All pastes #523062 Raw Edit

Miscellany

public text v1 · immutable
#523062 ·published 2007-05-30 17:29 UTC
rendered paste body
http_port 3128 transparent
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY

acl apache rep_header Server ^Apache
broken_vary_encoding allow apache

cache_mem 64 MB
maximum_object_size_in_memory 64 KB
cache_swap_low 90
cache_swap_high 95
maximum_object_size 64 MB
maximum_object_size 0 KB
cache_dir ufs /etc/squid/var/cache 100 64 64

access_log /etc/squid/var/logs/access.log
#cache_log /etc/squid/var/logs/cache.log
#cache_store_log /etc/squid/var/logs/store.log

refresh_pattern ^ftp:		1440	20%	10080
refresh_pattern ^gopher:	1440	0%	1440
refresh_pattern .		0	20%	4320

acl all src 192.168.0.0/255.255.255.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl rede src 192.168.0.0/24
acl SSL_ports port 443
acl Safe_ports port 80		# http
acl Safe_ports port 21		# ftp
acl Safe_ports port 443		# https
acl Safe_ports port 70		# gopher
acl Safe_ports port 210		# wais
acl Safe_ports port 1025-65535	# unregistered ports
acl Safe_ports port 280		# http-mgmt
acl Safe_ports port 488		# gss-http
acl Safe_ports port 591		# filemaker
acl Safe_ports port 777		# multiling http
acl CONNECT method CONNECT

acl diretoria src 192.168.0.6 192.168.0.7 192.168.0.50 192.168.0.55
acl win url_regex -i windowsupdate update.microsoft.com
acl blacklist url_regex -i "/etc/squid/bloqueados/block"
acl download urlpath_regex \.exe \.zip \.arj \.tar.gz \.tgz \.rpm \.mp3 \.iso \.wmv \.wma \.mp4 \.bat \.avi
acl relatorio url_regex -i 192.168.0.100 # ip do servidor apache
acl liberado src 192.168.0.1 #maquina que tera acesso no apache

http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports

http_access allow diretoria
http_access allow all win
http_access allow rede !blacklist !downloads
http_access deny blacklist
http_access deny download
http_access allow relatorio liberado # permite o acesso apenas à maquina especificada
http_access deny relatorio # nega acesso para toda rede
http_access deny all
http_reply_access allow all
icp_access allow all

error_directory /etc/squid/share/errors/Portuguese
logfile_rotate 10
coredump_dir /etc/squid/var/cache