Hi,
squidguard is showing a very strange behaviour on our proxy:
It recognizes redirect rules, but it takes about a minute before it contacts
the webserver to get the cgi-script or a graphic.
The system is a SuSE 9.2, squid-2.5.STABLE9-4, squidGuard-1.2.0-376, all
available updates ae installed. Here are the configuration files:
/etc/squid/squid.conf
redirect_program /usr/sbin/squidGuard
redirect_children 30
cache_peer proxy.xxxx.de parent 8080 3130 no-query no-digest
auth_param basic program /usr/sbin/msnt_auth -d -W edv-pdc
auth_param basic children 20
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
acl password proxy_auth REQUIRED
http_port 8080
cache_mem 252 MB
maximum_object_size 16384 KB
minimum_object_size 5 KB
cache_dir ufs /var/squid/cache 43008 32 500
cache_access_log /var/squid/log/access.log
cache_store_log /var/log/squid/store.log
pid_filename /var/run/squid.pid
ftp_user [EMAIL PROTECTED]
coredump_dir /var/cache/squid
visible_hostname proxylrafds
acl nosmtp port 25
acl localhost src 127.0.0.1/255.255.255.255
http_access allow password
http_access deny all
cache_effective_user squid
cache_effective_group nogroup
negative_ttl 1 seconds
negative_dns_ttl 1 seconds
positive_dns_ttl 24 hours
header_replace User-Agent Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
error_directory /usr/share/squid/errors/German
/etc/squidguard.conf
logdir /var/log/squidGuard
dbhome /var/lib/squidGuard/db
src mehome {
user administrator testme2
}
dest lraurls {
urllist users/urlslra
log lraurls
}
acl {
mehome {
pass !lraurls all
redirect http://10.0.0.29/cgi-bin/printenv
}
}
I use the account testme2 to successfully log in, the file urlslra exist,
contains the address google.de and has been converted into an *.db file. The
logfile shows that this destination applies. The script printenv exists and
is executeable. SquidGuard in fact calls this script, but after about a
minute. When I call the script directly, there is no delay.
Does anyone of you have an idea what causes this extreme delay??
Thanks for any help.
Stefan
--
*****************************************
in-put GbR - Das Linux-Systemhaus
Stefan-Michael Guenther
Moltkestrasse 49 D-76133 Karlsruhe
Tel./Fax : +49 (0)721 / 83044 - 98/93
http://www.in-put.de
*****************************************
