emulate_httpd_log?
>
> Regards,
> M
On Thu, 19 Feb 2004 [EMAIL PROTECTED] wrote:
> I have httpd_accel_uses_host_header enabled, but I didn't have
> emulate_httpd_log enabled. I enabled and restarted that option and it
> switched me over to httpd style log files. However, I'm still getting the
> IP of my squid/firewall box as the c
On Thu, 19 Feb 2004 [EMAIL PROTECTED] wrote:
> I'm also using Dansguardian for content filtering. All traffic is
> redirected by ipfilter to port 8080 (Dansguardian), which then forwards to
> 3128 if necessary.
Ah, then only Dansguardian has the IP of the user. To Squid the traffic is
coming fr
> What OS are you using?
>
> Is there any difference if you configure the browser to use the proxy?
>
> Regards
> Henrik
I'm using RH8.1 with a custom (non RPM) 2.4.22 kernel.
And actually, yes. I put the proxy in manually and it's displaying it
fine. I never noticed that before. However, wit
On Thu, 19 Feb 2004 [EMAIL PROTECTED] wrote:
> I'm using RH8.1 with a custom (non RPM) 2.4.22 kernel.
>
> And actually, yes. I put the proxy in manually and it's displaying it
> fine. I never noticed that before. However, with over 5 thousand
> machines we're pretty much dependent on the proxy
>
> Ok, so the kernel and proxy runs fine.
>
> What does your iptables interception rules look like?
>
> iptables-save -t nat
>
> Regards
> Henrik
We've got about 200 (private) class C's, so there are many entries that
look like this:
*nat
:PREROUTING ACCEPT [1149084:79155898]
:POSTROUTING ACC
On Thu, 19 Feb 2004 [EMAIL PROTECTED] wrote:
> We've got about 200 (private) class C's, so there are many entries that
> look like this:
>
> *nat
> :PREROUTING ACCEPT [1149084:79155898]
> :POSTROUTING ACCEPT [2574077:165548111]
> :OUTPUT ACCEPT [1884442:115362888]
> -A PREROUTING -s x.x.x.x/255.2
> Ok.
>
> Is there any SNAT rules?
>
> Regards
> Henrik
Nope, no SNAT rules.
Thanks again for being patient with me. Hopefully we can get to the
bottom of this.
On Thu, 19 Feb 2004 [EMAIL PROTECTED] wrote:
> Thanks again for being patient with me. Hopefully we can get to the
> bottom of this.
Which exact Squid and kernel versions? (including patches).
Squid configure flags uses? (Output of "squid -v")
Regards
Henrik
>
> Which exact Squid and kernel versions? (including patches).
>
> Squid configure flags uses? (Output of "squid -v")
>
> Regards
> Henrik
It's squid 2.5.STABLE4. Configure options are just --enable-linux-netfilter.
I'm running a vanilla version of Linux 2.4.22 with the bare essentials to
make
12 matches
Mail list logo
