Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

Below is my squid 3.3 and squidguard 1.5 confg files, running in Ubuntu 14.04 64bit server.

I am having problems with squidguard, if i am to put anymore than 3 blocks of blacklists, it stops working all together even though the db update works just fine. I have also tried to group all my blacklists into my block which also didn't work, can anyone help me figure out why, it won't except any more than 3 blocks in squidguard. Squidguard also stop working from time to time

SquidGuard.conf

dbhome /var/lib/squidguard/db
logdir /var/log/squidguard

dest ads {
        domainlist      ads/domains
        urllist         ads/urls
        expressionlist  ads/expressions
}

dest porn {
        domainlist      porn/domains
        urllist         porn/urls
        expressionlist  porn/expressions
}

dest white {
        domainlist      whitelist/domains
        urllist         whitelist/urls
}

acl {
        default {
                pass    white !ads !porn all
                redirect       302:http://xx.xx.xx.xx/Transparent.png
#               redirect http://xxx.xxx.xxx.xx/cgi-bin/blocked.cgi?clientaddr=%a$
        }
}

 Squid.conf

http_port 3129
http_port 3128 transparent

refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern -i (/cgi-bin/|\?) 0     0%      0
refresh_pattern .               0       20%     4320

acl localnet src 10.0.0.0/8     # RFC 1918 possible internal network
acl localnet src 172.16.0.0/12  # RFC 1918 possible internal network
acl localnet src 192.168.0.0/16 # RFC 1918 possible internal network
acl localnet src xx.xx.xx.xx    # Home
acl localnet src fc00::/7       # RFC 4193 local private network range
acl localnet src fe80::/10      # RFC 4291 link-local (directly plugged) machines

acl SSL_ports port 443          # https

acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443         # https
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http

acl CONNECT method CONNECT

http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost manager
http_access deny manager
http_access allow localnet
http_access allow localhost
http_access deny all

url_rewrite_access allow all
url_rewrite_program /usr/bin/squidGuard -c /etc/squidguard/squidGuard.conf
url_rewrite_children 5

#Anonymizing
via off
forwarded_for off
request_header_access Allow allow all
request_header_access Authorization allow all
request_header_access WWW-Authenticate allow all
request_header_access Proxy-Authorization allow all
request_header_access Proxy-Authenticate allow all
request_header_access Cache-Control allow all
request_header_access Content-Encoding allow all
request_header_access Content-Length allow all
request_header_access Content-Type allow all
request_header_access Date allow all
request_header_access Expires allow all
request_header_access Host allow all
request_header_access If-Modified-Since allow all
request_header_access Last-Modified allow all
request_header_access Location allow all
request_header_access Pragma allow all
request_header_access Accept allow all
request_header_access Accept-Charset allow all
request_header_access Accept-Encoding allow all
request_header_access Accept-Language allow all
request_header_access Content-Language allow all
request_header_access Mime-Version allow all
request_header_access Retry-After allow all
request_header_access Title allow all
request_header_access Connection allow all
request_header_access Proxy-Connection allow all
request_header_access User-Agent allow all
request_header_access Cookie allow all
request_header_access All deny all

#Default:
dns_v4_first on

#Cache
#cache_mem 1024 MB
#cache_dir ufs /var/spool/squid3 10000 16 256
access_log stdio:/var/log/squid3/access.log
#cache_log /var/log/cache/cache.log

# DNS OPTIONS
# ==========
#
dns_timeout 10 seconds
dns_nameservers 8.8.8.8 8.8.4.4

# OPTIONS FOR TUNING THE CACHE
# ========================

#refresh_pattern ^ftp: 1440 20% 10080 reload-into-ims
#refresh_pattern ^gopher: 1440 0% 1440
#refresh_pattern -i \.(gif|png|jp?g|ico|bmp|tiff?)$ 10080 95% 43200 override-exp$
#refresh_pattern -i \.(rpm|cab|deb|exe|msi|msu|zip|tar|xz|bz|bz2|lzma|gz|tgz|rar$
#refresh_pattern -i \.(avi|iso|wav|mid|mp?|mpeg|mov|3gp|wm?|swf|flv|x-flv|axd)$ $
#refresh_pattern -i \.(html|htm|css|js)$ 1440 75% 40320
#refresh_pattern -i \.index.(html|htm)$ 0 75% 10080
#refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
#refresh_pattern . 1440 90% 10080

# ADMINISTRATIVE PARAMETERS
# =====================

cache_mgr xxxxx@xxx
cache_effective_user proxy
cache_effective_group proxy
httpd_suppress_version_string on
visible_hostname 
share|improve this question

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.