[squid-users] Squid, transparent proxy, and logs

Hello,

I'm using Squid 2.5Stable4 compiled with --enable-linux-netfilter.

I'm also using Dansguardian for content filtering. All traffic is
redirected by ipfilter to port 8080 (Dansguardian), which then forwards to
3128 if necessary.

My question is about the logfiles. Both programs log all traffic. While
some may consider this redundant, I enjoy the information that
Dansguardian's logging provides.

My problem is that in my setup, the client IP isn't logged correctly in
squid's access.log. It shows up like this:

1077206929.504 307 <local squid/firewall IP> TCP_MISS/200 173 GET
<remote URL> - DIRECT/<remote IP> text/plain

The <local squid/firewall> is always the same, which makes it impossible
for me to track down the client going by squid's access log.

In the meantime, I've told Dansguardian to do squid-style logging. This
works great, and the client IP shows up correctly in DG's access.log.
That's great and all, but I lose DG's native logging in the process.

Has anyone been through this, and is there anything I can do? I apologize
if this is a DG question.. if so, just let me know and I won't bother the
squid list with it again.

I appreciate it.
Received on Thu Feb 19 2004 - 09:51:13 MST