Re: [squid-users] squid + dansguardian + auth

From: Bruno Ricardo Santos <bvsantos_at_hal.min-saude.pt>
Date: Thu, 11 Feb 2010 09:54:11 +0000 (WET)

X-Copyrighted-Material

Hi !

I'm using (after trying 3.0) version 2.6-stable-21.3 (source RPM compiled after some changes)
The danguardian version is 2.10.1.1 (from sources)

Cheers,

Bruno

----- Mensagem original -----
De: "Jose Lopes" <jlopes_at_iportalmais.pt>
Para: "squid-users" <squid-users_at_squid-cache.org>
Enviadas: Quarta-feira, 10 de Fevereiro de 2010 19:09:30 GMT +00:00 Hora de Greenwich, Irlanda, Portugal
Assunto: Re: [squid-users] squid + dansguardian + auth

Hi!

Which version of squid are you using?

Regards
Jose

Jose Ildefonso Camargo Tolosa wrote:
> Hi!
>
> On Wed, Feb 10, 2010 at 9:35 AM, Bruno Ricardo Santos
> <bvsantos_at_hal.min-saude.pt> wrote:
>
>> X-Copyrighted-Material
>>
>>
>> Hi all!
>>
>> I'm having some trouble configuring squid with auth + dansguardian content filter.
>>
>> It's all configured, but when i try to browse, i get an error:
>>
>> Dansguardian 400
>> URL malformed
>>
>> Does authentication (and dansguardian filter) only works with transparent proxy or do i have some configuration wrong ?
>>
>> If i configure the browser to access directly to the squid port, everything works perfect...
>>
>
> Ok.
>
>
>> The problem, as i see it, is about the IP dansguardian passes to squid. After a request, dansguardian give squid the local machine IP.
>>
>
> Did you enabled the auth helpers on dansguardian? Also, if squid
> works correctly: the problem is on dansguardian, and is, thus,
> off-topic for this list, you should write there. Nevertheless, we
> have no problem helping, anyway.
>
>
>> If i change some options in dansguardian, as originalip, i get the error above !
>>
>> I've tried messing around with the following options:
>>
>> forwardedfor
>>
>> usexforwardedfor
>>
> On Dansguardian: No, and Yes, but this is another issue.
>
>
>> and in squid
>>
>> follow_x_forwarded_for
>>
>
> Yeah, via ACL, only accept these from the dansguardian box (localhost,
> most likely).
>
> I hope this helps,
>
> Ildefonso Camargo
>

-- 
	Use OpenSource Software 
Human knowledge belongs to the world 
	Bruno Santos 
bvsantos_at_hal.min-saude.pt 
Tel: +351 962 753 053 
	Divisão de Informática 
informatica_at_hal.min-saude.pt 
Tel: +351 272 000 155 
Fax: +351 272 000 257 
	Unidade Local de Saúde de Castelo Branco, E.P.E. 
geral_at_hal.min-saude.pt 
Tel: +351 272 000 272 
Fax: +351 272 000 257 
	
Linux registered user #349448
	
LPIC-1 Certification
-------------------------------------------------------------------------------------------
Esta mensagem e ficheiros em anexo são confidenciais e destinados somente ao conhecimento e utilização da(s) pessoa(s) ou entidade(s) a quem foram endereçados.
Cabe ao destinatário verificar a existência de vírus ou erros, uma vez que a informação contida pode ser interceptada e/ou modificada.
Se recebeu este e-mail por engano, ou a eles teve acesso não sendo o destinatário, por favor informe de imediato o seu administrador de sistemas 
e elimine-o sem o utilizar, divulgar ou reproduzir.
        
Proteja o ambiente. Antes de imprimir este e-mail, verifique se realmente necessita.
Received on Thu Feb 11 2010 - 09:54:23 MST

This archive was generated by hypermail 2.2.0 : Fri Feb 12 2010 - 12:00:04 MST