dansguardian makes squid logs useless

sunethj · 02-19-2007, 03:46 AM

I am running Dansguardian and Squid on a RHL 9 box. Users are connected to port 8081 (Dansguardian) and Dansguardian is configured to listen on port 8080 (Squid port). Now when I analyze the squid logs all i see is the local ip address of my proxy server.

Is there a way I can configure users to connect squid first and then send the traffic through Dansguardian for content filtering.

Thanks in advance.

acid_kewpie · 02-19-2007, 04:09 AM

i'd suggest using the x-forwarded-for header across the apps to hold the real source ip within the http header, and log that ip when present.

sunethj · 02-19-2007, 04:25 AM

thanks for your quick reply.

users are using internet explorer and mozilla firefox browsers. please give an example of how to use "x-forwarded-for headers" in this case.

acid_kewpie · 02-19-2007, 04:29 AM

it's not related to the browsers, it's a proxy level configuraion. just google for dansguardian and x-forwarded-for

sunethj · 02-19-2007, 05:32 AM

finally i found a solution in dansguardian.conf file. by editing the "logfileformat" to 3 it logs in squid format and allows to analyse easily using squint.