I am getting the following from the Cache Manager menu and I would like to
know if the (none) is correct for the request.Can any one tell me why it
says (none) rather than what I see on the first
line?__________________________________________Redirector Statistics:
program: /opt/n2h2/bin/ifp_redirector
number running: 60 of 60
requests sent: 812798
replies received: 812797
queue length: 0
avg service time: 27.48 msec
# FD PID # Requests Flags Time Offset Request
1 8 1175 276876 AB 0.000 1 cache_object://localhost/redirector
127.0.0.1/localhost.localdomain - GET\n
2 10 1176 15417 A 0.005 0 (none)
3 11 1177 3478 A 0.000 0 (none)
4 12 1178 1613 A 0.011 0 (none)
... to 60
Ryan Lamberton
FamiLink Company
Clean Internet Access
----- Original Message -----
From: "John R. Van Lanen, Network Operations - TCCSA" <[EMAIL PROTECTED]>
To: "FamiLink Admin" <[EMAIL PROTECTED]>
Cc: "John R. Van Lanen, Network Operations - TCCSA" <[EMAIL PROTECTED]>;
<squid-users@squid-cache.org>; <[EMAIL PROTECTED]>
Sent: Friday, September 16, 2005 10:41 AM
Subject: Re: [squid-users] Problem with the blocking not working...
How many users are you serving?
John (et al),
I have increased the redirectors to 60 from 40 and that seems to have
stopped bypassing of the filter for now and I also have not seen links
returning the wrong address as of yet as well but they do admit it is a
problem. I was actually using that problem as an indicator of the filter
bypass problem
Also, I was looking at modifying the dansguardian "bad boy timeout"
(dansguardian.org/downloads/borman/dansguardian.pl) to work with
smartfilter's logs. Has anyone out in squid land done this? I was
planning
to search the logs for IP address if users that get blocked with the
reason
code of 149 (porn) or 132 (nudity) or 162 (sexual materials) or 113
(extreme). If they got blocked more than X (maybe 5) times in 30 min.
their
IP address/32 would be added to the not_allow list used by squid and then
the program would issue a "squid -k reconfigure" to update it to squid.
I
have already edited the ERR_ACCESS_DENIED file to notify the user why
they
don't have access and what to do (or not to do :-).
Because I am not "a programmer" (I just smell link one) I wanted to see
if
this has been done or something else like it.
> That is an issue in DA 4.0, Securecomputing admits it's a problem. I
> see
> it
> quite frequently. No fix yet. If you pay support, email them at
> [EMAIL PROTECTED], maybe it will get them moving.
>
> I've seen what you described and also getting just a Blank page with
> the
> address of the proxy/filter for controlcenter.
>
> Only 4.0 allows you to do delegated authority, they have a newer
> version
> 4.1,
> but it doesn't give you this capablity.
>
> Becareful with stable3 if your running redhat. I think an update of an
> rpm
> corrupted my squid. Had to upgrade to stable 10, it doesn't run as an
> rpm
> so
> it gets a little weird on the install.
>
> Let me know if we can share anything we have learned.
>
>> Are you also having problems with links returning the wrong address?
>> I
>> click on one link and get blocked and the link is not the one I
>> selected.
>> I
>> re-select the link and it will then go through.
>
>
>> > What version of Smartfilter are you using, have noticed issues with
>> > our
>> > installation of Smartfilter Bess Edition 4.0 that sometimes does not
>> > place
>> > a
>> > block on the site. I have a ticket open with securecomputing.
>> >
>> >> I am using squid-2.5.STABLE3-6.3E.9.i386 with smartfilter and I am
>> >> having
>> >> a
>> >> problem and need help tracking it down. After a restart or
>> >> squid -k
>> >> reconfigure everything works fine for a while (5 -10 hours
>> >> depending
>> >> on
>> >> the
>> >> load) then problems. Access seems to slow down and requests are
>> >> not
>> >> filtered.
>> >
>> >> access.log before squid -k reconfigure:
>> >
>> >> 1126801058.510 1149 71.32.59.249 TCP_MISS/200 37693 GET
>> >> http://www.playboy.com/ - DIRECT/216.163.137.3 text/html
>> >
>> >> access.log after squid -k reconfigure:
>> >
>> >> 1126801199.263 26 71.32.59.249 TCP_MISS/000 411 GET
>> >> http://www.playboy.com/ - NONE/- -
>> >
>> >
>> >> as it should be. Any ideas on how I can track down the problem or
>> >> what I
>> >> should be looking at?
>> >
