For question 2, the redirect (via .htaccess) solved the problem. Thanks. As for 3, I was talking about a case where no squidguard processes are created (due to a configuration error in the squidguard.conf file). In that case, while I won't be blocked from any site per se, only pieces of it would load. There shouldn't be any redirects at all (except what the page would normally have). I suspect this is a (minor) bug in squid, and not squidguard. If squid can't connect to the redirect program (because it refused to start), it doesn't serve/cache/get pages correctly??? Can anyone confirm?
As for 1, I was thinking I would get a 404 or cache-access denied page, but instead, I can go anywhere I want. It didn't block me at all. My thinking was a "pass none" with no other acls (and no redirect statement) should block all access, not grant all access. Apparently that's not the case. On Tuesday 24 February 2004 17:44, Michael Wray wrote: > In answer to question 3: > > It is possible to have items that don't get reidirected on a page, and > others that do, a partial redirect will usually result in a "broken image". > I THINK there is a workaround for that, but am not sure what that is. This > IS normal behavior...the workaround would involve setting up a local server > to serve up a replacement image. > > > Which leads to question 2. > > I found that if I run a webserver on the same machine as the squid server, > for serving up the redirect page, I don't have an issue with CSS or other > includes. Another way is to have the redirect do a meta refresh/redirect. > > And that leaves us with question 1. > > Which is correct behavior, since basically when you say pass none with no > redirect statement you are basically inviting either a cache-access denied > error, or 404. The redirect would then redirect to your blocked statement, > or what have you. > > Your other option would be to pass all, which would be wide open and send > you to the site requested. > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of robert > Sent: Tuesday, February 24, 2004 2:24 PM > To: [EMAIL PROTECTED] > Subject: newbie questions > > > I've started playing with squidguard, and I've noticed several things I > haven't found answers to yet. > > 1) In testing, with the default acl of "pass none", I've noticed it > doesn't work without a redirect line, i.e.: > <snip> > acl { > default { > pass none > } > } > <snip> > > Is this normal? I assumed when I first tried this it would give me the > squid error page. If I add a redirect line, it works, which leads to > question 2... > > 2) While I do get the redirect page, that's all I get. Just the > straight html. No images or even CSS files (which are on the same > domain). Can this be fixed so the page displays properly? Going to the > page directly (i.e. typing it in the location bar) shows everything fine > so it's not a page problem. > > 3) In testing, I noticed that if there is a problem with the squidguard > configuration, squid will start, but not display pages completely. Only > some elements will load. While the obvious answer is to fix the > configuration problem(s), I believed that in a failure case, squidguard > would fail completely open. If so, why do the pages not load > completely? Refreshing gets different elements or an error message. -- Fail to learn history-repeat it. Fail to learn rights-lose them. Learn both-get screwed by previous two groups. Public key is at http://home.swbell.net/berzerke/robert.key Fingerprint: 0D70 9ADF B5A7 45E7 A853 4B1C 8E0F 4324 C39D 44A2
