Squidguard log

agismaniax

apologize if I missed, how to activate the squidGuard log?

/usr/local/etc/squidGuard/squidGuard.conf
# ============================================================
# SquidGuard configuration file
# This file generated automaticly with SquidGuard configurator
# (C)2006 Serg Dvoriancev
# email: dv_serg@mail.ru
# ============================================================

logdir /var/squidGuard/log
dbhome /var/db/squidGuard

#
time WORKING_HOUR {
weekly mon 08:01-11:59
weekly mon 13:00-16:59
weekly tue 08:01-11:59
weekly tue 13:00-16:59
weekly wed 08:01-11:59
weekly wed 13:00-16:59
weekly thu 08:01-11:59
weekly thu 13:00-16:59
weekly fri 08:01-11:59
weekly fri 13:00-16:59
}

#
time FREE_TIME {
weekly sat 00:00-23:59
weekly sun 00:00-23:59
weekly mon 00:00-08:30
weekly mon 11:30-13:30
weekly mon 17:00-23:59
weekly tue 00:00-08:30
weekly tue 11:30-13:30
weekly tue 17:00-23:59
weekly wed 00:00-08:30
weekly wed 11:30-13:30
weekly wed 17:00-23:59
weekly thu 00:00-08:30
weekly thu 11:30-13:30
weekly thu 17:00-23:59
weekly fri 00:00-08:30
weekly fri 11:30-13:30
weekly fri 17:00-23:59
}

#
src DENY_FB_TW {
ip 172.16.0.0/16
log block.log
}

#
dest bl_FB_TW {
domainlist bl_FB_TW/domains
redirect http://172.16.4.254:8080/sgerror.php?url=403%20Dilarang%20mengakses%20Facebook%2C%20Twitter%20dan%20MySpace%20saat%20jam%20kerja%20%21%21%21&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u
log block.log
}

#
dest bl_GAMES {
domainlist bl_GAMES/domains
urllist bl_GAMES/urls
redirect http://172.16.4.254:8080/sgerror.php?url=403%20Dilarang%20bermain%20games%20online%20saat%20jam%20kerja%20%21%21%21&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u
log block.log
}

#
rew safesearch {
s@(google\..*/search?.*q=.*)@\1\&safe=active@i
s@(google\..*/images.*q=.*)@\1\&safe=active@i
s@(google\..*/groups.*q=.*)@\1\&safe=active@i
s@(google\..*/news.*q=.*)@\1\&safe=active@i
s@(yandex\..*/yandsearch?.*text=.*)@\1\&fyandex=1@i
s@(search\.yahoo\..*/search.*p=.*)@\1\&vm=r@i
s@(search\.live\..*/.*q=.*)@\1\&adlt=strict@i
s@(search\.msn\..*/.*q=.*)@\1\&adlt=strict@i
log block.log
}

#
acl {
#
DENY_FB_TW within WORKING_HOUR {
pass !bl_FB_TW !bl_GAMES all
log block.log
} else {
pass bl_FB_TW bl_GAMES all
redirect http://172.16.4.254:8080/sgerror.php?url=403%20&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u
log block.log
}
#
default {
pass none
redirect http://172.16.4.254:8080/sgerror.php?url=403%20&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u
log block.log
}
}

NM04

go to general settings and check the option : View GUI log

go to Default check the option: Enable log

agismaniax

already done that.

still won't work. ???

NM04

you need to apply those changes after saving them on the respective pages. Did you applied them on the general setting page..?

agismaniax

yes. i have two pfsense box and the squidguard log still not working.

dvserg

Pls always show you pfSense number.

agismaniax

sorry,

i try to look at /var/squidguard/log, and find this:

dvserg

Cat /var/squidGuard/log/block.log

agismaniax

@dvserg:

Cat /var/squidGuard/log/block.log

I could see the squidGuard.log file via console, but I couldn't see via squidGuard webGUI. why?

dvserg

Look block.log size on you screenshot's - very big for GUI. Drop this file and restart squid. This is cleanup a squidguard log.

agismaniax

after remove block.log, squidguard.log and then i reboot the firewall, i still can't access squidguard log via webGUI. weird… ???