From what you say it seems to be working fine,

The log shows squidGuard started up,
PS shows the re director is running,
And nothing is getting blocked as you have asked squidGuard to pass all.

Try changing the default to pass none and see if it all gets blocked.


Robin Clayton

At 18:05 14/11/2002 +0300, you wrote:
Greetings!

I'm running Squid-2.4 with squidGuard-1.2.0 on FreeBSD-4.6.2-release.

I started squidGuard with minimal configuration as recommended.

/usr/local/etc/squid/squidGuard.conf
---
logdir /var/log/
acl {
default
{
pass all
}
}
---

But Squid doesn't seem to redirect requests to squidGuard, though logs
say that everything is ok.

/usr/local/squid/logs/cache.log
---
2002/11/14 18:46:41| Starting Squid Cache version 2.4.STABLE6 for i386-portbld-freebsd4.6.2...
2002/11/14 18:46:41| Process ID 20034
2002/11/14 18:46:41| With 11095 file descriptors available
2002/11/14 18:46:41| Performing DNS Tests...
2002/11/14 18:46:41| Successful DNS name lookup tests...
2002/11/14 18:46:41| DNS Socket created on FD 4
2002/11/14 18:46:41| Adding nameserver 127.0.0.1 from /etc/resolv.conf
2002/11/14 18:46:41| helperOpenServers: Starting 5 'squidGuard' processes
2002/11/14 18:46:42| Unlinkd pipe opened on FD 14
2002/11/14 18:46:42| Swap maxSize 102400 KB, estimated 7876 objects
2002/11/14 18:46:42| Target number of buckets: 393
2002/11/14 18:46:42| Using 8192 Store buckets
2002/11/14 18:46:42| Max Mem size: 8192 KB
2002/11/14 18:46:42| Max Swap size: 102400 KB
2002/11/14 18:46:42| Rebuilding storage in /usr/local/squid/cache (CLEAN)
2002/11/14 18:46:42| Using Least Load store dir selection
2002/11/14 18:46:42| Set Current Directory to /usr/local/squid/cache
2002/11/14 18:46:42| Loaded Icons.
2002/11/14 18:46:42| Accepting HTTP connections at 0.0.0.0, port 3128, FD 16.
2002/11/14 18:46:42| Accepting ICP messages at 0.0.0.0, port 3130, FD 17.
2002/11/14 18:46:42| WCCP Disabled.
2002/11/14 18:46:42| Ready to serve requests.
2002/11/14 18:46:42| Done reading /usr/local/squid/cache swaplog (119 entries)
2002/11/14 18:46:42| Finished rebuilding storage from disk.
2002/11/14 18:46:42| 119 Entries scanned
2002/11/14 18:46:42| 0 Invalid entries.
2002/11/14 18:46:42| 0 With invalid flags.
2002/11/14 18:46:42| 119 Objects loaded.
2002/11/14 18:46:42| 0 Objects expired.
2002/11/14 18:46:42| 0 Objects cancelled.
2002/11/14 18:46:42| 0 Duplicate URLs purged.
2002/11/14 18:46:42| 0 Swapfile clashes avoided.
2002/11/14 18:46:42| Took 0.3 seconds ( 360.2 objects/sec).
2002/11/14 18:46:42| Beginning Validation Procedure
2002/11/14 18:46:42| Completed Validation Procedure
2002/11/14 18:46:42| Validated 119 Entries
2002/11/14 18:46:42| store_swap_size = 546k
2002/11/14 18:46:43| storeLateRelease: released 0 objects
---

/var/log/squidGuard.log
---
2002-11-14 18:46:42 [20035] squidGuard 1.2.0 started (1037288802.075)
2002-11-14 18:46:42 [20035] squidGuard ready for requests (1037288802.076)
2002-11-14 18:46:42 [20036] squidGuard 1.2.0 started (1037288802.076)
2002-11-14 18:46:42 [20036] squidGuard ready for requests (1037288802.078)
2002-11-14 18:46:42 [20037] squidGuard 1.2.0 started (1037288802.096)
2002-11-14 18:46:42 [20037] squidGuard ready for requests (1037288802.097)
2002-11-14 18:46:42 [20038] squidGuard 1.2.0 started (1037288802.097)
2002-11-14 18:46:42 [20038] squidGuard ready for requests (1037288802.098)
2002-11-14 18:46:42 [20039] squidGuard 1.2.0 started (1037288802.116)
2002-11-14 18:46:42 [20039] squidGuard ready for requests (1037288802.117)
---

ps -ax | grep squid
---
20032 ?? Is 0:00.01 squid
20034 ?? S 0:00.11 (squid) (squid)
20035 ?? Is 0:00.02 (squidGuard) /usr/local/etc/squid/passwd (squidGuard)
20036 ?? Is 0:00.02 (squidGuard) /usr/local/etc/squid/passwd (squidGuard)
20037 ?? Is 0:00.02 (squidGuard) /usr/local/etc/squid/passwd (squidGuard)
20038 ?? Is 0:00.02 (squidGuard) /usr/local/etc/squid/passwd (squidGuard)
20039 ?? Is 0:00.02 (squidGuard) /usr/local/etc/squid/passwd (squidGuard)
20088 p0 R+ 0:00.00 grep squid
---

Squid behaves itself as if there were no redirect program specified in
squid.conf, i.e. doesn't pass to anywhere. It is well-checked by
changing "http_access deny all" to "http_access allow all".

Any solutions or recommendations will be appreciated.

---
Sincerely Yours,
Ivan Fomitchev

Reply via email to