Topic: squid access list & Dan's Guardian

[Mike Coan]

I am running SME Server with update 3 installed.  I had been using Squidguard for content filtering, but just switched to Dan's Guardian.

Before I was able to limit internet access to a group of machines by doing the following in squid.conf

acl permitted_hosts src 192.168.3.240-192.168.3.253/255.255.255.240 (all on one line)

http_access allow permitted_hosts
http_access deny all

There were actually a bunch of other entries as well.

Note I modified squid.conf by creating the custom templates in the appropriate place.  If the line
http_access allow permitted_hosts
is in squid.conf, then no has internet access.  If the line is changed to

http_access allow localsrc

then everyone has internet access.

I tried it machine by machine.  For example

acl jupiter src 192.168.3.240/255/255.255.255

http_access allow jupiter

jupiter has no access.  the error message indicates it is because of access control and suggest contacting the administrator, which is me.

The filtering is working fine.  If i attempt to reach a filtered site via the browser, it is blocked and I get the Dan's Guardian message about an inappropriate url or whatever.

I know that squidguard used 3128 as the port and Dan's Guardian use 8080.  Setting the browser to use the proxy server at 8080 goes through Dan's Guradian, but blocks internet access for everyone if there is anything other than

http_access allow local src

in squid.conf.

I have always expanded the template and restarted squid and Dan's Gurdian as needed.

Any ideas are appreciated

Mike

[Roger Parker]

If you will look at the squid/access.log you will noice that dansguardian is passing the proxy address of 127.0.0.1 instead of the ip address of the requestor.  I am searching for a solution to this problem as well as I use SARG to get user internet usage and everything shows as one address 127.0.0.1.  If you find the solution please let me know and I will do the same for you.