[squid-users] not all lines of access.log containsthe username

Amos Jeffries squid3 at treenet.co.nz
Mon Mar 21 23:01:36 UTC 2016


On 21/03/2016 11:27 p.m., IT HIA service wrote:
>  Hi Amos,
> 
>  Some lines of the squid.conf,else which lines can be interesting to
> provide?
> 
> thanks
> 
> ----------------------------------------------------------------------------
> ---
> #                             CONFIG SQUID.CONF V3
> #
> ----------------------------------------------------------------------------
> -
> cache_dir ufs /cache 10240 16 256
> 
> access_log /var/log/squid3/access.log
> 
> cache_log /var/log/squid3/cache.log
> 
> debug_options ALL,1 33,2
> ......
> #  TAG: auth_param
> 
> auth_param basic program /usr/lib/squid3/ncsa_auth /usr/etc/passwd
> 
> auth_param basic children 20
> auth_param basic realm PROXYV2013
> auth_param basic credentialsttl 50 second
> 
> #                               ACCESS CONTROLS
> #
> ----------------------------------------------------------------------------
> -
> 
> acl acl1 proxy_auth REQUIRED
> 
> 
> acl CONNECT method CONNECT
> 
> http_access allow acl1


Any other http_access lines?
Particularly ones above this with "allow" action.

If not, then you will need to change this to:

  http_access deny !acl1

> 
> log_access allow aclname

"log_access" is deprecated. Use ACLs on the access_log directive instead.


> 
> 
> # header_access From deny all
> # header_access Referer deny all
> # header_access Server deny all
> # header_access Link deny all
> 
> logformat squid  %ul %ui %un %ts.%03tu %6tr %>a %Ss/%03Hs %<st %rm %ru
> %Sh/%<A %mt

Please do not re-define the native "squid" logging format. The results
will not be what you might expect.
Instead use a name for the format you make up yourself.

> 
> ignore_expect_100 off

If you have a Squid older than 3.2 please upgrade. For newer Squid this
directive is unused.


> coredump_dir /var/spool/squid3
> 
> url_rewrite_program /usr/bin/squidGuard -c /etc/squidguard/squidGuard.conf
> url_rewrite_children 10
> 
> store_avg_object_size 10 GB

Um. You only have 10GB of cache_dir total size.
So this means you are storing just one object. That right?

For anything like normal proxy traffic the _avg_ object size does not
need tuning.

> redirect_program /usr/bin/squidGuard -c /etc/squidguard/squidGuard.conf

Remove the "redirect_program". It is an alias for url_rewrite_program
and that can only be used once.



Amos



More information about the squid-users mailing list