Re: [squid-users] Question regaring cache.log in newer versions of squid, where are my logs??

From: Squidblacklist <webmaster_at_squidblacklist.org>
Date: Fri, 24 May 2013 02:32:20 -0700

Yeah my log files are in /var/log/squid3/cache.log but it doesnt matter
where my log files are, its what squid is, or actually, isnt doing that
has me unhappy.

 Lets say normally when I would build a new lists I would have the
 following in my blacklists

.somesite.com
porn.somsite.com
othersite.com
.othersite.com

Ok, squid would throw enough errors where I could sort the log file and
have a nice list of each and EVERY error in my list.

Now all squid does is poop out a single error, and thats it, thats all
it logs, it ignores the rest of the erronious entries completely.
Unlike the previous versions of squid that have shipped with debian,
3.1.6 and lower, they gave an log entry for each and every error in an
external acl file, this new version as I said, DOES NOT.

It does a single entry and thats it. Im just curious as to why.

Heres an example.

root_at_galileo:/etc/squid3# squid3 -k reconfigure
2013/05/23 22:30:17| ERROR: '.web-cam-sex.webgidsje.nl' is a subdomain
of '.webgidsje.nl' 2013/05/23 22:30:17| ERROR: because of this
'.webgidsje.nl' is ignored to keep splay tree searching predictable
2013/05/23 22:30:17| ERROR: You should remove '.webgidsje.nl' from the
ACL named 'test' FATAL: Bungled squid.conf line 47: acl test dstdomain
"/etc/squid3/squid-porn.acl" Squid Cache (Version 3.1.20): Terminated
abnormally. CPU Usage: 43.199 seconds = 42.711 user + 0.488 sys Maximum
Resident Size: 155056 KB Page faults with physical i/o: 0

root_at_galileo:/etc/squid3# sed -i '/.webgidsje.nl/d' squid-porn.acl
root_at_galileo:/etc/squid3# squid3 -k reconfigure
2013/05/23 22:36:20| ERROR: '.tydeue.www2.prexon.nl' is a subdomain of
'.www2.prexon.nl' 2013/05/23 22:36:20| ERROR: because of this
'.www2.prexon.nl' is ignored to keep splay tree searching predictable
2013/05/23 22:36:20| ERROR: You should remove '.www2.prexon.nl' from
the ACL named 'test' FATAL: Bungled squid.conf line 47: acl test
dstdomain "/etc/squid3/squid-porn.acl" Squid Cache (Version 3.1.20):
Terminated abnormally. CPU Usage: 43.515 seconds = 43.019 user + 0.496
sys Maximum Resident Size: 156896 KB Page faults with physical i/o: 0

root_at_galileo:/etc/squid3# sed -i '/.prexon.nl/d' squid-porn.acl
root_at_galileo:/etc/squid3# squid3 -k reconfigure
2013/05/23 22:39:33| ERROR: '.danx.wwwpuntocom.com' is a subdomain of
'.wwwpuntocom.com' 2013/05/23 22:39:33| ERROR: because of this
'.wwwpuntocom.com' is ignored to keep splay tree searching predictable
2013/05/23 22:39:33| ERROR: You should remove '.wwwpuntocom.com' from
the ACL named 'test' FATAL: Bungled squid.conf line 47: acl test
dstdomain "/etc/squid3/squid-porn.acl" Squid Cache (Version 3.1.20):
Terminated abnormally. CPU Usage: 43.975 seconds = 43.455 user + 0.520
sys

And so forth, the older version 3.1.6 squid would not do this, it would
log ALL the errors in an external acl, this new version does not, it
logs ONE error. and then gives up.

Is there a way to make it more verbose? Or to make it proceed without
stopping on the first error?

I mean its not critical that I have the candy I want, that was taken
from me, I can always use an older version from Debian Squeeze repos
that does what I want it to do, I just wanted to know what gives?

-
Signed,

Fix Nichols

http://www.squidblacklist.org
Received on Fri May 24 2013 - 09:32:38 MDT

This archive was generated by hypermail 2.2.0 : Fri May 24 2013 - 12:00:48 MDT