+ Post New Thread
Results 1 to 8 of 8
*nix Thread, Squid Not allowing sites back on in Technical; Hi we use Squid proxy in our school. Something that was setup by my predessor and i am not aware ...
  1. #1
    ranj's Avatar
    Join Date
    Feb 2006
    Location
    Birmingham
    Posts
    732
    Thank Post
    100
    Thanked 42 Times in 32 Posts
    Rep Power
    25

    Squid Not allowing sites back on

    Hi we use Squid proxy in our school. Something that was setup by my predessor and i am not aware of how to change things at an advanced level so am wondering if anyone might be able to shed some light on an issue we are having.

    The benefit we find with Squid is that as a school we can instantly block and unblock sites.

    We normally have a log file on the server which we edit (found in etc/squidguiard/lists/lbl and we normally enter the domain of a website and hey presto after a few minutes the site is usually blocked.

    I remember my predesssor telling me if I want to permantly unblock a site there is another file in there (etc/squidguard/lists/always) and if i pop in a domain name into there it will make the site always available.

    So in the past we had google gmail blocked for our students but we want to make it available, so I went into the LBL file to find the domain and remove ita and also popped it into the always list so it will ALWAYS be available but I am still getting the standard error message that the site is blocked.

    Filter List Rejection Page
    The requested URL has been blocked by category filtering

    While trying to retrieve the URL: http://mail.google.com/mail/

    The following error was encountered:

    Access Denied.
    Access control configuration prevents your request from being allowed at this time. Please contact your service provider if you feel this is incorrect.

    If I bypass the proxy though, I can access the website so I know its a problem with Squid. Does anyone know what could be causing this.

    Squid is running on our Gentoo Linux server and I am not very experienced with linux. I know that we can access the server via a web interface at https:{servername}:10000, and under the squid proxy server tab there is an option to Clear and rebuild Cache I was thinking of trying this incase there was some sort of corruption.

    Could this fix it?

    Your help is appreciated.

  2. #2

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,812
    Thank Post
    110
    Thanked 585 Times in 506 Posts
    Blog Entries
    1
    Rep Power
    224
    Please post your squid.conf so we can see how your proxy works.

  3. Thanks to Geoff from:

    ranj (18th April 2008)

  4. #3
    ranj's Avatar
    Join Date
    Feb 2006
    Location
    Birmingham
    Posts
    732
    Thank Post
    100
    Thanked 42 Times in 32 Posts
    Rep Power
    25
    Hi Geoff

    I can find Squidguard.conf. Is this what you are looking for?

  5. #4

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,812
    Thank Post
    110
    Thanked 585 Times in 506 Posts
    Blog Entries
    1
    Rep Power
    224
    No that's just squid redirector that does filtering.

  6. #5

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,812
    Thank Post
    110
    Thanked 585 Times in 506 Posts
    Blog Entries
    1
    Rep Power
    224
    Ok, thanks for sending me the conf. Can you check the contents of '/etc/squid/block.url' I think gmail is listed in there.

  7. #6
    ranj's Avatar
    Join Date
    Feb 2006
    Location
    Birmingham
    Posts
    732
    Thank Post
    100
    Thanked 42 Times in 32 Posts
    Rep Power
    25
    Thanks Geoff that worked.

    Myself and my colleague were asking why an entry was in that folder.

    I have been told that if i go to squidguard that would allow me to block sites and allow sites.

    Is that something that could have been used before my time?

    The last time it had been edited was 2005!

    Thanks again.

  8. #7

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,812
    Thank Post
    110
    Thanked 585 Times in 506 Posts
    Blog Entries
    1
    Rep Power
    224
    It seems to pre-date the squidguard installation. My suggestion for the history of the system is that that list was being used, then at some point the more advanced features of squidguard were requried. I guess whoever did the squidguard installation either forgot to move the urls over, or didn't want to touch something that was working fine.

    My suggestion would be to move all the urls listed in that file over to the squidguard based lists, then remove the line that references the file in the squid.conf.

  9. #8

    Join Date
    Aug 2005
    Location
    London
    Posts
    3,157
    Thank Post
    116
    Thanked 529 Times in 452 Posts
    Blog Entries
    2
    Rep Power
    124
    Don't know a lot about squid but I always get it to re-read the config file when I make changes to it. In Windows you do that with
    squid -k reconfigure -n squidnt
    (last bit just the name of the instance); it's something similar in Unix. Might be worth trying that?

SHARE:
+ Post New Thread

Similar Threads

  1. Allowing RDP access to ISA Server
    By adamf in forum Windows
    Replies: 6
    Last Post: 4th January 2008, 03:06 PM
  2. Replies: 16
    Last Post: 3rd December 2007, 08:08 PM
  3. Need help allowing Dameware to connect through ISA 2004
    By GlennT in forum Wireless Networks
    Replies: 3
    Last Post: 27th September 2007, 07:51 AM
  4. Allowing Users to use USB Flash Drives
    By Zoom7000 in forum Windows
    Replies: 29
    Last Post: 3rd April 2007, 08:26 PM
  5. Allowing access to a single folder on C:
    By Ric_ in forum Windows
    Replies: 5
    Last Post: 2nd November 2005, 11:51 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •