Re: [squid-users] monitoring active users

hi!

the only allowed ip addresses to access your proxy are the ones you
specified in the acl section:

acl all src 0.0.0.0/0.0.0.0
acl your_network src 10.1.0.0/255.255.0.0

http_access allow your_network
http_access deny all

do not use http_access allow all

hth,

-- 
vitually yours,
jun
Ricardo P. Garin jr.
Information and Security Solutions Group (ISSG)
3/F Wesolv Open Computing, Inc.
Fujitsu House
Tel.#: 893.71.55 loc. 1385 & 1383
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Email, voice mail, fax, pagers, PDA, SMS, ... so many ways to ignore 
people."
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Andrian wrote:
> Thank you too...
> 
> but i want to know about the access.log, when i do this command (  tail -f
> access.log | awk '{print $8,$3,$4,$7}'   ), There is some ip address that i
> think it should not come from my intranet, this is the example :
> 
> 
> - 138.121.20.3 TCP_DENIED/403 64.12.137.184:25
> - 206.135.212.10 TCP_DENIED/403 131.162.201.12:25
> - 138.121.20.3 TCP_DENIED/403 64.12.137.184:25
> - 10.1.1.161 TCP_MISS/200 http://shttp.msg.yahoo.com/notify/
> - 10.1.1.131 TCP_MISS/200 http://204.177.92.204/w/getclientinfo?
> - 10.1.1.103 TCP_MISS/302
> http://adserv.internetfuel.com/cgi-bin/omnidirect.cgi?
> - 10.1.1.103 TCP_MEM_HIT/200 http://nitrous.exitfuel.com/code/kzpop.html
> - 10.1.1.103 TCP_MISS/000 http://ifcol.exitfuel.com/counter/logo.gif?
> 
> 
> The ip start from 10.1.*.* is from my intranet and others i believe is not
> from my intranet.
> but the next sentence is TCP_DENIED/403
> 
> is this save? or i should make conf again to squid.conf??
> 
> Thanks
> 
> 
> Regards
> 
> Andriansah
> 
>>Hi,
>>
>>i would like to see how many and which useres are currently online
>>over squid. Perfectly would be which sites they are accesing at the
>>moment........ Is there such a tool avaible?  OS is SuSE 7.1
>>
>>Regards
>>Tom
>>
>