Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have an ADSL connection with a modem sagem (NAT) and connect one machine to cable >(fedora17 = into this machine I installed oracle virtualbox and in this I >have two machine connected as network bridged to the modem Sagem (Debian "" as >server + Ubuntu "" as the client) I installed squid and squidGuard the couple >on (Debian).

in this server (Debian)Here is my configuration:

##cat /proc/sys/net/ipv4/ip_forward
##ls -l /etc/ 
lrwxrwxrwx ......squid -> squid3/

##cd /etc/squid/
ls -l 
-rw-r--r-- 1 root root   1547  6 janv.  2012 errorpage.css
-rw-r--r-- 1 root root    421  6 janv.  2012 msntauth.conf
lrwxrwxrwx 1 root root      6  4 févr. 21:49 squid -> squid/
-rw-r--r-- 1 root root 198835  5 févr. 00:02 squid.conf
-rw-r--r-- 1 root root 198764  2 févr. 00:18 squid.conf.old
-rw-r--r-- 1 root root   1350  4 févr. 23:47 squidGuard.conf
-rw-r--r-- 1 root root   1431  3 févr. 20:25 squidGuard.conf.old


acl manager proto cache_object
acl localhost src ::1
acl to_localhost dst ::1
acl localnet src    

acl SSL_ports port 443
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443         # https
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http

http_access allow manager localhost
http_access deny manager

http_access deny !Safe_ports

http_access deny CONNECT !SSL_ports

http_access allow localnet
http_access allow localhost

http_access deny all

http_port 3128 transparent

hierarchy_stoplist cgi-bin ?

access_log /var/log/squid3/access.log squid

coredump_dir /var/spool/squid3

refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern -i (/cgi-bin/|\?) 0     0%      0
refresh_pattern .               0       20%     4320

visible_hostname mysrvhostname


time workhours {
weekly mtwhf 08:00 - 16:30
        date *-*-01  08:00 - 16:30

dest noface
        domainlist noface/domains
        expressionlist noface/expressions
        urllist noface/urls
acl {
default {
                pass     !noface all





iptables rules

iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 3128

I built the databases and started squid3 like this:

# squidGuard -C all
# squidGuard -u
# /etc/init.d/squid3 restart

Now in my client Ubuntu I set the IP address of my server Debian in the mandatory proxy and the port 3128 and when I hit one of the sites I want to block facebook as customer accede without difficulty

Where is the problem?

share|improve this question
up vote 0 down vote accepted

The problem is that you are not referencing SquidGuard nowhere to be seen. You'll need a redirect_program clause, pointing to your SG binary and configuration.

redirect_program /usr/bin/SquidGuard -c /etc/squid/SquidGuard.conf

Just check the path to SG binary, I'm not sure of it.

share|improve this answer
I tried typing in the terminal shell >###"#redirect_program /usr/bin/SquidGuard -c /etc/squid/SquidGuard.conf" it gives an error message: >bash: redirect_program: unknown command ... I think this problem is exceeded Appears when I made a symbolic link from / etc / squid -> / etc/squid3 / if you told me was okay, if not how to type this command: redirect_program # / usr / bin / SquidGuard-c / etc / squid / SquidGuard.conf or is what I put it? – tmedtcom Feb 5 '13 at 9:29
You have to put it on your squid.conf – fboaventura Feb 5 '13 at 11:59
i put it on my squid.conf and i restart squid service===> it is works thaaanks Mr @fboaventura – tmedtcom Feb 5 '13 at 13:36

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.