On 10/15/2013 09:51 AM, Marko Cupać wrote:
I am advancing into replacement of NTLM/dansguardian with kerberos/squid and icap and mapped AD groups with help of LDAP authorization, but there are a few things for which I haven't find solution so far: 1. More informative error messages for users (similar to squidclamav), which would contain IP address, username, access group of user, detailed reason for not serving content (eg. name of access list).
I suggest to look at ufdbGuard. It is a URL redirector for Squid and when it blocks a URL is redirects the browser to its own HTTP daemon that serves error pages with the information that you want. The HTTP daemon also sends the correct content so its sends a gif when the blocked URL points to a gif etc. ufdbGuard filtering software is free. It works with your own URL database or a commercial URL database for URLfilterDB. Marcus
