Forum Debian Users Gang

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
acl our_networks src 10.0.0.0/16
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access allow CONNECT !SSL_ports
http_access allow our_networks
http_access deny all

http_port 3128 transparent

cache_mem 2048 MB
logfile_rotate 4
maximum_object_size_in_memory 256 KB
memory_replacement_policy heap GDSF
cache_replacement_policy heap LFUDA
cache_dir aufs /mnt/sdb1 2000 16 256
minimum_object_size 0 KB
maximum_object_size 500 MB
cache_swap_low 90
cache_swap_high 95
access_log /var/log/squid/access.log squid
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log
client_netmask 255.255.0.0
request_header_max_size 1 MB
request_body_max_size  512 MB
half_closed_clients off
shutdown_lifetime 10 second
cache_effective_user proxy
cache_effective_group proxy
error_directory /var/log/squid/errors/Polish
dns_defnames on
dns_nameservers 194.204.159.1 8.8.8.8
ipcache_size 10240
ipcache_low 90
fqdncache_size 8192
memory_pools on
memory_pools_limit 100 MB
refresh_pattern -i \.(gif|tif|tiff|bmp|jpg|jpeg|png|ico) 1440 50% 10080
refresh_pattern -i \.(wav|mp3|mp2|wmp|mid) 10080 50%  20160
refresh_pattern -i \.(txt|pdf|doc|xls|docx|odf|ppt|pptx) 4320 50%  10080
refresh_pattern -i \.(css|html|htm) 2880 50% 43200
refresh_pattern -i \.(flv|swf|mp4|wmv|) 10080 70% 43200

iptables -F
iptables -X
iptables -t nat -X
iptables -t nat -F

iptables -P INPUT ACCEPT
iptables -P FORWARD ACCEPT
iptables -P OUTPUT ACCEPT

iptables -t nat -A PREROUTING -i eth0 -p tcp -–dport 80 -j REDIRECT –-to-port 3128