[squid-users] not all lines of access.log containsthe username
Amos Jeffries
squid3 at treenet.co.nz
Mon Mar 21 23:01:36 UTC 2016
On 21/03/2016 11:27 p.m., IT HIA service wrote:
> Hi Amos,
>
> Some lines of the squid.conf,else which lines can be interesting to
> provide?
>
> thanks
>
> ----------------------------------------------------------------------------
> ---
> # CONFIG SQUID.CONF V3
> #
> ----------------------------------------------------------------------------
> -
> cache_dir ufs /cache 10240 16 256
>
> access_log /var/log/squid3/access.log
>
> cache_log /var/log/squid3/cache.log
>
> debug_options ALL,1 33,2
> ......
> # TAG: auth_param
>
> auth_param basic program /usr/lib/squid3/ncsa_auth /usr/etc/passwd
>
> auth_param basic children 20
> auth_param basic realm PROXYV2013
> auth_param basic credentialsttl 50 second
>
> # ACCESS CONTROLS
> #
> ----------------------------------------------------------------------------
> -
>
> acl acl1 proxy_auth REQUIRED
>
>
> acl CONNECT method CONNECT
>
> http_access allow acl1
Any other http_access lines?
Particularly ones above this with "allow" action.
If not, then you will need to change this to:
http_access deny !acl1
>
> log_access allow aclname
"log_access" is deprecated. Use ACLs on the access_log directive instead.
>
>
> # header_access From deny all
> # header_access Referer deny all
> # header_access Server deny all
> # header_access Link deny all
>
> logformat squid %ul %ui %un %ts.%03tu %6tr %>a %Ss/%03Hs %<st %rm %ru
> %Sh/%<A %mt
Please do not re-define the native "squid" logging format. The results
will not be what you might expect.
Instead use a name for the format you make up yourself.
>
> ignore_expect_100 off
If you have a Squid older than 3.2 please upgrade. For newer Squid this
directive is unused.
> coredump_dir /var/spool/squid3
>
> url_rewrite_program /usr/bin/squidGuard -c /etc/squidguard/squidGuard.conf
> url_rewrite_children 10
>
> store_avg_object_size 10 GB
Um. You only have 10GB of cache_dir total size.
So this means you are storing just one object. That right?
For anything like normal proxy traffic the _avg_ object size does not
need tuning.
> redirect_program /usr/bin/squidGuard -c /etc/squidguard/squidGuard.conf
Remove the "redirect_program". It is an alias for url_rewrite_program
and that can only be used once.
Amos
More information about the squid-users
mailing list