John (et al),
I have increased the redirectors to 60 from 40 and that seems to have
stopped bypassing of the filter for now and I also have not seen links
returning the wrong address as of yet as well but they do admit it is a
problem. I was actually using that problem as an indicator of the filter
bypass problem
Also, I was looking at modifying the dansguardian "bad boy timeout"
(dansguardian.org/downloads/borman/dansguardian.pl) to work with
smartfilter's logs. Has anyone out in squid land done this? I was planning
to search the logs for IP address if users that get blocked with the reason
code of 149 (porn) or 132 (nudity) or 162 (sexual materials) or 113
(extreme). If they got blocked more than X (maybe 5) times in 30 min. their
IP address/32 would be added to the not_allow list used by squid and then
the program would issue a "squid -k reconfigure" to update it to squid. I
have already edited the ERR_ACCESS_DENIED file to notify the user why they
don't have access and what to do (or not to do :-).
Because I am not "a programmer" (I just smell link one) I wanted to see if
this has been done or something else like it.
Ryan Lamberton
FamiLink Company
Clean Internet Access
----- Original Message -----
From: "John R. Van Lanen, Network Operations - TCCSA" <VANLANEN@xxxxxxxxx>
To: "FamiLink Admin" <webmaster@xxxxxxxxxxxx>
Cc: <VANLANEN@xxxxxxxxx>
Sent: Thursday, September 15, 2005 11:21 AM
Subject: Re: Spam:*******, Re: Problem with the blocking not
working...
That is an issue in DA 4.0, Securecomputing admits it's a problem. I see
it
quite frequently. No fix yet. If you pay support, email them at
support@xxxxxxxxxxxxxxxxxxx, maybe it will get them moving.
I've seen what you described and also getting just a Blank page with the
address of the proxy/filter for controlcenter.
Only 4.0 allows you to do delegated authority, they have a newer version
4.1,
but it doesn't give you this capablity.
Becareful with stable3 if your running redhat. I think an update of an
rpm
corrupted my squid. Had to upgrade to stable 10, it doesn't run as an rpm
so
it gets a little weird on the install.
Let me know if we can share anything we have learned.
______________________________________________________________________________
| John R. Van Lanen, Manager of Network Operations Voice: (330) 264-6047
|
| Tri-County Computer Services Association (TCCSA) Fax: (330) 264-5703
|
| "Do not meddle in the affairs of dragons,
E-mail:vanlanen@xxxxxxxxx|
| because you are crunchy and taste good with ketchup"
|
------------------------------------------------------------------------------
Are you also having problems with links returning the wrong address? I
click on one link and get blocked and the link is not the one I selected.
I
re-select the link and it will then go through.
Ryan Lamberton
FamiLink Company
Clean Internet Access
----- Original Message -----
From: "John R. Van Lanen, Network Operations - TCCSA"
<VANLANEN@xxxxxxxxx>
To: "FamiLink Admin" <webmaster@xxxxxxxxxxxx>
Cc: <squid-users@xxxxxxxxxxxxxxx>; <VANLANEN@xxxxxxxxx>
Sent: Thursday, September 15, 2005 9:53 AM
Subject: Spam:*******, Re: Problem with the blocking not
working...
> What version of Smartfilter are you using, have noticed issues with our
> installation of Smartfilter Bess Edition 4.0 that sometimes does not
> place
> a
> block on the site. I have a ticket open with securecomputing.
> ______________________________________________________________________________
> | John R. Van Lanen, Manager of Network Operations Voice: (330)
> 264-6047
> |
> | Tri-County Computer Services Association (TCCSA) Fax: (330)
> 264-5703
> |
> | "Do not meddle in the affairs of dragons,
> E-mail:vanlanen@xxxxxxxxx|
> | because you are crunchy and taste good with ketchup"
> |
> ------------------------------------------------------------------------------
>
>> I am using squid-2.5.STABLE3-6.3E.9.i386 with smartfilter and I am
>> having
>> a
>> problem and need help tracking it down. After a restart or squid -k
>> reconfigure everything works fine for a while (5 -10 hours depending
>> on
>> the
>> load) then problems. Access seems to slow down and requests are not
>> filtered.
>
>> access.log before squid -k reconfigure:
>
>> 1126801058.510 1149 71.32.59.249 TCP_MISS/200 37693 GET
>> http://www.playboy.com/ - DIRECT/216.163.137.3 text/html
>
>> access.log after squid -k reconfigure:
>
>> 1126801199.263 26 71.32.59.249 TCP_MISS/000 411 GET
>> http://www.playboy.com/ - NONE/- -
>
>
>> as it should be. Any ideas on how I can track down the problem or
>> what I
>> should be looking at?
>
>> Ryan Lamberton
>> FamiLink Company
>> Clean Internet Access
>
>
