665
edits
Changes
From SME Server
Jump to navigationJump to search
mLine 10:
Line 10: − + Line 24:
Line 24: + + + Line 40:
Line 43: + + + + + + + +
no edit summary
=== Description ===
=== Description ===
This contrib brings 3 new features for squid proxy, and provides a simple panel to control most of it:
This contrib brings 3 new features for squid proxy, and provides a simple panel to control most of it:
*URL Filtering (with [squidguard squidGuard])
*URL Filtering (with [http://squidguard.org/ squidGuard])
Several categories of domain names and URLs are downloaded from the University of Toulouse and updated every night (you can get more informations on these lists [http://dsi.ut-capitole.fr/blacklists/ here), it french). You can then just choose which catagories you want to block. You can enter a list of ip addresses which won't be filtered, and a local blacklist and whitelist.
Several categories of domain names and URLs are downloaded from the University of Toulouse and updated every night (you can get more informations on these lists [http://dsi.ut-capitole.fr/blacklists/ here), it french). You can then just choose which catagories you want to block. You can enter a list of ip addresses which won't be filtered, and a local blacklist and whitelist.
*On the fly antivirus scanning (using ([http://squidclamav.darold.net/ squidclamav])
*On the fly antivirus scanning (using ([http://squidclamav.darold.net/ squidclamav])
*You need to configure both [[Epel]] and [[Fws]] repositories
*You need to configure both [[Epel]] and [[Fws]] repositories
=== Screenshots ===
=== Screenshots ===
[[File:Webfilter_1.png|webfilter panel]]
[[File:Webfilter_2.png|webfilter panel]]
=== Installation ===
=== Installation ===
db configuration setprop squidguard AutoUpdate disabled
db configuration setprop squidguard AutoUpdate disabled
Then, you'll be able to manage the list the way you want. Remember you need to recompile squidGuard databases if you modify files in a list.
Then, you'll be able to manage the list the way you want. Remember you need to recompile squidGuard databases if you modify files in a list.
===MySQL logs===
MySQL loging of clients requests is handled by a independant daemon called squid-db-logd. It monitors squid access log and squidGuard deny log in realtime, parse it and put everything in the database called squid_log. In this database, the table access_log list all the access while the deny_log only list denied pages. This feature may need a lot of space. On a busy server, you can easily reach 3Go/month only for the database (and more for the dump when you backup your server). To lmit the needed space, a cron job rotate and compress the access_log and deny_log tables each month. Old tables are also removed. The default config keeps one year of log. You can change this setting with (value is in day and default is 365)
db configuration setprop squid-db-logd Retention 180
If you want to completly disable this feature, you can stop this daemon:
db configuration setprop squid-db-logd status disabled
sv d /service/squid-db-logd
