Re: Dansguardian on windows 2003 domain

**netadmin** · 29th June 2007, 08:12 PM

OK. 2.9.8 is now installed.

However, when I start it it says "Squid not running. Dansguardian requires Squid".

Squid is running on the Windows 2003 machine.
If I just start squid on the linux box (which is not being used), it then says Dansguardian start FAILED.

Any ideas? I'm guessing a config problem.

**netadmin** · 9th July 2007, 10:01 PM

OK. I have now reinstalled Dansguardian version 2.9.8.5 on my linux server. It does accept traffic.

If I set IE to connect directly to SquidNT, it logs the username properly in Squid.

If I set IE to connect to Dansguardian (which has the proxy ip set to SquidNT), then it logs just the site on SquidNT (also on the DG log, though), but no user name.

Any ideas? I think I'm getting really close. Thanks!

**Geoff** · 10th July 2007, 08:31 AM

verify your dansguardian.conf has the correct authentication plugins enabled.

Code:

authplugin = '/etc/dansguardian/authplugins/proxy-basic.conf'
authplugin = '/etc/dansguardian/authplugins/proxy-ntlm.conf'

Your paths may differ.

**netadmin** · 10th July 2007, 06:57 PM

The auth paths are now enabled and correct.

It still does not work though

Any other ideas?

**Geoff** · 10th July 2007, 08:44 PM

Ensure 127.0.0.1/Localhost is not allowed to bypass authentication.

**netadmin** · 11th July 2007, 03:41 AM

OK. I found part of the problem.
I had created an ACL that bypass authentication coming from the linux server.

The Squid log now shows the domain username, but the DG log doesn't.
Any ideas? (It's getting so close, it seems like)

**Geoff** · 11th July 2007, 08:34 AM

Dansguardian needs to be 'in front' of Squid.

Client -> DG -> Squid -> Internet

**netadmin** · 11th July 2007, 06:43 PM

Below is a screenshot of the network settings from DG.

I have the browsers set to the DG ip (192.168.0.2) with port 8080.

Do I still have things out of order?

**Geoff** · 12th July 2007, 08:18 AM

My dansguardian is set as follows:

Code:

# Network Settings
#
# the IP that DansGuardian listens on.  If left blank DansGuardian will
# listen on all IPs.  That would include all NICs, loopback, modem, etc.
# Normally you would have your firewall protecting this, but if you want
# you can limit it to a certain IP. To bind to multiple interfaces,
# specify each IP on an individual filterip line.
filterip =

# the port that DansGuardian listens to.
filterport = 8080

# the ip of the proxy (default is the loopback - i.e. this server)
proxyip = 127.0.0.1

# the port DansGuardian connects to proxy on
proxyport = 3128

And Squid:

Code:

#IP/Port squid listens for connections on

http_port 127.0.0.1:3128

Thus clients connect on port 8080

LinkBack

Thread Tools

Search Thread