Search squid archive

Re: Migration from Squid 2 to 3: ACLs no longer accepting duplicates

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Nichols,

It appears that I need to preprocess the lists before handing them to Squid, removing all subdomains were the parent domain is present.

I don't see anything special about your configuration that would somehow remedy this issue. Perhaps your lists are sanitized?

______________________________
Derek Simon
IT Support
d'Oliveira & Associates, P.C.
401-431-1990




On 8/29/2012 7:37 AM, mrnicholsb wrote:
Hello, I use squid 3.1 to block with acl, porn sites, malicious sites
and ads.

I can tell you the WARNING: you should remove basically means you have
subdomains added to your list
when you have somesite.something.com it leaves something.com accessable,
you want to remove somesite.something.com and just let it block
something.com to block the entire site, including subdomains, unless you
are just wanting to block a sub but not the whole domain, then just
ignore the error.

btw, heres the syntax of how I do it on my squid 3.1 for addressing your
bungled line error.

acl blacklist dstdomain "/etc/squid3/squid-block.acl"
acl ipblacklist dst "/etc/squid3/squid-ipblock.acl"
acl zeusblacklist dstdomain "/etc/squid3/squid-block-zeus.acl"

and then

http_access deny zeusblacklist
http_access deny blacklist
http_access deny ipblacklist

I hope this helps you solve your issues.


fix nichols

haxradio.com

On 08/28/2012 02:53 PM, Derek Simon wrote:
Hi all,

I am migrating a Squid 2.7 server to Squid 3.1.

In 2.7 I was using the Shallalists without issue, after prefixing each
line with a period, as prescribed:
http://www.shallalist.de/faq.html#squid

I would reference them in squid.conf as such:
acl SL_Adv dstdomain "adv/domains.squid"

I more or less copied these ACL lines from the 2.7 conf to the 3.1 and
I get the following errors when reparsing:

Processing: acl SL_Adv dstdomain
"/etc/squid3/lists/shallalist/adv/domains.squid"
WARNING: You should remove '.addesktop.com' from the ACL named 'SL_Adv'
WARNING: You should remove '.addesktop.com' from the ACL named 'SL_Adv'
ERROR: You should remove '.ads360.com' from the ACL named 'SL_Adv'
FATAL: Bungled squid.conf line 732: acl SL_Adv dstdomain
"/etc/squid3/lists/shallalist/adv/domains.squid"
Squid Cache (Version 3.1.19): Terminated abnormally.

What gives? I used to get the warnings in 2.7, and I understand the
splay tree performance issue, but why is this now fatal behavior in 3.1?

Thanks,
______________________________
Derek Simon
IT Support
d'Oliveira & Associates, P.C.
401-431-1990







[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux