Squidguard Problem

[twoface]

Witam,

Squida i squidGuarda zainstalowałem yumem.

Następnie dopisałem do squid.conf redirecta (to działa bo odpala się squidGuard ale z błedami)

Zrobiłem chmod -R 775 /var/squidGuard.

Jednak przy "service squid restart" na podglądzie mam : " tail -f /var/log/squid/squidGuard.log"

pokazuje następujące błędy:

2009-06-15 09:05:25 [27933] New setting: dbhome: /var/squidGuard/blacklists
2009-06-15 09:05:25 [27933] New setting: logdir: /var/log/squid
2009-06-15 09:05:25 [27933] Added User: root
2009-06-15 09:05:25 [27933] Added User: foo
2009-06-15 09:05:25 [27933] Added User: bar
2009-06-15 09:05:25 [27933] destblock good missing active content, set inactive
2009-06-15 09:05:25 [27933] destblock local missing active content, set inactive
2009-06-15 09:05:25 [27933] init domainlist /var/squidGuard/blacklists/blacklists/porn/domains
2009-06-15 09:05:25 [27933] /var/squidGuard/blacklists/blacklists/porn/domains: Permission denied
2009-06-15 09:05:25 [27933] Going into emergency mode

Na użytkowniku squid mogę bez problemu wejść do /var/squidGuard/blacklists/blacklists/porn/domains i obejrzeć plik.

Próbowałem też odpalić squidGuarda na root'cie ale też nie daje rady.

Fedora 10.

[qmic]

 

 

Zobacz kto jest właścicielem /var/log/squid/squidGuard.log i ustaw takiego samego dla /var/SquidGuard

 

Jak nie pomoże to może możesz wstawić tu konfigurację Squidguard i squid.

[twoface]

Wygląda na to że prawa są ok. Dla /var/squidGuard chown -R squid:squid oraz chmod -R 775.

-rw-r----- 1 squid squid 1763541 cze 15 11:07 /var/log/squid/squidGuard.log

drwxrwxr-x  3 squid squid 4096 lut 24 17:41 squidGuard (/var/squidGuard)

 

 

/etc/squid/squidGuard.conf:

 

#
# CONFIG FILE FOR SQUIDGUARD
#

dbhome /var/squidGuard/blacklists
logdir /var/log/squid

#
# TIME RULES:
# abbrev for weekdays:
# s = sun, m = mon, t =tue, w = wed, h = thu, f = fri, a = sat

time workhours {
       weekly mtwhf 08:00 - 16:30
       date *-*-01  08:00 - 16:30
}

#
# REWRITE RULES:
#

source clients {
       ip              128.1.5.0/24
}

rew dmz {
       s@://admin/@://admin.foo.bar.de/@i
       s@://foo.bar.de/@://www.foo.bar.de/@i
}

#
# SOURCE ADDRESSES:
#

src admin {
       ip              1.2.3.4 1.2.3.5
       user            root foo bar
       within          workhours
}

src foo-clients {
       ip              172.16.2.32-172.16.2.100 172.16.2.100 172.16.2.200
}
src bar-clients {
       ip              172.16.4.0/26
}

#
# DESTINATION CLASSES:
#

dest good {
}

dest local {
}

dest adult {
       domainlist      blacklists/porn/domains
       urllist         blacklists/porn/urls
       expressionlist  blacklists/porn/expressions
       redirect        http://www.google.pl
}


acl {
       clients {
               pass none
       }

       admin {
               pass     any
       }

       foo-clients within workhours {
               pass     good !in-addr !adult any
       } else {
               pass any
       }

       bar-clients {
               pass    local none
       }
       default {
               pass     local none
               rewrite  dmz
               redirect http://admin.foo.bar.de/cgi/blocked?client...group=%t+url=%u
       }
}

 

/etc/squid/squid.conf:

 

acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8

acl localnet src 128.1.5.0/24 # RFC1918 possible internal network
acl SSL_ports port 443 # RFC1918 possible internal network
acl Safe_ports port 80 # RFC1918 possible internal network

acl Safe_ports port 21
acl Safe_ports port 443 # http
acl Safe_ports port 70 # ftp
acl Safe_ports port 210 # https
acl Safe_ports port 1025-65535 # gopher
acl Safe_ports port 280 # wais
acl Safe_ports port 488 # unregistered ports
acl Safe_ports port 591 # http-mgmt
acl Safe_ports port 777 # gss-http
acl CONNECT method CONNECT # filemaker

http_access allow manager localhost
http_access deny manager

http_access deny !Safe_ports

http_access deny CONNECT !SSL_ports
http_access allow localnet

http_access allow localhost
http_access deny all

icp_access allow localnet
icp_access deny all

htcp_access allow localnet
htcp_access deny all

http_port 3128

hierarchy_stoplist cgi-bin ?

access_log /var/log/squid/access.log squid

refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern (cgi-bin|\?)    0       0%      0
refresh_pattern .               0       20%     4320
icp_port 3130

redirect_program /usr/bin/squidGuard -c /etc/squid/squidGuard.conf
url_rewrite_children 400

[qmic]

Czy przed uruchomieniem squid`a wykonujesz polecenie:

squidGuard -C all

?