Hello,

Is it possible to log squid when
running in transparent mode ?

I mean generate entries in access.log.

If yes please guide.

Thanks in advance

Varun

Yes but it will only log the IP, not a username.

Can you explain how ?

I don't want to make any chages in
browser settings.

Thanks

Varun

Configure Squid in transparent mode and then look at /var/log/squid/access.log? What more must I explain?

#you could see tail -fv /var/log/squid/access.log

does not show any entries.

Varun

Your should Published you firewall script.

may It not working properly

Here are my rules:

iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 3128
iptables -t nat -A POSTROUTING -o $DEV_INTERNET -j MASQUERADE

$IPTABLES -P INPUT ACCEPT
$IPTABLES -A INPUT -i eth0 -p tcp --dport 22 -j DROP

# Route email through at all times
$IPTABLES -A FORWARD -i eth1 -o eth0 -p tcp --dport 25 -j ACCEPT
$IPTABLES -A FORWARD -i eth0 -o eth1 -p tcp --sport 25 -j ACCEPT
$IPTABLES -A FORWARD -i eth0 -o eth1 -p tcp --sport 110 -j ACCEPT
$IPTABLES -A FORWARD -i eth1 -o eth0 -p tcp --dport 110 -j ACCEPT
$IPTABLES -A FORWARD -p tcp -d 0.0.0.0/0 --destination-port 53 -j ACCEPT
$IPTABLES -A FORWARD -p udp -d 0.0.0.0/0 --destination-port 53 -j ACCEPT
$IPTABLES -A FORWARD -p tcp -d 192.168.0.0/16 --source-port 53 -j ACCEPT
$IPTABLES -A FORWARD -p udp -d 192.168.0.0/16 --source-port 53 -j ACCEPT
$IPTABLES -A FORWARD -p tcp -d 192.168.21.0/16 --source-port 53 -j ACCEPT
$IPTABLES -A FORWARD -p udp -d 192.168.21.0/16 --source-port 53 -j ACCEPT
$IPTABLES -P FORWARD DROP

$IPTABLES -P OUTPUT ACCEPT

--------------------- end rules ------------------------------

Thanks in advance

Varun