Bypassing Squid Logging

[heyyunus]

Hi,

I am using Red Hat Linux 9 and squid 2.5 as the proxy server.

Is there any way i can create an ACL entry for a particular IP address to bypass the logging of squid.

In other words i dont want the IP a.b.c.d to get logged for all the HTTP requests placed on the net via the proxy server.

Thanks


-------
Yunus

 

[QatQat]

Allow that address to go out directly on the gateway using iptables.

Cheers

QatQat

Life is what happens when you are making other plans.

 

[heyyunus]

hi,

I dont want to use iptables for some reason.
Any other idea for this.


-------
Yunus

 

[KenCunningham]

I dont want to use iptables for some reason.

For what reason?

 

[heyyunus]

That server also has one application server running which sends & recieves UDP packets from the Telecom service provider for SIP testing. The service provider IP's keep changing, so it will be an extra overhead for me.

Any other alternative method?

Thanks


-------
Yunus

 

[WhiteVolg]

I'm not gonna mention that you could set the iptables to allow that one app server on the inside unrestricted access to the 1 UDP port to/fromo any machine on a specified network at the other end... eliminating the need to change anything when they dink about with their IP's as long as they don't swap network. Nor that it sounds potentially unethical to be allow a singular host to bypass the proxy logging....I would be significanlty concerned about possible repurcussions.

 

[heyyunus]

In my case i have to bypass the logging of squid for one user.

I know that it seem a little doubtful case but what to do we have to follow instructions.


-------
Yunus

 

[WhiteVolg]

Well then I would recommend using iptables to ACCEPT and forward requests from that 1 host to the net. The catch here is that even if your "turn logging off" for 1 host, it's not really going to happen as squid still has to log it to cache the request. So technically the caching is still logging. I would seriously recommend requiring approval from:
A) Your manager
B) The person's manager
C) Human Resources and possibly
D) The Company's Legal Dept.

It just sounds too fishy to me. then if they really need it that bad jsut have iptables forward that machines request out to the net. Otherwise you're going to have to dig to turn off logging for 1 user in squid docs, I don't think it's designed to do it.

 

[QatQat]

I must admit, it sounds fishy to me too.

QatQat

Life is what happens when you are making other plans.

 

[heyyunus]

Thanks everyone for your suggestions.
I have told my manager and have given up this thing.

Thanks once again to everyone.




-------
Yunus