Bullet333

Ubuntu 12.10 Squid3 3.1 Dansguardian 2.10.1.1 Postfix 2.9.6 When I attempt to 'Generate Report Now' using 'Squid Report Generator' on the Webmin module I get the following error message: sarg -l /var/log/squid3/access.log mail: cannot send message: Process exited with a non-zero status SARG: command return status 36SARG: command: sudo mail -s "SARG report, Wed May 8 12:40:11 2013" "[email protected]" <"/tmp/sarg/2013May08-2013May08/report" Sending mail via the 'Mail' command works fine. I was also getting error messages via email: Failed to generate Sarg report:sarg -l /var/log/squid3/access.log SARG: getword backtrace: SARG: 1:sarg() [0x4091c7] SARG: 2:sarg() [0x4096c1] SARG: 3:sarg() [0x405caa] SARG: 4:/lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xed) [0x7ff08ed3e76d] SARG: 5:sarg() [0x408981] SARG: Maybe you have a broken time in your access.log file SARG: getword loop detected after 255 bytes. SARG: Line="" SARG: Record="" SARG: searching for 'x20' I've tried various Source and Destination variations as well as changing the permissions on the log files themselves. This used to work when I had Sendmail installed but I recently switched to Postfix due to how complex Sendmail was and various other issues I was having (look at my other threads). Please can someone tell me what's going on? Thanks

I appreciate the replies but I'm not that interested in replacing my problem. I already have a firewall and VPN, so I'd rather solve the issue. I can supply you with more information if required. The proxy doesn't have to be authenticated with my domain as that would have just been a bonus feature. Do you guys think it is related to my ACL's? Considering when I add the 'http_access allow all', the internet works but doesn't get filtered. When I remove that ACL there is no HTTP access.

Hello, I'm new to these forums but have used many threads through my process of creating my Squid Proxy server for my company. I'm glad to finally be a part of the community. First off I have a Squid Proxy Server installed on Ubuntu as a VM on Hypver-V with Windows Server 2008 R2. My company has one PDC and one DC, which also acts as the DNS. We've been having a lot of security issues recently and I wanted to try my hand at setting up a Web Filtering server (which is my first Linux server ever built). I spent about a week setting it up and wrote down my process of how I did it. I used DansGuardian as the Web Filter with Bannerfilter. Now I originally had the Squid Server working fine for a week until I attempted to join and authenticate it with my Windows Domain. That's when all hell broke loose! Users can no longer browse the internet using HTTP (although HTTPS works, Dansguardian doesn't filter it). I did modify my squid.conf a lot to further improve the security from my previous ~5 lined squid.conf that worked before. I will link it below: visible_hostname squidhttp_port 3128 hierarchy_stoplist cgi-bin ? acl all src all acl manager proto cache_object acl localhost src 127.0.0.1/255.255.255.255 acl to_localhost dst 127.0.0.0/8 acl SSL_ports port 443 563 21 acl Safe_ports port 80 #http acl Safe_ports port 21 #ftp acl Safe_ports port 443 563 #https, snews acl Safe_ports port 70 #gopher acl Safe_ports port 210 #wais acl Safe_ports port 1025-65535 #unregistered ports acl Safe_ports port 280 #http-mgmt acl Safe_ports port 488 #gss-http acl Safe_ports port 591 #filemaker acl Safe_ports port 777 #multiling http acl CONNECT method CONNECT http_access allow manager localhost http_access deny manager http_access deny !Safe_ports http_access deny CONNECT !SSL_ports http_access allow localhost http_reply_access allow all acl FTP proto FTP always_direct allow FTP cache_mgr [email protected] cache_effective_user squid cache_effective_group squid I removed several of the authentication acl's in order to troubleshoot further, but what I've found is that I can only access the internet through HTTP if I add 'http_access allow all' above 'http_access allow manager localhost'. I've spent an entire day trying to figure out what the problem is and even restored back to my older config that used to work but no longer does. cache_mem 4 MBcache_swap_low 85 cache_swap_high 90 # note read the config file about this and adjust it # to what your disk(s) can do, and allow for log files cache_dir ufs /var/log/squid3/ 100 16 256 cache_access_log /var/log/squid3/access.log cache_log /var/log/squid3/cache.log cache_store_log /var/log/squid3/store.log pid_filename /var/run/squid.pid # note: you may need to increase children based on your number of users auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp auth_param ntlm children 15 # ntlm_auth from Samba 3 supports NTLM NEGOTIATE packet # warning: basic authentication sends passwords plaintext # a network sniffer can and will discover passwords auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic auth_param basic children 5 auth_param basic realm Squid proxy-caching web server auth_param basic credentialsttl 2 hours I have Samba, Winbind, Webmin and all updates. Since I restored I still have to install Kerberos, but it worked fine before without it so I'm not so worried about that. Can someone please assist me or point me in the right direction? I really don't know what else to do! Thank you.