Squidguard not logging blocked sites
-
Hi.
I need help on resolving this issue "Squidguard not logging blocked sites".
thanks.
-
filter log indicates squidguard was stopped even though the service is already running.
here is the filter log:
27.05.2016 09:06:41 squidGuard stopped (1464311201.660)
27.05.2016 09:06:41 db update done
27.05.2016 09:06:41 squidGuard 1.4 started (1464311201.603)
27.05.2016 08:54:10 squidGuard stopped (1464310450.275)
27.05.2016 08:54:10 db update done
27.05.2016 08:54:10 squidGuard 1.4 started (1464310450.166)
26.05.2016 14:54:49 squidGuard stopped (1464245689.316)
26.05.2016 14:54:49 db update done
26.05.2016 14:54:49 squidGuard 1.4 started (1464245687.704)
26.05.2016 14:53:40 squidGuard stopped (1464245620.187)
26.05.2016 14:53:40 db update done
26.05.2016 14:53:40 squidGuard 1.4 started (1464245619.696)
26.05.2016 11:39:28 squidGuard stopped (1464233968.447)
26.05.2016 11:39:28 db update done
26.05.2016 11:39:28 squidGuard 1.4 started (1464233968.388)
26.05.2016 09:57:09 squidGuard stopped (1464227829.424)
26.05.2016 09:57:09 squidGuard stopped (1464227829.423)
26.05.2016 09:57:09 squidGuard stopped (1464227829.423)
26.05.2016 09:57:09 squidGuard stopped (1464227829.421)
26.05.2016 09:57:09 squidGuard stopped (1464227829.420)
26.05.2016 09:57:09 squidGuard stopped (1464227829.419)
26.05.2016 09:57:09 squidGuard stopped (1464227829.418)
26.05.2016 09:57:09 squidGuard stopped (1464227829.417)
26.05.2016 09:57:09 squidGuard stopped (1464227829.416)
26.05.2016 09:57:09 squidGuard stopped (1464227829.415)
26.05.2016 09:57:09 squidGuard stopped (1464227829.415)
26.05.2016 09:57:09 squidGuard stopped (1464227829.414)
26.05.2016 09:56:59 Warning: Possible bypass attempt. Found multiple slashes where only one is expected: http://i2.cdn.turner.com/nba/nba/dam/assets//130225121225-shaq-hp-personality-module.hp-personality-module.jpg
26.05.2016 09:56:59 Warning: Possible bypass attempt. Found multiple slashes where only one is expected: http://i2.cdn.turner.com/nba/nba/dam/assets//121015063424-barkley-thumbnail-hp-personality-module.jpg
26.05.2016 09:56:58 Warning: Possible bypass attempt. Found multiple slashes where only one is expected: http://i2.cdn.turner.com/nba/nba/dam/assets//121015062924-aldridge-thumbnail-hp-personality-module.jpg
26.05.2016 09:56:56 squidGuard ready for requests (1464227816.945)
26.05.2016 09:56:56 squidGuard 1.4 started (1464227816.942)
26.05.2016 09:56:56 squidGuard ready for requests (1464227816.933)
26.05.2016 09:56:56 squidGuard 1.4 started (1464227816.930)
26.05.2016 09:56:56 squidGuard ready for requests (1464227816.871)
26.05.2016 09:56:56 squidGuard 1.4 started (1464227816.869)
26.05.2016 09:56:56 squidGuard ready for requests (1464227816.845)
26.05.2016 09:56:56 squidGuard 1.4 started (1464227816.842)
26.05.2016 09:56:54 Warning: Possible bypass attempt. Found multiple slashes where only one is expected: http://z.cdn.turner.com/nba/nba//.element/css/4.0/sect/scoreboard/scoreboard.playoffs.css
26.05.2016 09:56:54 squidGuard stopped (1464227814.141)
26.05.2016 09:56:54 db update done
26.05.2016 09:56:54 squidGuard 1.4 started (1464227813.994)
26.05.2016 09:53:10 squidGuard ready for requests (1464227590.768)
26.05.2016 09:53:10 squidGuard 1.4 started (1464227590.765)
26.05.2016 09:53:10 squidGuard ready for requests (1464227590.740)
26.05.2016 09:53:10 squidGuard 1.4 started (1464227590.737)
26.05.2016 09:53:10 squidGuard ready for requests (1464227590.728)
26.05.2016 09:53:10 squidGuard 1.4 started (1464227590.723)
26.05.2016 09:53:10 squidGuard ready for requests (1464227590.703) -
Squidguard isn't a service in the true sense. It's a helper application that gets called on-demand by squid for every URL it processes.
Did you turn on logging in General settings, and enable the Log option for Common ACL and each Groups ACL?
-
yes logging option is check on general settings and on all ACL.
-
Good day.
hi, Moderators.
Please close this thread. I already resolved the issue. Thank you KOM btw.
:) ;D
-
Care to share what you did?
-
It seems that I misconfigured the proxy server. I've adjusted the value of "SSL Certificate Deamon Children" before as far as I can remember I set it to "50". And I can't remember why I did that. :D
Nevertheless, after I changed it back to default value which is "5" and restarted the pfsense box, all of a sudden the squidguard returned to its normal logging behavior.