Topic: Jbennett squidGuard Contrib issue

[cmwi96]

Hi,
I did a lot of research yesterday trying to decide on and SG contrib. I was really happy with how it went and I can tell you did a lot of work to make this work like it should. I wanted to call your attention to something though. If you add categories to the Squidguard_Block db entry and expand templates it creates the sg dest section and adds it to the ACL. This makes it VERY easy to use kudos. The problem comes in when you want to use the reserved word in-addr so that you cant access sites via IP. Creating a dest section here is not needed and in fact if you do not have the directory structure set up, it causes sg to go into emergency mode. Obviosly I could create custom templates to accomplish what I want, but I though I'd make mention of it for future consideration.

[cmwi96]

post forum upgrade bump

[mrjhb3]

Hi,
I did a lot of research yesterday trying to decide on and SG contrib. I was really happy with how it went and I can tell you did a lot of work to make this work like it should. I wanted to call your attention to something though. If you add categories to the Squidguard_Block db entry and expand templates it creates the sg dest section and adds it to the ACL. This makes it VERY easy to use kudos. The problem comes in when you want to use the reserved word in-addr so that you cant access sites via IP. Creating a dest section here is not needed and in fact if you do not have the directory structure set up, it causes sg to go into emergency mode. Obviosly I could create custom templates to accomplish what I want, but I though I'd make mention of it for future consideration.

I'm not sure I really understand what you are telling me here.  Please give me an example of what gets written in squidguard.conf and what should be written.

John

[cmwi96]

Thanks for the reply. in-addr is used to specify to squidguard that you don't want users to access websites via IP addresses only. Thus the ACL should look like this:
pass trusted !adult !aggressive !drugs !gambling !hacking !porn !proxy !untrusted !violence !warez !in-addr all
however if try to do this by making a Squidguard_Block db entry it not only adds the !in-addr to the ACL but also adds the destination section
# in-addr ACL entries
dest in-addr {
        domainlist      in-addr/domains
        urllist         in-addr/urls
}
to the config as well. This is not necessary as in-addr is a keyword and also causes squidguard to go into emergency mode if the files listed do not exist. I simply modified the template to add !in-addr however its possible not everyone would chose to do this.

[mrjhb3]

cmwi96,

I see what you are saying and think I have fixed it.  Wait for the mirrors to sync, I had to upload it a few times, so I would suggest you wait until tommorrow.

John