Hello Ryan,

For SquidGuard to log something, you'll have to use a "redirect" line. So
all you have to do is to redirect to the original URL that have been
requested by users.
Try "redirect /%u" in your dest class, it works for me (btw I can't remind
why I needed a "/").

HTH,
Rémi

> -----Message d'origine-----
> De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
> Envoyé : mercredi 13 septembre 2006 08:49
> À : Mike Rambo
> Cc : [EMAIL PROTECTED]; [email protected]
> Objet : Re: logging but not blocking sites
> 
> 
> This was a good suggestion...but its a no-go.  I tried 
> removing the redirects...from the acl, the destination class, 
> or even from the whole setup it still passes traffic along 
> but doesn't log the traffic.  Does anyone have an idea here?
> 
> Thanks in advance.  Thanks Mike for the suggestion.
> 
> Ryan
> 
> 
> > [EMAIL PROTECTED] wrote:
> >> All,
> >>
> >> I am using squidguard 1.2.0 and been using one of the blacklists 
> >> available to filter inapproriate content.
> >>
> >> One of my acls looks like this:
> >>
> >>         family within daytime {
> >>                 pass     good whitelist !in-addr !adult !custom
> >> !audio-video whitelist any
> >>         }
> >>
> >> Anyway, I'd like to not block sites from some classes 
> >> completely...but rather just log them.  An example of of a 
> >> destination class that I'd like to log is found here:
> >>
> >> dest adult {
> >>         domainlist      adult/domains
> >>         urllist         adult/urls
> >>         expressionlist  adult/expressions
> >>         redirect 
> >> 
> http://192.168.0.254/cgi-bin/squidGuard.cgi?clientaddr=%a&clie
ntname=%n&clientuser=%i&clientgroup=%s&url=%u
>>         logfile         adult
>> }
>>
>> I know that /var/log/squid/access.log will log all requests, but I 
>> like the way squidguard identifies and logs specific classes (like 
>> adult content for instance).  Does anyone know if it is possible to 
>> log but not block traffic that has been flagged?  How would I go 
>> about doing that?
>>
>> Thanks in advance,
>>
>> Ryan
>>
>
> Have to admit I haven't tried it but I'd assume that if there was no 
> redirect line either in the destination class or the acl where it is 
> activated for the group then you'd do what you want.
>
>
> --
> Mike Rambo
> [EMAIL PROTECTED]
>
> Many today claim to be tolerant. True tolerance, however, can cope 
> with others being intolerant.
>      -Nigel Cunningham
>

Reply via email to