You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
66 lines
2.2 KiB
66 lines
2.2 KiB
## |
|
## squid.conf -- Squid Proxy Configuration |
|
## |
|
|
|
acl anynet src 0.0.0.0/0.0.0.0 |
|
|
|
acl localnet src 10.0.0.0/8 # RFC1918 possible internal network |
|
acl localnet src 172.16.0.0/12 # RFC1918 possible internal network |
|
acl localnet src 192.168.0.0/16 # RFC1918 possible internal network |
|
acl localnet src fc00::/7 # RFC4193 local private network range |
|
acl localnet src fe80::/10 # RFC4291 link-local (directly plugged) machines |
|
|
|
acl CONNECT_ports port 80 # http |
|
acl CONNECT_ports port 443 # https |
|
|
|
acl CONNECT method CONNECT |
|
|
|
acl Safe_ports port 80 # http |
|
acl Safe_ports port 443 # https |
|
acl Safe_ports port 21 # ftp |
|
acl Safe_ports port 70 # gopher |
|
acl Safe_ports port 210 # wais |
|
acl Safe_ports port 1025-65535 # unregistered ports |
|
acl Safe_ports port 280 # http-mgmt |
|
acl Safe_ports port 488 # gss-http |
|
acl Safe_ports port 591 # filemaker |
|
acl Safe_ports port 777 # multiling http |
|
|
|
auth_param basic program @l_prefix@/libexec/squid/basic_ncsa_auth @l_prefix@/etc/squid/squid.passwd |
|
auth_param basic realm proxy |
|
|
|
acl authenticated proxy_auth REQUIRED |
|
|
|
http_access deny !Safe_ports |
|
http_access deny CONNECT !CONNECT_ports |
|
http_access allow localhost manager |
|
http_access deny manager |
|
http_access allow localnet |
|
http_access allow localhost |
|
http_access allow authenticated anynet |
|
http_access deny all |
|
|
|
icp_access allow localnet |
|
icp_access deny all |
|
|
|
http_port 127.0.0.1:3128 |
|
icp_port 3130 |
|
|
|
#cache_peer 127.0.0.2 sibling 3128 3130 name=peer1 round-robin |
|
#cache_peer 127.0.0.3 sibling 3128 3130 name=peer2 round-robin |
|
#cache_peer proxy.example.com parent 3128 0 name=upstream default |
|
|
|
refresh_pattern ^ftp: 1440 20% 10080 |
|
refresh_pattern ^gopher: 1440 0% 1440 |
|
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 |
|
refresh_pattern . 0 20% 4320 |
|
|
|
cache_dir ufs @l_prefix@/var/squid/cache 100 16 256 |
|
|
|
cache_log @l_prefix@/var/squid/log/squid.log |
|
cache_store_log daemon:@l_prefix@/var/squid/log/squid.store.log |
|
access_log daemon:@l_prefix@/var/squid/log/squid.access.log squid |
|
|
|
pid_filename @l_prefix@/var/squid/run/squid.pid |
|
coredump_dir @l_prefix@/var/squid/run |
|
|
|
|