Squidguard not logging blocked sites



  • Hi.

    I need help on resolving this issue "Squidguard not logging blocked sites".

    thanks.



  • filter log indicates squidguard was stopped even though the service is already running.

    here is the filter log:

    27.05.2016 09:06:41 squidGuard stopped (1464311201.660)
    27.05.2016 09:06:41 db update done
    27.05.2016 09:06:41 squidGuard 1.4 started (1464311201.603)
    27.05.2016 08:54:10 squidGuard stopped (1464310450.275)
    27.05.2016 08:54:10 db update done
    27.05.2016 08:54:10 squidGuard 1.4 started (1464310450.166)
    26.05.2016 14:54:49 squidGuard stopped (1464245689.316)
    26.05.2016 14:54:49 db update done
    26.05.2016 14:54:49 squidGuard 1.4 started (1464245687.704)
    26.05.2016 14:53:40 squidGuard stopped (1464245620.187)
    26.05.2016 14:53:40 db update done
    26.05.2016 14:53:40 squidGuard 1.4 started (1464245619.696)
    26.05.2016 11:39:28 squidGuard stopped (1464233968.447)
    26.05.2016 11:39:28 db update done
    26.05.2016 11:39:28 squidGuard 1.4 started (1464233968.388)
    26.05.2016 09:57:09 squidGuard stopped (1464227829.424)
    26.05.2016 09:57:09 squidGuard stopped (1464227829.423)
    26.05.2016 09:57:09 squidGuard stopped (1464227829.423)
    26.05.2016 09:57:09 squidGuard stopped (1464227829.421)
    26.05.2016 09:57:09 squidGuard stopped (1464227829.420)
    26.05.2016 09:57:09 squidGuard stopped (1464227829.419)
    26.05.2016 09:57:09 squidGuard stopped (1464227829.418)
    26.05.2016 09:57:09 squidGuard stopped (1464227829.417)
    26.05.2016 09:57:09 squidGuard stopped (1464227829.416)
    26.05.2016 09:57:09 squidGuard stopped (1464227829.415)
    26.05.2016 09:57:09 squidGuard stopped (1464227829.415)
    26.05.2016 09:57:09 squidGuard stopped (1464227829.414)
    26.05.2016 09:56:59 Warning: Possible bypass attempt. Found multiple slashes where only one is expected: http://i2.cdn.turner.com/nba/nba/dam/assets//130225121225-shaq-hp-personality-module.hp-personality-module.jpg
    26.05.2016 09:56:59 Warning: Possible bypass attempt. Found multiple slashes where only one is expected: http://i2.cdn.turner.com/nba/nba/dam/assets//121015063424-barkley-thumbnail-hp-personality-module.jpg
    26.05.2016 09:56:58 Warning: Possible bypass attempt. Found multiple slashes where only one is expected: http://i2.cdn.turner.com/nba/nba/dam/assets//121015062924-aldridge-thumbnail-hp-personality-module.jpg
    26.05.2016 09:56:56 squidGuard ready for requests (1464227816.945)
    26.05.2016 09:56:56 squidGuard 1.4 started (1464227816.942)
    26.05.2016 09:56:56 squidGuard ready for requests (1464227816.933)
    26.05.2016 09:56:56 squidGuard 1.4 started (1464227816.930)
    26.05.2016 09:56:56 squidGuard ready for requests (1464227816.871)
    26.05.2016 09:56:56 squidGuard 1.4 started (1464227816.869)
    26.05.2016 09:56:56 squidGuard ready for requests (1464227816.845)
    26.05.2016 09:56:56 squidGuard 1.4 started (1464227816.842)
    26.05.2016 09:56:54 Warning: Possible bypass attempt. Found multiple slashes where only one is expected: http://z.cdn.turner.com/nba/nba//.element/css/4.0/sect/scoreboard/scoreboard.playoffs.css
    26.05.2016 09:56:54 squidGuard stopped (1464227814.141)
    26.05.2016 09:56:54 db update done
    26.05.2016 09:56:54 squidGuard 1.4 started (1464227813.994)
    26.05.2016 09:53:10 squidGuard ready for requests (1464227590.768)
    26.05.2016 09:53:10 squidGuard 1.4 started (1464227590.765)
    26.05.2016 09:53:10 squidGuard ready for requests (1464227590.740)
    26.05.2016 09:53:10 squidGuard 1.4 started (1464227590.737)
    26.05.2016 09:53:10 squidGuard ready for requests (1464227590.728)
    26.05.2016 09:53:10 squidGuard 1.4 started (1464227590.723)
    26.05.2016 09:53:10 squidGuard ready for requests (1464227590.703)



  • Squidguard isn't a service in the true sense.  It's a helper application that gets called on-demand by squid for every URL it processes.

    Did you turn on logging in General settings, and enable the Log option for Common ACL and each Groups ACL?



  • yes logging option is check on general settings and on all ACL.



  • Good day.

    hi, Moderators.

    Please close this thread. I already resolved the issue. Thank you KOM btw.

    :) ;D



  • Care to share what you did?



  • It seems that I misconfigured the proxy server. I've adjusted the value of "SSL Certificate Deamon Children" before as far as I can remember I set it to "50". And I can't remember why I did that.  :D

    Nevertheless, after I changed it back to default value which is "5" and restarted the pfsense box, all of a sudden the squidguard returned to its normal logging behavior.