You can create a fifo pipe and have squid accesslogs log to that
pipe. On the other end of the pipe, write a custom log processor to
look for what and do what you want.
Note: squid takes logging VERY SERIOUSLY. If you log processor
crashes or blocks, that'll impact/crash squid.
mike
At 10:34 PM 9/30/2007, Guangwei Yuan wrote:
Hi,
We setup squid in the accelerator mode. To prevent potential cache
poisoning, we validate the request url in the backend, and return http
status 400 if the url is found to be invalid. Is it possible for squid
to block an IP after seeing a certain number of 400 for the requests
issued from that IP?
Thanks in advance!
