Forum Debian Users Gang

http_port 10.1.1.201:3128
icp_port 0
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin ?
no_cache deny QUERY
cache_mem 512 MB
maximum_object_size 131072 KB
ipcache_size 10240
fqdncache_size 10240
cache_replacement_policy heap LFUDA
memory_replacement_policy heap GDSF
cache_dir diskd /var/cache/squid 10000 16 256
access_log /var/log/squid/access.log squid
dns_nameservers 127.0.0.1
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off
refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern         -i      .jpg   43200   100%    43200   reload-into-ims
refresh_pattern         -i      .gif   43200   100%    43200   reload-into-ims
refresh_pattern         -i      .tif   43200   100%    43200   reload-into-ims
refresh_pattern         -i      .bmp   43200   100%    43200   reload-into-ims
refresh_pattern         -i      .png   43200   100%    43200   reload-into-ims
refresh_pattern                 windowsupdate.com/.*.(cab|exe)         43200   100%    43200   reload-into-ims
refresh_pattern                 download.microsoft.com/.*.(cab|exe)    43200   100%    43200   reload-into-ims
refresh_pattern                 .       20160   50%     43200
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl purge method PURGE
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
acl mala_siec src 10.0.0.0/8
http_access allow mala_siec
http_access allow localhost
http_access deny all
http_reply_access allow all
icp_access allow all
acl zwykly_tos src 10.0.0.0/255.0.0.0
tcp_outgoing_tos 0x0 zwykly_tos
zph_tos_local 0x8
acl siec_0 src 10.0.0.0/255.255.255.0
acl siec_1 src 10.1.1.0/255.255.255.0
acl siec_2 src 10.2.1.0/255.255.255.0
acl admin src 10.1.1.1
tcp_outgoing_address 80.x.x.x siec_0
tcp_outgoing_address 83.x.x.x siec_1
tcp_outgoing_address 83.x.x.x siec_2
visible_hostname serwer_R4
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
forwarded_for off
reload_into_ims on
coredump_dir /var/cache/squid
ie_refresh on

###############################
http_port 8080
icp_port 0
#tu aufs w fazie testow
cache_dir aufs /usr/local/squid/var/cache 8048 20 256

icon_directory /usr/local/squid/share/icons
error_directory /usr/local/squid/share/errors/Polish

cache_store_log none
#trafienbie w cache z tosem 16 do szybkiej kolejki wymagany patch squida
zph_tos_local 16

visible_hostname integra.one.pl
cache_effective_user squid
cache_effective_group squid

cache_mem 20 MB
store_avg_object_size 16 kB
maximum_object_size 50000 KB
maximum_object_size_in_memory 32 KB

cachemgr_passwd xxxxxx all
buffered_logs on

#transparent proxy
httpd_accel_host virtual
#tylko za cholere nie chce mi dzialac HTTPS !
httpd_accel_port 80 443
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
httpd_accel_single_host off
hierarchy_stoplist cgi-bin ?
acl all src 10.0.0.0/24
acl magic_words2 url_regex -i .html .gif .png .htm .cgi .php .asp cgi-bin .js .css .txt
acl FTP proto FTP
acl idea url_regex -i http://sms.idea.pl/
acl local url_regex -i http://10.0.0.1/ http://integra.one.pl/

acl normal arp "/usr/local/apache/htdocs/integra/agaserv/acl/masq_allow"
#acl ban arp "/usr/local/apache/htdocs/integra/agaserv/acl/ban_deny"

http_access allow normal
http_access allow idea
#http_access allow local

#deny_info ERR_ZAPLAC ban
deny_info ERR_MAC all

http_access deny all
#tu cala sila trafien w cache
refresh_pattern -i (.*jpg$|.*gif$) 0 50% 28800
refresh_pattern -i (.*rar$.*zip$.*exe$.*swf$.*avi$.*mpeg$.*mp3$.*asf$.*wmv$.*wma$.doc$.pdf$) 0 20% 28800
refresh_pattern -i (.*html$.*htm$.*shtml$.*php$) 5 20% 600
refresh_pattern http://windowsupdate.microsoft.com/ 0 80% 20160
refresh_pattern http://symantecliveupdate.com/ 0 80% 20160
refresh_pattern (http://.*/$) 5 20% 600
refresh_pattern ^ftp: 1440 20% 1080
#refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 1080
#always_direct allow FTP
#zawszse bezporednie FTP
#delays pools nie używam -> CBQ
#delay_pools 2
#delay_class 1 2
#delay_parameters 1 -1/-1 -1/-1
#delay_access 1 allow magic_words2
#delay_class 2 2
#delay_parameters 2 90000/102400 90000/200000
#delay_access 2 allow all
############################################