Hi Everyone,

I'm having some issues with SquidGuard. I am fairly new to squid and squidguard so bare with me.

I took over the position of the systems admin here. What I've noticed is the squidguard that was setup, doesn't seem to be working anymore, even though the previous guy said it was.

When I logon to webmin into the squidguard server, and click on blacklists, it says No blacklists found.

Logging Directory is as follows

/var/log/squidguard

database directory is as follows

/usr/local/squidguard/blacklists/

I logged onto the server and checked the /usr/local/squidguard/blacklist directory and there is definately a huge list of blacklists there. I checked the /var/log/squidguard directory and there is a squidGuard.log in there

So those directories seem to be right.

Why would it show " no blacklists found"

Also the log shows this


2011-02-13 04:02:15 [8231] syntax error in configfile /usr/local/squidGuard/squidGuard.conf line 1


But I don't know what line 1 is?


-----------------------------

My SquidGuard.conf



CONFIG FILE FOR SQUIDGUARD


dbhome /usr/local/squidguard/blacklists/
logdir /var/log/squidguard


SOURCE CLASSES:

src facebook_users {
ip 192.168.3.108 192.168.3.136 192.168.3.111 192.168.3.138 192.168.3.137 192.168.3.100 192.168.3.130 192.168.3.112 192.168.2.123 192.168.3.120 192.168.3.124 192.168.3.131 192.168.3.119 192.168.3.135 192.168.3.134 192.168.3.109
}

DESTINATION CLASSES:


destination porn {
domainlist porn/domains
urllist porn/urls
expressionlist porn/expressions
log stopped.log
}

acl {
facebook_users {
pass all
}


default {
pass !porn all
redirect http://www.globaltc.ca/images/AD.jpg
}
}

Is is /usr/local/squidGuard or /usr/local/squidguard? They aren't the same thing.

Also, if that "CONFIG FILE FOR SQUIDGUARD" line is in the file, then that is probably the syntax error.

my squidGuard.conf is in /usr/local/squidGuard

so Should that top line read /usr/local/squidGuard instead of /usr/local/squidguard

??

---------- Post added 02-17-11 at 01:13 PM ----------

My blacklists are in /usr/local/squidguard so thats why I had the dbhome set to that.

The syntax error is why SquidGuard is telling you there are no blacklists. It's looking in the default directory (/usr/local/squidGuard), instead of the correct one. Is there a reason why you have them in /usr/local/squidguard, instead?

That's where it was when I came into the company.

So what should I change and/or remove?

Is that "CONFIG FILE FOR SQUIDGUARD" line in your /usr/local/squidGuard/squidGuard.conf file? There's supposed to be a "#" in front of it if it is, as well as in front of the "SOURCE CLASSES:" and "DESTINATION CLASSES:" lines.

It is,

If I remove it and restart squid. For some reason I can no longer access any websites

So When I put the # in front of those mentioned above.

I can no longer access any websites at all.

Comment out those lines and run squidGuard -u, then restart squid and see what happens.

What do you mean by Comment Out ?

does that mean put the # in front of them? Then Run squidGuard -u then restart squid?

Yes. A line that starts with "#" is a comment in a squidGuard config file.

Ok, I will have to try this after hours (effects a lot of staff/clients. So 2.5 hours and I'll give this another try.

I'll get back to you, thanks

Forgot to ask, What does squidGuard -u perform?

Ok So I can access websites, but nothing seems to be blocked still. Tested a bad site.

Nevermind, it's working now

---------- Post added 02-17-11 at 04:45 PM ----------

Thank you for your help

How can I allow Certain IP addresses to not be blocked?