Squid Block log deleted or name changed

[lspiehler]

I went into squidguard the other day to look at my block logs and there was nothing in the web interface, and I knew there should be. I compared the install to another of pfsense and found that /var/squidGuard/log/block.log had been deleted. I recreated it, set permissions, and got it working again, and the past 2 days I've had to fix it again because the name is getting changed to block.log.0 like its getting rotated, but the logs haven't even accumulated anything yet, so there's no reason to rotate and it doesn't recreate the block.log file. Rotation may not be whats causing this in the first place, but that's what I'm asking for help to determine. Any help is greatly appreciated.

[dvserg]

Rotation of the log file skuidguard configured at 00:00
This is a necessary measure in order to save disk space

[lspiehler]

I understand that, however, it appears that the rotation does not restart the service because every time it rotates, the log stops logging because the block.log file does not exist. I have to restart squidGuard or recreate the log manually in order for it to start logging again. Also, the web interface is not set up to show entries in the rotated logs, therefore, everything is deleted from the web interfaces log after one day. How can I configure log rotation to only rotate at 00:00 if the log has reached a specified size? Also, it seems odd that you would have to go to the command line to view old logs. Am I missing something because none of this seems ideal?

[dvserg]

It was a necessary measure. How I understand the log need for test your proxy, filter, and then should be disabled. Can you suggest a different behavior? It is important not to give logs to grow uncontrollably

[lspiehler]

I understand, and I am familiar with log rotation. I usually set up the rotation to happen daily but with a condition saying to only rotate if the log is greater than the specified size. I'm assuming the rotation is getting done using squid to rotate logs instead of logrotate or something. Is there any way to configure this condition in squid or at least tell me where I can change how often this happens for my particular situation? Also, do you know why when it rotates, it doesn't recreate the block.log file? Like I said above, I have to either manually create it or restart squidguard manually. Are you the maintainer of this package for pfsense?

[dvserg]

  I usually set 
up the rotation to happen daily but with a condition saying to 
only rotate if the log is greater than the specified size

This is reasonable. I'll see how this can be done.

[lspiehler]

Thanks, let me know, and thank you for your quick responses. If you have time, I'd also be interested in knowing where the configurations are that make all these things happen so I can develop an understanding for whats going on.

[lspiehler]

Any news on this? Thanks again.

[dvserg]

@lspiehler:

Any news on this? Thanks again.

At nearest time.
I must make IE testing

[dvserg]

Updated.