EFW Support

Hi I am using Endian 2.3 Community version.

I have Proxy in non-transparent mode using NTLM Auth. 
I allow users thru proxy by username and useragent.

I am trying to add a new software user-agent (either Skype or windows messenger and sometimes others):
when i look in my Access logs I can see the attempt to connect is denied either 403 (forbidden)or 407 (auth required).
When i look in Useragent log only the allowed useragents are shown (which is pointless as I want to see the failed user log)

How can i get Endian to display the failed useragent (which I assume is causing the 403 above)??

I believe I can circumvent Proxy auth if I can allow the user-agent with disabled auth.
Could someone please help me,
thanks in advance.

I did find this below:

http://www2.tr.squid-cache.org/mail-archive/squid-users/200511/0465.html

Re: [squid-users] useragent.log and TCP_DENIED
This message: [ Message body ] [ More options ]
Related messages: [ Next message ] [ Previous message ] [ In reply to ] [ Next in thread ] [ Replies ] From: Henrik Nordstrom <hno@dont-contact.us>
Date: Tue, 22 Nov 2005 14:40:25 +0100 (CET)

On Tue, 22 Nov 2005, Boniforti Flavio wrote:


> Henrik Nordstrom wrote:
>
>> For this kind of things you need the custom_log patch from
>> devel.squid-cache.org.
>
> So, AFAIU, the useragents being logged to useragent.log are getting logged
> when the request is being fullfilled, that is when they are "not equal" to
> TCP_DENIED replies, am I right?


The user agent is logged just after redirectors but before any cache
lookups.


So yes, the user agent log can't see any requests denied by http_access.



Can the custom patch found here devel.squid-cache.org be installed into Endian without breaking anything else?

bump