DNS filter - limit reports and logs

[Mark Williams]

We use Web safety for the main network but ive stopped using web safety for our guest WIFI - the dnssafety and a firewall blocking other DNS is good enough for the guests.

However, I havent found a way to limit reports/logs, they seems to just grow (they just filled a 40gb partition in a few months without me noticing.

In websafety I can limit the logs etc but I cannot figure out how to do this in dnssafety.  Id rather not go into cron scripting if I can help it.

[rafael....@diladele.com]

I am afraid log rotation is not implemented. I have added the issue but have no idea when we decide to revive the project.

https://github.com/diladele/dnssafety/issues/442

Best regards,

Raf

[Mark Williams]

no problem weekly cron script it is!  Does this mean that dnssafety is discontinued?

[pcl...@gmail.com]

yeah, please don't neglect it.... I love DNS Safety!

[rafael....@diladele.com]

We call it postponed, not discontinued. Will try to work on it after Web Safety 7.7 comes out in December.

If you know already what needs to be added, do not hesitate to add an issue at https://github.com/diladele/dnssafety/issues/new

Best regards,

Raf

[Mark Williams]

Just a follow up to this for anyone else needing to rotate both logs and prune old reports.  I did create a BASH script to prune the reports but they kept coming back.  Long story short, you have "sort of" implemented log rotation.  There are two parts to the log rotation, one is the actual "access.log" containing the raw data and one is the "reports" pages that have the HTML.  

I had a cron.weekly script that pruned the older reports pages:

daysToKeep=30
minKeepEpoch=$(date --date "$daysToKeep days ago" +%s)

for dir in /opt/dnssafety-ui/var/reports/*; do
    dirName=${dir##*/}
    dirEpoch=$(date --date ${dirName//./} +%s)
  (( dirEpoch <= minKeepEpoch )) && rm -rf $dir
done

That works for 30 days worth of reports. However!  These reports will keep coming back due to the cron.daily dnssafety_report script that looks through /opt/dnssafety/var/log/ and collects data.  So I looked at writing a quick script to prune the access.log  It turns out that after writing the script and putting it in  /etc/logrotate.d I didnt have to! You have already written a rotation script:

/etc/logrotate.d/dnssafety

This was set to 367 days inside the code (and there doesnt seem to be a UI link to change this), I simply needed to change the setting to 30 days.  Now I have 47gb recovered in logs so this VM can carry on a little while longer.

Still, I dont think this rotation prunes the reports directory; only the access.log so I would have needed my first script anyway....