| ## SQUID CONFIG |
| cache_mgr Gerd@Naschenweng.info |
| |
| ## Those are the ports the proxy is going to listen to |
| http_port 172.16.0.97:3128 |
| http_port 172.16.0.97:8080 |
| |
| # TAG: visible_hostname |
| # The host-name of the proxy-server. Can really be anything |
| visible_hostname MuffinStationProxy |
| |
| # DISK CACHE OPTIONS |
| # ----------------------------------------------------------------------------- |
| # Disk-cache options. Just adjust the cache-siz (in my case 20GB) |
| cache_replacement_policy lru |
| cache_dir ufs /opt/var/squid/cache/ 20000 16 256 |
| minimum_object_size 0 KB |
| maximum_object_size 2097152 KB |
| maximum_object_size_in_memory 1024 KB |
| |
| # MEMORY CACHE OPTIONS |
| # ----------------------------------------------------------------------------- |
| # TAG: cache_mem (bytes) |
| cache_mem 8 MB |
| memory_replacement_policy lru |
| |
| # ACCESS CONTROLS |
| # ----------------------------------------------------------------------------- |
| acl all src 0.0.0.0/0.0.0.0 |
| acl manager proto cache_object |
| acl localhost src 127.0.0.1/255.255.255.255 |
| acl our_networks src 172.16.0.0/24 172.16.1.0/24 |
| acl to_localhost dst 127.0.0.0/8 |
| acl nonblockedip src 172.16.0.3 172.16.0.5 |
| |
| # childblocks |
| acl blocksites dstdomain "/opt/etc/squid/restricted-sites.squid" |
| |
| #Block childblocked sites |
| http_access deny blocksites !nonblockedip all |
| |
| |
| http_access allow manager localhost |
| http_access allow manager our_networks |
| http_access deny manager |
| |
| # Allow all clients from my network |
| http_access allow our_networks |
| |
| # And finally deny all other access to this proxy |
| http_access deny all |
| |
| #Allow ICP queries from everyone |
| icp_access allow all |
| |
| # LOG-FILES |
| # ----------------------------------------------------------------------------- |
| access_log /opt/var/squid/logs/access.log squid |
| |
| #cache_log none |
| #cache_log /opt/var/squid/logs/cache.log |
| |
| #cache_access_log none |
| #cache_access_log /opt/var/squid/logs/access.log |
| |
| #cache_store_log none |
| #cache_store_log /opt/var/squid/logs/store.log |
| |
| |
| # OPTIONS FOR TUNING THE CACHE |
| # ----------------------------------------------------------------------------- |
| |
| # TAG: cache |
| # A list of ACL elements which, if matched, cause the request to |
| # not be satisfied from the cache and the reply to not be cached. |
| # In other words, use this to force certain objects to never be cached. |
| # |
| # You must use the word 'DENY' to indicate the ACL names which should |
| # NOT be cached. |
| # |
| # Default is to allow all to be cached |
| |
| #We recommend you to use the following two lines. |
| acl QUERY urlpath_regex cgi-bin \? |
| cache deny QUERY |
| refresh_pattern ^ftp: 1440 20% 10080 |
| refresh_pattern ^gopher: 1440 0% 1440 |
| refresh_pattern . 0 20% 4320 |
| refresh_pattern \.gif 1440 50% 40320 reload-into-ims |
| refresh_pattern \.jpg 1440 50% 40320 reload-into-ims |
| refresh_pattern \.tif 4320 50% 43200 |
| refresh_pattern \.png 1440 50% 40320 reload-into-ims |
| refresh_pattern \.jpeg 1440 50% 40320 reload-into-ims |
| refresh_pattern ^http://*.google.*/.* 720 100% 4320 |
| |
| # refresh patterns to enable caching of MS windows update |
| refresh_pattern windowsupdate\.microsoft\.com/.*\.(cab|exe|psf) 4320 100% 120960 reload-into-ims |
| refresh_pattern update\.microsoft\.com/.*\.(cab|exe|psf) 4320 100% 120960 reload-into-ims |
| refresh_pattern office\.microsoft\.com/.*\.(cab|exe|psf) 4320 100% 120960 |
| refresh_pattern windowsupdate\.com/.*\.(cab|exe|psf) 4320 100% 120960 reload-into-ims |
| refresh_pattern download\.microsoft\.com/.*\.(cab|exe|psf) 4320 100% 120960 reload-into-ims |
| refresh_pattern microsoft\.com 4320 100% 10080 |
| |
| |
| pipeline_prefetch on |
| # Apache mod_gzip and mod_deflate known to be broken so don't trust |
| # Apache to signal ETag correctly on such responses |
| acl apache rep_header Server ^Apache |
| broken_vary_encoding allow apache |
| |
| # Leave coredumps in the first cache dir |
| coredump_dir /opt/var/squid/cache |
| |
| # Disable cachemgr password |
| cachemgr_passwd none all |