problem with squidGuard

Barq · 05-20-2009, 07:36 AM

Hi
I install squidguard , and i want to redirect each request for specific host in my lan (say it is 192.168.0.253) to specific web page , and i write this rule:

in squidGuard.conf

src block {

ip 192.168.0.253

}

acl {

block {

pass none

redirect http://localhost/index.php

}

}

+++++++++++++++++++++++++++++++++++++++++++++++++++++

in squid.conf i put this directive

http_port 192.168.0.1:3128

redirect_program /usr/local/bin/squidGuard -c /usr/local/squidGuard/squidGuard.conf

redirect_children 6

chitambira · 05-21-2009, 04:26 AM

So? ... You have not described your problem, this looks like a Howto. I have failed to find a "?" in your post.

Barq · 05-21-2009, 07:10 AM

I am very sorry for that
when i put previous configuration , the host which has ip 192.168.0.253 is not redirect to url which i specified.

why?

chitambira · 05-21-2009, 10:20 AM

If you try to designate which clients get blocked by using a source group with the clients designated by ip address, you must have a line in your squid.conf file to cause squid to supply the entire ip address for each client. For instance, if you have:

src block {
ip 192.168.1.253
}

then you must put the following line into your squid.conf file:

client_netmask 255.255.255.255

Otherwise, squid will only supply the upper 16 bits of the client ip addresses and no clients will match the result.

src: http://www.maynidea.com/squidguard/faq-plus.html

bimolendu · 05-22-2009, 06:08 AM

In my squid.conf file I want to block the ip address for local network.My eth1, IPADDR=172.17.0.1 and NETMASK=255.255.0.0 where i want to block the ip address from 172.17.13.0 to 172.17.255.255 i.e. my active network will be 172.17.0.0 to 172.17.12.255

bimolendu · 05-22-2009, 06:44 AM

[QUOTE=bimolendu;3549179]In my squid.conf file I want to block the ip address for local network.My eth1, IPADDR=172.17.0.1 and NETMASK=255.255.0.0 where i want to block the ip address from 172.17.13.0 to 172.17.255.255 i.e. my active network will be 172.17.0.0 to 172.17.12.255

chitambira · 05-22-2009, 09:49 AM

@bimolendu:
are u saying your requirements are the same as barg? if not, I suggest you start your own thread. If thgey are, you are supposed to just subscribe to the thread and watch for solutions than interrupting and hijacking someone's thread, which might lead to taking away attention to their original problem.