You specify an acl with a time constraint but there is no time constraint defined.

Rob

At 10:59 21/06/2004 +0200, you wrote:
Hi there List.

Problem Description:
I can still browser any site that I want to, After the system
authenticates me.

OS = WhiteBox Enterprise Linux [Same as REDHAT ENTERPRISE LINUX]
Squid-2.5
SquidGuard-1.2.0-2

These are some of the lines in squid.conf
///////
http_port 3128
redirect_program /usr/bin/squidGuard -c /etc/squid/squidGuard.conf
auth_param basic program /etc/webmin/squid/squid-auth.pl
/etc/webmin/squid/users
auth_param basic realm SIEMAG INTERNET FIREWALL
acl SIEMAG proxy_auth REQUIRED
http_access allow SIEMAG
snmp_port 3401
snmp_access deny all
http_access allow manager localhost
http_access deny manager
///////

This is the complete squidGuard.conf file

Please assist.
Regards
Marcus Van Wyk
.
////////////////////////////////////////
########################################################################
######
# CONFIGURATION DIRECTORIES
########################################################################
######
dbhome /usr/share/squidGuard/db
logdir /var/log/squidGuard

########################################################################
######
# TIME RULES:
# abbrev for weekdays:
# s = sun, m = mon, t =tue, w = wed, h = thu, f = fri, a = sat
########################################################################
######

#time leisure-time
#     {
#        weekly * 00:00-08:00 16:00-24:00       # night and evening
#        weekly fridays 16:00-17:00             # weekend
#        #weekly a s               # weekend
#        date   *.01.01                         # New Year's Day
#        date   *.05.01                         # Labour Day
#        date   *.05.17                         # National Day
#        date   *.12.24 12:00-24:00             # Christmas Eve
#        date   *.12.25                         # Christmas Day
#        date   *.12.26                         # Boxing Day
#     }

########################################################################
######
# SOURCE ADDRESSES (by IP)
########################################################################
######
#src tlm_servers  { ip 192.168.1.1-192.168.1.10 }

########################################################################
######
# SOURCE ADDRESSES (by Luser ID)
########################################################################
######
src acl_it
    {
       user ituser1 ituser2
    }

src acl_users
    {
       user user1 user2 user 3
       user user4 user5 user6
   }

src acl_block_all
    {
       user block1 block2
    }

########################################################################
#######
# The good ol' destination rules
########################################################################
#######
dest porn
     {
        domainlist     porn/domains
        urllist        porn/urls
        expressionlist porn/expressions
        log            /var/log/squidGuard/porn.log
     }

dest adult
     {
        domainlist      adult/domains
        urllist         adult/urls
        expressionlist  adult/expressions
        log             /var/log/squidGuard/adult.log
     }

dest audio-video
     {
        domainlist audio-video/domains
        urllist    audio-video/urls
        log        /var/log/squidGuard/audio-video.log
     }

dest forums
     {
        domainlist      forums/domains
        urllist         forums/urls
        expressionlist  forums/expressions
        log             /var/log/squidGuard/forums.log
     }

dest hacking
     {
        domainlist hacking/domains
        urllist hacking/urls
        log     /var/log/squidGuard/hacking.log
     }

dest redirector
     {
        domainlist      redirector/domains
        urllist         redirector/urls
        expressionlist  redirector/expressions
        log             /var/log/squidGuard/redirector.log
     }

dest warez
     {
        domainlist warez/domains
        urllist    warez/urls
        log        /var/log/squidGuard/warez.log
     }

dest ads
     {
        domainlist ads/domains
        urllist    ads/urls
        log        /var/log/squidGuard/ads.log
     }

dest aggressive
     {
        domainlist aggressive/domains
        urllist    aggressive/urls
        log        /var/log/squidGuard/agressive.log
     }

dest drugs
     {
        domainlist drugs/domains
        urllist    drugs/urls
        log        /var/log/squidGuard/drugs.log
     }

dest gambling
     {
        domainlist gambling/domains
        urllist    gambling/urls
        log        /var/log/squidGuard/gambling.log
     }

dest publicite
    {
       domainlist      publicite/domains
       urllist         publicite/urls
       expressionlist  publicite/expressions
       log             /var/log/squidGuard/publicite.log
    }

dest violence
    {
       domainlist     violence/domains
       urllist        violence/urls
       expressionlist violence/expressions
       log            /var/log/squidGuard/violence.log
    }

dest banneddestination
     {
        domainlist      banneddestination/domains
        urllist         banneddestination/urls
        expressionlist  banneddestination/expressions
        log             /var/log/squidGuard/banneddestination.log
     }

dest advertising
     {
        domainlist advertising/domains
        urllist    advertising/urls
        redirect   http://10.128.15.7/squidGuard/nulbanner.png
        log        /var/log/squidGuard/advertising.log
     }

dest restdest
     {
        domainlist restdest/domains
        urllist    restdest/domains
     }

########################################################################
#######
# The ACL's
########################################################################
#######
acl
{
   acl_it
   {
      pass all
   }

   acl_block_all
   {
      pass none
      redirect
http://10.128.15.7/cgi-bin/squidGuard/squidGuard.cgi?clientaddr=%a&clien
tname=%n&clientuser=%i&srcclass=%s&targetclass=%t&url=%u
   }

   acl_users
   within leisure-time
       {
         pass all
       }
   else
      {
         pass  !porn !adult !audio-video !forums !hacking
               !redirector !warez !aggressive !drugs !gambling
               !publicite !violence !banneddestination
               !advertising all
         redirect
http://10.128.15.7/cgi-bin/squidGuard/squidGuard.cgi?clientaddr=%a&clien
tname=%n&clientuser=%i&srcclass=%s&targetclass=%t&url=%u
       }

   default
   {
      pass restdest
      pass none                          # reject unknown clients
      redirect
http://10.128.15.7/cgi-bin/squidGuard/squidGuard.cgi?clientaddr=%a&clien
tname=%n&clientuser=%i&clientgroup=%s&targetgroup=%t&url=%u
   }
}
////////////////////////////////////////




Reply via email to