[SOLVED] Dansguardian with F17 not filtering

[jimbobsma]

HI all,

For the last few years I've had a fairly simple Dansguardian setup running on my local machine to keep my personal web browsing SFW. After my upgrade from F15, it broke, and I didn't have the time to debug. Now I've upgraded to F17, I thought I'd try and figure out what's been going wrong.

I followed this guide to reinstall (http://www.liberiangeek.net/2010/12/...a-14-laughlin/) changing chkconfig to systemctl, and got no errors. However, although both DG and squid are running from boot time, I'm getting nothing in the /var/log/dansguardian/access.log. When I connect via the proxy port (8080) connections time out and a single entry is added to the /var/log/squid/access.log file, with nothing doing into the Dansguardian one. There has to be something trivial I'm missing, but I can't think what. Feel free to ask for config files or log output if it would help

-JBM

P.S. I'm not using iptables for anything while I try to get squid and DG working together - it makes things harder to debug in my experience

[marriedto51]

Well, I have squid and DansGuardian running on this Fedora 16 machine. Looking at the guide you linked to, I can only see two differences...

I have

http_port 3128

in /etc/squid/squid.conf (no "transparent"); and I've edited /etc/dansguardian/dansguardian.conf to include

filterip = 127.0.0.1

Is either of those any use?

[pindakoe]

I had a similar experience migrating from Mandriva to F16. The key is (as marriedto51 points out) is that Squid 3.2 changed 'something' on how to handle transparent proxies. I have not been able to understand what/why from squids extensive webpages, but the short is that they now call this intercept and that it is not just a change in keyword (transparent --> intercept), but that the meaning also changes. I now alos have just http_port 3128 in squid.conf and dansguardian.conf (proxyport = 3128).

[jimbobsma]

Thanks to you both marriedto51 and pindakoe - the problem was indeed with squid and the change of the meaning of 'transparent'!

Thanks again for helping me get DG back up and running!

-JBM