##
##  squid.conf -- Squid Proxy Configuration
##

acl anynet   src 0.0.0.0/0.0.0.0

acl localnet src 10.0.0.0/8     # RFC1918 possible internal network
acl localnet src 172.16.0.0/12  # RFC1918 possible internal network
acl localnet src 192.168.0.0/16 # RFC1918 possible internal network
acl localnet src fc00::/7       # RFC4193 local private network range
acl localnet src fe80::/10      # RFC4291 link-local (directly plugged) machines

acl CONNECT_ports port 80       # http
acl CONNECT_ports port 443      # https

acl CONNECT method CONNECT

acl Safe_ports port 80          # http
acl Safe_ports port 443         # https
acl Safe_ports port 21          # ftp
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http

auth_param basic program @l_prefix@/libexec/squid/basic_ncsa_auth @l_prefix@/etc/squid/squid.passwd
auth_param basic realm proxy

acl authenticated proxy_auth REQUIRED

http_access deny            !Safe_ports
http_access deny  CONNECT   !CONNECT_ports
http_access allow localhost manager
http_access deny            manager
http_access allow localnet
http_access allow localhost
http_access allow authenticated anynet
http_access deny  all

icp_access  allow localnet
icp_access  deny  all

http_port   127.0.0.1:3128
icp_port    3130

#cache_peer 127.0.0.2         sibling 3128 3130 name=peer1 round-robin
#cache_peer 127.0.0.3         sibling 3128 3130 name=peer2 round-robin
#cache_peer proxy.example.com parent  3128 0    name=upstream default

refresh_pattern ^ftp:             1440 20% 10080
refresh_pattern ^gopher:          1440 0%  1440
refresh_pattern -i (/cgi-bin/|\?) 0    0%  0
refresh_pattern .                 0    20% 4320

cache_dir ufs @l_prefix@/var/squid/cache 100 16 256

cache_log @l_prefix@/var/squid/log/squid.log
cache_store_log daemon:@l_prefix@/var/squid/log/squid.store.log
access_log daemon:@l_prefix@/var/squid/log/squid.access.log squid

pid_filename @l_prefix@/var/squid/run/squid.pid
coredump_dir @l_prefix@/var/squid/run

