Re: [squid-users] squid + dansguardian + auth

From: Jose Lopes <jlopes_at_iportalmais.pt>
Date: Fri, 12 Feb 2010 11:55:54 +0000

Hi!

Have you compiled squid with the option "--enable-follow-x-forwarded-for" ?
Please try to see the requests between dansguardian and squid, if there
is the header "X-Forwarded-For".

Regards
Jose

Bruno Ricardo Santos wrote:
> X-Copyrighted-Material
>
> Hi !
>
> I'm using (after trying 3.0) version 2.6-stable-21.3 (source RPM compiled after some changes)
> The danguardian version is 2.10.1.1 (from sources)
>
> Cheers,
>
> Bruno
>
>
>
> ----- Mensagem original -----
> De: "Jose Lopes" <jlopes_at_iportalmais.pt>
> Para: "squid-users" <squid-users_at_squid-cache.org>
> Enviadas: Quarta-feira, 10 de Fevereiro de 2010 19:09:30 GMT +00:00 Hora de Greenwich, Irlanda, Portugal
> Assunto: Re: [squid-users] squid + dansguardian + auth
>
> Hi!
>
> Which version of squid are you using?
>
> Regards
> Jose
>
> Jose Ildefonso Camargo Tolosa wrote:
>
>> Hi!
>>
>> On Wed, Feb 10, 2010 at 9:35 AM, Bruno Ricardo Santos
>> <bvsantos_at_hal.min-saude.pt> wrote:
>>
>>
>>> X-Copyrighted-Material
>>>
>>>
>>> Hi all!
>>>
>>> I'm having some trouble configuring squid with auth + dansguardian content filter.
>>>
>>> It's all configured, but when i try to browse, i get an error:
>>>
>>> Dansguardian 400
>>> URL malformed
>>>
>>> Does authentication (and dansguardian filter) only works with transparent proxy or do i have some configuration wrong ?
>>>
>>> If i configure the browser to access directly to the squid port, everything works perfect...
>>>
>>>
>> Ok.
>>
>>
>>
>>> The problem, as i see it, is about the IP dansguardian passes to squid. After a request, dansguardian give squid the local machine IP.
>>>
>>>
>> Did you enabled the auth helpers on dansguardian? Also, if squid
>> works correctly: the problem is on dansguardian, and is, thus,
>> off-topic for this list, you should write there. Nevertheless, we
>> have no problem helping, anyway.
>>
>>
>>
>>> If i change some options in dansguardian, as originalip, i get the error above !
>>>
>>> I've tried messing around with the following options:
>>>
>>> forwardedfor
>>>
>>> usexforwardedfor
>>>
>>>
>> On Dansguardian: No, and Yes, but this is another issue.
>>
>>
>>
>>> and in squid
>>>
>>> follow_x_forwarded_for
>>>
>>>
>> Yeah, via ACL, only accept these from the dansguardian box (localhost,
>> most likely).
>>
>> I hope this helps,
>>
>> Ildefonso Camargo
>>
>>
>
>
Received on Fri Feb 12 2010 - 11:56:07 MST

This archive was generated by hypermail 2.2.0 : Mon Feb 15 2010 - 12:00:08 MST