LinuxQuestions.org
Latest LQ Deal: Complete CCNA, CCNP & Red Hat Certification Training Bundle
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 09-01-2014, 11:40 AM   #1
Fat Long Fat
LQ Newbie
 
Registered: Sep 2014
Posts: 4

Rep: Reputation: Disabled
SquidGuard/Squid3 not blocking sites


Greetings.

Debian Wheezy. Squid3. SquidGuard. Both installed via apt-get from repository.

Relevant Info.

** snippet from domains

www.xhamster.com


** squidguard.conf#

# CONFIG FILE FOR SQUIDGUARD
#

dbhome /etc/squid3/blacklists
logdir /etc/squid3/log

dest porn {
domainlist porn/domains
urllist porn/urls
}

acl {
default {
pass !porn all
redirect http://localhost/block.html
}
}


** Snippet from squid.conf

url_rewrite_program /usr/bin/squidGuard -c /etc/squidguard/squidGuard.conf


**Snippet squidguard.log

2014-09-01 12:12:31 [7568] INFO: squidGuard 1.5 started (1409587951.864)
2014-09-01 12:12:31 [7568] INFO: squidGuard ready for requests (1409587951.888)
2014-09-01 12:12:31 [7569] INFO: squidGuard 1.5 started (1409587951.876)
2014-09-01 12:12:31 [7569] INFO: squidGuard ready for requests (1409587951.889)
2014-09-01 12:12:31 [7570] INFO: squidGuard 1.5 started (1409587951.907)
2014-09-01 12:12:31 [7570] INFO: squidGuard ready for requests (1409587951.908)
2014-09-01 12:12:31 [7571] INFO: squidGuard 1.5 started (1409587951.915)
2014-09-01 12:12:31 [7571] INFO: squidGuard ready for requests (1409587951.917)
2014-09-01 12:12:31 [7572] INFO: squidGuard 1.5 started (1409587951.905)
2014-09-01 12:12:31 [7572] INFO: squidGuard ready for requests (1409587951.917)

** Snippet squid.log
2014/09/01 12:12:31| Starting Squid Cache version 3.1.20 for x86_64-pc-linux-gnu...
2014/09/01 12:12:31| Process ID 7565
2014/09/01 12:12:31| With 65535 file descriptors available
2014/09/01 12:12:31| Initializing IP Cache...
2014/09/01 12:12:31| DNS Socket created at [::], FD 7
2014/09/01 12:12:31| DNS Socket created at 0.0.0.0, FD 8
2014/09/01 12:12:31| Adding nameserver 127.0.0.1 from /etc/resolv.conf
2014/09/01 12:12:31| helperOpenServers: Starting 5/5 'squidGuard' processes
2014/09/01 12:12:31| helperOpenServers: Starting 5/5 'ncsa_auth' processes
2014/09/01 12:12:32| Unlinkd pipe opened on FD 33
2014/09/01 12:12:32| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec
2014/09/01 12:12:32| Store logging disabled
2014/09/01 12:12:32| Swap maxSize 0 + 262144 KB, estimated 20164 objects
2014/09/01 12:12:32| Target number of buckets: 1008
2014/09/01 12:12:32| Using 8192 Store buckets
2014/09/01 12:12:32| Max Mem size: 262144 KB
2014/09/01 12:12:32| Max Swap size: 0 KB
2014/09/01 12:12:32| Using Least Load store dir selection
2014/09/01 12:12:32| Set Current Directory to /var/spool/squid3
2014/09/01 12:12:32| Loaded Icons.
2014/09/01 12:12:32| Accepting HTTP connections at [::]:3128, FD 34.
2014/09/01 12:12:32| HTCP Disabled.
2014/09/01 12:12:32| Squid plugin modules loaded: 0
2014/09/01 12:12:32| Adaptation support is off.
2014/09/01 12:12:32| Ready to serve requests.
2014/09/01 12:12:33| storeLateRelease: released 0 objects

=============================================================

I think this is working correctly in all aspects except it is not blocking porn sites. I only know of one so I manually added it into the domains file and rebuilt the database. After testing it did not work so I added it to the url file as well, and then rebuilt. I tried xhamster.com as well in both. It never blocked them.

I am aware of the custom locations for the log files and the blacklists, but I was having a lot of difficulties getting it to initialize so I put it in paths that I knew the proxy would see and write too with plans of putting it in more secure locations after I knew it was fully functional.

Does anyone have any idea what I need to do to get this to block sites?

Thank you in advance for looking at my thread.

EDIT:

Note: squid is running on port 3128.

Last edited by Fat Long Fat; 09-01-2014 at 02:49 PM.
 
Old 09-02-2014, 11:43 AM   #2
Fat Long Fat
LQ Newbie
 
Registered: Sep 2014
Posts: 4

Original Poster
Rep: Reputation: Disabled
Everything was correct in configuration it seems. Once setting my test machine browser to actually use the proxy, it worked as intended.

/sigh

Too much stress sometimes makes you overlook the completely obvious.

Thank you all for looking at my post. If anyone has any problems getting their SquidGuard up and running I will gladly lend you a hand by posting my config files here for you to use.

take care

FLF
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Squid3 issues for sites have authentication athreyavc Linux - Server 1 04-14-2014 08:48 PM
[SOLVED] squid3 is denying all http sites cli Linux - Newbie 4 07-16-2013 11:51 AM
squid 2.6 not blocking sites even i entered ACL to block sites mohantorvalds Linux - Server 1 01-08-2009 04:17 AM
SquidGuard Not Blocking the blacklisted sites santhosh23 Linux - Security 0 11-17-2007 05:17 AM
SquidGuard is not blocking anything vivekthemind Linux - Networking 2 12-05-2005 10:45 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 09:04 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration