Forum Debian Users Gang

serwer ~ # cat /etc/squid/squid.conf |grep -v "#" |egrep .$
http_port 192.168.255.2:3128 transparent
icp_port 0
htcp_port 0
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin ?
cache deny QUERY
cache_vary on
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
cache_mem 200 MB
 cache_swap_low 90
 cache_swap_high 95
maximum_object_size 65536 KB
minimum_object_size 5 KB
maximum_object_size_in_memory 1 MB
 ipcache_size 10240
 ipcache_low 90
 ipcache_high 95
 fqdncache_size 10240
 cache_replacement_policy heap LFUDA
 memory_replacement_policy heap GDSF
 cache_dir diskd /var/cache/squid 4000 16 256 Q1=90 Q2=110
 access_log none
 cache_log /var/log/squid/cache.log
 cache_store_log none
refresh_pattern -i .(gif|jpg|jpeg|png|html|bmp)   0   20%    2880   reload-into-ims
refresh_pattern -i .(zip|gz|bz2|exe|rar|mp3|mpg|avi|wmv|vqf|ogg)   43200   100%    43200   reload-into-ims
refresh_pattern windowsupdate.com/.*.(cab|exe|dll)     43200    100%    43200   reload-into-ims
refresh_pattern download.microsoft.com/.*.(cab|exe|dll) 43200   100%    43200   reload-into-ims
refresh_pattern au.download.windowsupdate.com/.*.(cab|exe|dll) 43200 100% 43200 reload-into-ims
refresh_pattern symantecliveupdate.com/.*.(zip|exe)    43200    100%    43200   reload-into-ims
refresh_pattern windowsupdate.com/.*.(cab|exe)         43200   100%    43200   reload-into-ims
refresh_pattern download.microsoft.com/.*.(cab|exe)    43200   100%    43200   reload-into-ims
refresh_pattern avast.com/.*.(vpu|vpaa)    43200   100%    43200   reload-into-ims
refresh_pattern .               0       20%     4320
 collapsed_forwarding on
 refresh_stale_hit 10 seconds
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl purge method PURGE
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny CONNECT all
#http_access deny blokniete_url
acl mala_siec src 10.0.0.0/8
acl pppoe src 192.168.10.0/24
http_access allow mala_siec
http_access allow pppoe
http_access allow localhost
http_access deny all
http_reply_access allow all
icp_access allow all
 httpd_suppress_version_string on
visible_hostname proxy.ingram.com.pl
 memory_pools_limit 100 MB
 forwarded_for on
 reload_into_ims on
snmp_port 161
 snmp_access allow all
snmp_incoming_address 192.168.255.2
coredump_dir /var/cache/squid
ie_refresh on

/usr/local/sbin/iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j DNAT --to 192.168.255.2:3128