squid + squidguard on FC4
squid 2.5
squidGuard 1.2
Fedora Core 4
Dual P4 2.8 Server
I'm pulling my hair out with squidGuard!!!!
I have been using Squid in house for about 2 months, and working great. I want to use block lists for adult, warez, and evil sites of nature so I figured that squidGuard would give me what I need.
So far, squidGuard is not working at all for me.
Simply put, I need squid to just log what IP is going where, so there is no NTLM or kerberos authentication with my windows domain. We don't plan on blocking any web access per username or IP. So my ACL for squid is simple -- Allow All. the All is my range of address 192.168.2.1-192.168.2.254. By the way - SARG is doing my logging, and very well I may say!
Now on squidGuard -- my 'helper program' in squid is setup correctly to point to the squidGuard and config file (/usr/bin/squidguard -c /etc/squid/squidguard.conf). I made an ACL in squidGuard of my internal IP range as stated before, and named it Internal. So my rule for squidGuard simply says Internal Any. This was just to test, so I can see if redirecting to squidGuard works. Well, I can't seem to get anywhere on the internet with this config. ALSO -- I checked my squidGuard.log, and it is empty.
I'll post my squidGuard.conf file here...
Code:
#
# CONFIG FILE FOR SQUIDGUARD
#
dbhome /var/lib/squidguard
logdir /var/log/squidguard
#
# TIME RULES:
# abbrev for weekdays:
# s = sun, m = mon, t =tue, w = wed, h = thu, f = fri, a = sat
time All {
weekly * 00:00 - 23:59
}
time workhours {
weekly mtwhf 06:00 - 18:30
date *-*-01 08:00 - 16:30
}
#
# REWRITE RULES:
#
rew dmz {
s@://admin/@://admin.foo.bar.no/@i
s@://foo.bar.no/@://www.foo.bar.no/@i
}
#
# SOURCE ADDRESSES:
#
src internal {
ip 192.168.2.1-192.168.2.254
}
src admin {
ip 192.168.2.33
user root foo bar
within workhours
}
src foo-clients {
ip 192.168.2.1-192.168.2.254
}
src bar-clients {
ip 172.16.4.0/26
}
#
# DESTINATION CLASSES:
#
destination good within All {
urllist good.desturllist
domainlist good.destdomainlist
}
dest local {
}
dest adult {
domainlist dest/adult/domains
urllist dest/adult/urls
expressionlist dest/adult/expressions
redirect http://admin.foo.bar.no/cgi/blocked?clientaddr=%a+clientname=%n+clientident=%i+srcclass=%s+targetclass=%t+url=%u
}
acl {
internal {
pass any
rewrite dmz
}
default {
pass any
redirect http://admin.foo.bar.no/cgi/blocked?clientaddr=%a+clientname=%n+clientident=%i+srcclass=%s+targetclass=%t+url=%u
}
}
I would rather use squidGuard because I hear that is works great and fast, but if I can't get this to work, I'm just going to make ACL's in squid and block lists.
If someone can help me, great...
