Squidguard log

[agismaniax]

apologize if I missed, how to activate the squidGuard log?

/usr/local/etc/squidGuard/squidGuard.conf
# ============================================================
# SquidGuard configuration file
# This file generated automaticly with SquidGuard configurator
# (C)2006 Serg Dvoriancev
# email: dv_serg@mail.ru
# ============================================================

logdir /var/squidGuard/log
dbhome /var/db/squidGuard

#
time WORKING_HOUR {
weekly mon 08:01-11:59
weekly mon 13:00-16:59
weekly tue 08:01-11:59
weekly tue 13:00-16:59
weekly wed 08:01-11:59
weekly wed 13:00-16:59
weekly thu 08:01-11:59
weekly thu 13:00-16:59
weekly fri 08:01-11:59
weekly fri 13:00-16:59
}

#
time FREE_TIME {
weekly sat 00:00-23:59
weekly sun 00:00-23:59
weekly mon 00:00-08:30
weekly mon 11:30-13:30
weekly mon 17:00-23:59
weekly tue 00:00-08:30
weekly tue 11:30-13:30
weekly tue 17:00-23:59
weekly wed 00:00-08:30
weekly wed 11:30-13:30
weekly wed 17:00-23:59
weekly thu 00:00-08:30
weekly thu 11:30-13:30
weekly thu 17:00-23:59
weekly fri 00:00-08:30
weekly fri 11:30-13:30
weekly fri 17:00-23:59
}

#
src DENY_FB_TW {
ip 172.16.0.0/16
log block.log
}

#
dest bl_FB_TW {
domainlist bl_FB_TW/domains
redirect http://172.16.4.254:8080/sgerror.php?url=403%20Dilarang%20mengakses%20Facebook%2C%20Twitter%20dan%20MySpace%20saat%20jam%20kerja%20%21%21%21&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u
log block.log
}

#
dest bl_GAMES {
domainlist bl_GAMES/domains
urllist bl_GAMES/urls
redirect http://172.16.4.254:8080/sgerror.php?url=403%20Dilarang%20bermain%20games%20online%20saat%20jam%20kerja%20%21%21%21&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u
log block.log
}

#
rew safesearch {
s@(google\..*/search?.*q=.*)@\1\&safe=active@i
s@(google\..*/images.*q=.*)@\1\&safe=active@i
s@(google\..*/groups.*q=.*)@\1\&safe=active@i
s@(google\..*/news.*q=.*)@\1\&safe=active@i
s@(yandex\..*/yandsearch?.*text=.*)@\1\&fyandex=1@i
s@(search\.yahoo\..*/search.*p=.*)@\1\&vm=r@i
s@(search\.live\..*/.*q=.*)@\1\&adlt=strict@i
s@(search\.msn\..*/.*q=.*)@\1\&adlt=strict@i
log block.log
}

#
acl {
#
DENY_FB_TW within WORKING_HOUR {
pass !bl_FB_TW !bl_GAMES all
log block.log
} else {
pass bl_FB_TW bl_GAMES all
redirect http://172.16.4.254:8080/sgerror.php?url=403%20&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u
log block.log
}
#
default {
pass none
redirect http://172.16.4.254:8080/sgerror.php?url=403%20&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u
log block.log
}
}

[NM04]

go to general settings and check the option : View GUI log

go to Default check the option: Enable log

[agismaniax]

already done that.

still won't work.  ???

[NM04]

you need to apply those changes after saving them on the respective pages. Did you applied them on the general setting page..?

[agismaniax]

yes. i have two pfsense box and the squidguard log still not working.

[dvserg]

Pls always show you pfSense number.

[agismaniax]

sorry,

i try to look at /var/squidguard/log, and find this:

[dvserg]

Cat /var/squidGuard/log/block.log

[agismaniax]

@dvserg:

Cat /var/squidGuard/log/block.log

I could see the squidGuard.log file via console, but I couldn't see via squidGuard webGUI. why?

[dvserg]

Look block.log size on you screenshot's - very big for GUI. Drop this file and restart squid. This is cleanup a squidguard log.

[agismaniax]

after remove block.log, squidguard.log and then i reboot the firewall, i still can't access squidguard log via webGUI. weird…  ???