rendered paste bodyalpha# egrep -v '#|^ *$' squid.conf
http_port 3128 transparent
https_port 127.0.0.1:3129 cert=/usr/local/etc/squid/key.crt key=/usr/local/etc/squid/key.key
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
cache_mem 8 MB
maximum_object_size 4096 KB
cache_dir ufs /usr/local/squid/cache 4000 16 256
access_log /usr/local/squid/logs/access.log squid
cache_log /usr/local/squid/logs/cache.log
redirect_program /usr/local/bin/squidGuard
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
acl RedclaseC src 192.168.1.1-192.168.1.127/32
acl msn_url url_regex -i gateway.dll
acl msnmessenger req_mime_type ^application/x-msn-messenger$
acl msn_port port 1863
acl msn_method method POST
http_access deny msnmessenger
http_access deny msn_method msn_url
http_access deny msn_port
http_access deny CONNECT msn_port
acl MSN_Messenger browser ^Mozilla.compatible;.MSN Messenger
acl usan_MSN_Messenger src 192.168.1.120
http_access deny MSN_Messenger !usan_MSN_Messenger
acl msie40 browser ^Mozilla/4\.0.*MSIE.4\.0
http_access deny msie40
acl msie45 browser ^Mozilla/4\.0.*MSIE.4\.5
http_access deny msie45
acl msie50 browser ^Mozilla/4\.0.*MSIE.5\.0
http_access deny msie50
acl msie55 browser ^Mozilla/4\.0.*MSIE.5\.5
http_access deny msie55
acl msie60 browser ^Mozilla/4\.0.*MSIE.6\.0
http_access deny msie60
acl msie61 browser ^Mozilla/4\.0.*MSIE.6\.1
http_access deny msie61
acl stream_ext url_regex -i \.(ra?m|mpe?g?|pls|ivf|asf|asx|avi|wax|wmv|wvx|wmp|wmx|m1v|mp2|mp3|mpa|mpe|mpv2)($|\?)
acl streamers src 192.168.1.120 192.168.1.121 192.168.1.122 192.168.1.123
acl peligrosos url_regex -i \.exe$ \.scr$ \.reg$ \.vbs$ \.bat$ \.lnk$ \.pif$
acl conflictivos url_regex -i \.exe$ \.iso$
acl abren_conflictivos src 192.168.1.120 192.168.1.121
acl bravo src 192.168.1.250
acl nexio src 192.168.1.240
acl morning time MTWHFA 05:30-12:00
acl lunch time MTWHFA 12:00-14:00
acl evening time MTWHF 14:00-21:00
http_access allow stream_ext streamers
http_access deny stream_ext
http_access allow conflictivos abren_conflictivos
http_access deny peligrosos
http_access deny conflictivos
http_access allow bravo morning
http_access allow bravo lunch
http_access allow bravo evening
http_access allow localhost
http_access allow RedclaseC
http_access deny all
http_reply_access allow all
icp_access allow all
coredump_dir /usr/local/squid/cache