When everything is working I get this in access.log:
1116970534.920 116 127.0.0.1 TCP_MISS/000 415 GET http://www.playboy.com/ famtest NONE/- -
1116970535.447 196 127.0.0.1 TCP_MISS/200 4449 GET http://propel.familink.com/controlcenter/rcgi-bin/block.cgi? famtest DIRECT/64.119.36.218 text/html
When it is not working I get this:
1116922487.121 19 71.32.44.33 TCP_MISS/000 414 GET http://www.playboy.com/tools/css/homepage.css ryan NONE/- -
1116922487.139 17 71.32.44.33 TCP_MISS/000 440 GET http://www.playboy.com/tools/js/homepage.js ryan NONE/- -
1116922487.404 24 71.32.44.33 TCP_MISS/000 438 GET http://propel.familink.com/controlcenter/rcgi-bin/block.cgi? ryan NONE/- -
1116922487.746 340 71.32.44.33 TCP_MISS/200 4513 GET http://propel.familink.com/controlcenter/rcgi-bin/block.cgi? ryan DIRECT/64.119.36.218 text/html
1116922487.746 1258 71.32.44.33 TCP_MISS/200 32992 GET http://www.playboy.com/ ryan DIRECT/216.163.137.3 text/html
1116922488.051 339 71.32.44.33 TCP_MISS/200 4507 GET http://propel.familink.com/controlcenter/rcgi-bin/block.cgi? ryan DIRECT/64.119.36.218 text/html
1116922490.603 1572 71.32.44.33 TCP_MISS/200 39036 GET http://www.playboy.com/tools/js/dd_menu.js ryan DIRECT/216.163.137.3 application/x-javascript
1116922491.455 204 71.32.44.33 TCP_MISS/000 437 GET http://pei-ads.playboy.com/RealMedia/ads/adstream_mjx.ads/www.playboy.com/index.html/1369541183@top728x90-2,middle120x240a-2,middle120x60a-2,middle
160x600a-1,topright120x60-2,btmright120x60-2,speciala,specialb,specialc,speciald,speciale,specialf,specialg,popunder,popup2? ryan NONE/- -
1116922491.684 26 71.32.44.33 TCP_MISS/000 676 GET http://propel.familink.com/controlcenter/rcgi-bin/block.cgi? ryan NONE/- -
1116922492.257 349 71.32.44.33 TCP_MISS/302 597 GET http://propel.familink.com/controlcenter/rcgi-bin/block.cgi? ryan DIRECT/64.119.36.218 text/html
1116922492.484 19 71.32.44.33 TCP_MEM_HIT/200 1335 GET http://propel.familink.com/controlcenter/graphics/transparent.gif ryan NONE/- image/gif
1116922493.561 18 71.32.44.33 TCP_MISS/000 439 GET http://www.playboy.com/imx/redesign/header_email_txt.gif ryan NONE/- -
1116922493.579 17 71.32.44.33 TCP_MISS/000 451 GET http://www.playboy.com/imx/redesign/header_nospam_txt.gif ryan NONE/- -
1116922493.597 17 71.32.44.33 TCP_MISS/000 452 GET http://www.playboy.com/imx/redesign/header_yes.gif ryan NONE/- -
1116922493.616 9 71.32.44.33 TCP_MISS/000 445 GET http://www.playboy.com/imx/frontpage/lead_head.gif ryan NONE/- -
1116922493.634 17 71.32.44.33 TCP_MISS/000 445 GET http://www.playboy.com/imx/frontpage/lead-baseballsuites0523.jpg ryan NONE/- -
1116922493.659 24 71.32.44.33 TCP_MISS/000 459 GET http://www.playboy.com/imx/frontpage/vegasmayor0523.jpg ryan NONE/- -
1116922493.664 153 71.32.44.33 TCP_MISS/200 5898 GET http://www.playboy.com/imx/redesign/logo.gif ryan DIRECT/216.163.137.3 image/gif
1116922493.677 12 71.32.44.33 TCP_MISS/000 450 GET http://www.playboy.com/imx/frontpage/pmoy0516.jpg ryan NONE/- -
1116922493.699 21 71.32.44.33 TCP_MISS/000 444 GET http://www.playboy.com/imx/frontpage/runwaymodels0517.jpg ryan NONE/- -
1116922493.717 17 71.32.44.33 TCP_MISS/000 452 GET http://www.playboy.com/imx/frontpage/cos0523.jpg ryan NONE/- -
1116922493.735 17 71.32.44.33 TCP_MISS/000 443 GET http://www.playboy.com/imx/frontpage/breasttest0505.jpg ryan NONE/- -
1116922493.753 18 71.32.44.33 TCP_MISS/000 450 GET http://www.playboy.com/imx/frontpage/spotlight-bottom.gif ryan NONE/- -
1116922493.771 17 71.32.44.33 TCP_MISS/000 452 GET http://www.playboy.com/imx/frontpage/cotw0519.jpg ryan NONE/- -
1116922493.793 19 71.32.44.33 TCP_MISS/000 444 GET http://www.playboy.com/imx/frontpage/current_issue.gif ryan NONE/- -
1116922493.814 19 71.32.44.33 TCP_MISS/000 449 GET http://www.playboy.com/imx/frontpage/askhef_top.gif ryan NONE/- -
1116922493.836 19 71.32.44.33 TCP_MISS/000 446 GET http://www.playboy.com/imx/frontpage/review_music.jpg ryan NONE/- -
1116922493.858 19 71.32.44.33 TCP_MISS/000 448 GET http://www.playboy.com/imx/frontpage/review_booze.jpg ryan NONE/- -
1116922493.879 19 71.32.44.33 TCP_MISS/000 448 GET http://www.playboy.com/imx/frontpage/review_game.jpg ryan NONE/- -
1116922494.116 25 71.32.44.33 TCP_MISS/000 447 GET http://propel.familink.com/controlcenter/rcgi-bin/block.cgi? ryan NONE/- -
1116922496.259 2112 71.32.44.33 TCP_MISS/200 4549 GET http://propel.familink.com/controlcenter/rcgi-bin/block.cgi? ryan DIRECT/64.119.36.218 text/html
SCC has not got back to me with an answer yet.
Ryan Lamberton
----- Original Message ----- From: "Kevin" <kkadow@xxxxxxxxx>
To: <squid-users@xxxxxxxxxxxxxxx>
Cc: "Ryan Lamberton" <ryan@xxxxxxxxxxxx>
Sent: Tuesday, May 24, 2005 1:40 PM
Subject: Re: [squid-users] ideas?
On 5/24/05, Ryan Lamberton <ryan@xxxxxxxxxxxx> wrote:
I am running squid 2.5 stable 3 and using smartfilter (SecureComputing) to
block the bad stuff. This works great but lately I have noticed that if you
go to a bad site the proxy will return part of it and then stop. If I
refresh I get the block page that I am suppose to get. It is like the bad
site is getting leaked past the filter and then stopped. I reboot and
everything is working correctly again. Any ideas what might be doing this?
That's an interesting bug. I've seen exactly this behavior with WebSense, but never with SmartFilter. What does SCC have to say?
Can you post a sample of the access.log showing the request(s) that made it through, and then the refresh request that gets blocked?
Thanks,
Kevin Kadow
--
Unofficial SCC Sidewinder Users group:
http://groups.yahoo.com/group/sidewinder-users/
