SquidGuard Blocked URL Bug

itsmorefun · Mar 2, 2009, 11:57 AM

Hello,
In Squidguard, with "Use safe search engine" enabled, the SquidGuard "Blocked URL" log all google traffic…

Exemple: (note: blk_blacklists_liste_bu is a witheliste)
42 2009-03-02 11:07:16 192.168.254.254 http://clients1.google.com/complete/search?hl=fr&gl=fr&q=a MGTPASS/blk_blacklists_liste_bu/safesearch 31012 GET
43 2009-03-02 11:07:16 192.168.254.254 http://clients1.google.com/complete/search?hl=fr&gl=fr&q=an MGTPASS/blk_blacklists_liste_bu/safesearch 31012 GET
44 2009-03-02 11:07:17 192.168.254.254 http://clients1.google.com/complete/search?hl=fr&gl=fr&q=ang MGTPASS/blk_blacklists_liste_bu/safesearch 31012 GET
45 2009-03-02 11:07:17 192.168.254.254 http://clients1.google.com/complete/search?hl=fr&gl=fr&q=ange MGTPASS/blk_blacklists_liste_bu/safesearch 31012 GET
46 2009-03-02 11:07:17 192.168.254.254 http://clients1.google.com/complete/search?hl=fr&gl=fr&q=anger MGTPASS/blk_blacklists_liste_bu/safesearch 31012 GET
47 2009-03-02 11:07:17 192.168.254.254 http://clients1.google.com/complete/search?hl=fr&gl=fr&q=angers MGTPASS/blk_blacklists_liste_bu/safesearch 31012 GET
48 2009-03-02 11:07:18 192.168.254.254 http://www.google.fr/search?hl=fr&q=angers&meta=&aq=f&oq= MGTPASS/blk_blacklists_liste_bu/safesearch 31012 GET
49 2009-03-02 11:07:18 192.168.254.254 http://news.google.fr/news?hl=fr&q=angers&safe=active&um=1&ie=UTF-8&imgefp=YBCaTU
rqMSYJ&imgurl=www.ouest-france.fr/of-photos/2009/03/01/09PDL_2439755_1_apx_470__w
ouestfrance.jpg MGTPASS/blk_blacklists_liste_bu/safesearch 31012 GET

54 2009-03-02 11:11:20 172.17.72.35 http://clients1.google.com/complete/search?hl=fr&gl=fr&q=or default/blk_blacklists_liste_bu/safesearch 31012 GET
55 2009-03-02 11:11:20 172.17.72.35 http://clients1.google.com/complete/search?hl=fr&gl=fr&q=oran default/blk_blacklists_liste_bu/safesearch 31012 GET
56 2009-03-02 11:11:20 172.17.72.35 http://clients1.google.com/complete/search?hl=fr&gl=fr&q=orang default/blk_blacklists_liste_bu/safesearch 31012 GET
57 2009-03-02 11:11:20 172.17.72.35 http://clients1.google.com/complete/search?hl=fr&gl=fr&q=orange default/blk_blacklists_liste_bu/safesearch 31012 GET
58 2009-03-02 11:11:21 172.17.72.35 http://clients1.google.com/complete/search?hl=fr&gl=fr&q=orange. default/blk_blacklists_liste_bu/safesearch 31012 GET
59 2009-03-02 11:11:21 172.17.72.35 http://clients1.google.com/complete/search?hl=fr&gl=fr&q=orange.fr default/blk_blacklists_liste_bu/safesearch 31012 GET
60 2009-03-02 11:11:21 172.17.72.35 http://www.google.fr/search?hl=fr&q=orange.fr&meta=&aq=f&oq= default/blk_blacklists_liste_bu/safesearch 31012 GET

because:
rew safesearch {
s@(google../search?.q=.)@\1&safe=active@i
s@(google../images.q=.)@\1&safe=active@i
s@(google../groups.q=.)@\1&safe=active@i
s@(google../news.q=.)@\1&safe=active@i
s@(yandex../yandsearch?.text=.)@\1&fyandex=1@i
s@(search.yahoo../search.p=.)@\1&vm=r@i
s@(search.live../.q=.)@\1&adlt=strict@i
s@(search.msn../.q=.)@\1&adlt=strict@i
log block.log
}

Please remove log block.log to safesearch rewrite rules.

Thank in advance

dvserg · Mar 2, 2009, 11:23 AM

Repleace pls
/usr/local/pkg/squidGuard.inc [ln 1366]

$res[F_LOG] = 'on';

with

$res[F_LOG] = 'off';

itsmorefun · Mar 2, 2009, 11:56 AM

not $res[F_LOG] = 'off';

but $res[F_LOG] = '';

;)

because in /usr/local/pkg/squidguard_configurator.inc :
if ($rew[F_LOG])
$sg_tag->items[] = "log " . SQUIDGUARD_ACCESSBLOCK_FILE;

Thank. :)

dvserg · Mar 2, 2009, 12:22 PM

@itsmorefun:

not $res[F_LOG] = 'off';

but $res[F_LOG] = '';

;)

because in /usr/local/pkg/squidguard_configurator.inc :
if ($rew[F_LOG])
$sg_tag->items[] = "log " . SQUIDGUARD_ACCESSBLOCK_FILE;

Thank. :)

upsss Sorry my error.
Thanks!