|
Run with CSquidGuard
2013/05/12 |
|
In addition to squidClamav, Run Squid with SquidGuard that is a URL redirector used to use blacklists.
|
|
| [1] | Install SquidGuard |
|
root@lan:~#
root@lan:~# aptitude -y install squidguard mv /etc/squidguard/squidGuard.conf /etc/squidguard/squidGuard.conf.bk
root@lan:~#
vi /etc/squidguard/squidGuard.conf # reate new ( most simply setting )
dbhome /var/lib/squidguard/db logdir /var/log/squid dest deny { # define prohibited domain file for 'deny' domainlist deny/domains # define prohibited URL file for 'deny' urllist deny/urls } acl { default { # allow all except 'deny' pass !deny all # redirect URL redirect http://www.srv.world/error.html } } mkdir /var/lib/squidguard/db/deny
root@lan:~#
vi /var/lib/squidguard/db/deny/domains # write domains you'd like to prohibit to access
yahoo.co.jp
example.com
root@lan:~#
vi /var/lib/squidguard/db/deny/urls # write URLs you'd like to prohibit to access
www.yahoo.co.jp/deny/
www.example.com/ squidGuard -C all 2013-05-12 21:03:56 [14155] INFO: squidGuard 1.5 started (1368360236.223) 2013-05-12 21:03:56 [14155] INFO: db update done 2013-05-12 21:03:56 [14155] INFO: squidGuard stopped (1368360236.241) root@lan:~# chown -R c-icap:proxy /var/lib/squidguard
root@lan:~#
chown -R c-icap:proxy /var/log/squidguard
root@lan:~#
vi /etc/squidclamav.conf # line 21: uncomment and change PATH squidguard /usr/bin/squidGuard
/etc/init.d/c-icap restart Restarting c-icap: c-icap. root@lan:~# 2013-05-12 21:05:05 [14170] INFO: squidGuard 1.5 started (1368360305.224) 2013-05-12 21:05:05 [14170] INFO: squidGuard ready for requests (1368360305.235) |
| [2] | Try to access to the URL set as prohibited domain in [1]. |
|