[squid-users] A logging only ACL?

[Alex Rousskov]

On 07/26/2018 07:15 AM, Ralf Hildebrandt wrote:
> Before destroying our Squid proxy with an ACL, I'd like to LOG ACL hits
> instead of using "http_access deny" straight away:
> 
> --- nsip ---
> acl markURLhaus annotate_transaction accessRule=URLhaus
> acl URLhaus url_regex "/etc/squid5/generated-urlhaus.acl"
> http_access deny URLhaus markURLhaus
> --- nsip ---
> 
> How?

In two steps:

1. Make sure your being-tested access rule never denies. For example:

    http_access deny URLhaus !markURLhaus

2. Use %note logformat code to log all annotations or, with an
accessRule parameter, just the accessRule annotation.

Alex.