All pastes #935146 Raw Edit
Something

public text v1 · immutable
·published 2008-03-09 11:50 UTC
http_port 3228

auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/password
auth_param basic children 8
auth_param basic realm Username And Password Required For Internet Access
auth_param basic credentialsttl 8 hours

cache_mem 64 MB
maximum_object_size_in_memory 256 KB
maximum_object_size 1024 KB

cache_dir ufs /cache1/ 3000 7 128
cache_dir ufs /cache2/ 3000 7 128
# cache_dir ufs /cache3/ 10000 14 256
# cache_dir ufs /cache4/ 10000 14 256
# cache_dir ufs /cache5/ 10000 14 256
# cache_dir ufs /cache6/ 10000 14 256

cache_mgr brobiwbe@stcable.co.yu
cache_effective_user squid
cache_effective_group squid

#forwarded_for off

acl all src 0.0.0.0/0.0.0.0
##################################################
#  C A P R I O L O  -start
##################################################
#acl csaba-1800256 src 192.168.0.19/255.255.255.255
#acl tamas-1300384 src 192.168.0.15/255.255.255.255
acl secretary src 192.168.0.34/255.255.255.255
acl bogi-750256 src 192.168.0.11/255.255.255.255
acl andrea-1700256 src 192.168.0.12/255.255.255.255
acl service src 192.168.0.40/255.255.255.255
acl mag03 src 192.168.0.37/255.255.255.255
acl peter src 192.168.0.13/255.255.255.255
acl mpbt-1700256 src 192.168.0.28/255.255.255.255
#acl kisker-600256 src 192.168.0.29/255.255.255.255
acl alfred src 192.168.0.30/255.255.255.255
##################################################
#  C A P R I O L O  -end
##################################################


##################################################
# TPU Company #################################### 
acl topolya src 192.168.1.0/255.255.255.0

# akiknek lehet
acl csuzdi1 src 192.168.1.10/255.255.255.255
acl csuzdi2 src 192.168.1.83/255.255.255.255
acl csuzdi3 src 192.168.1.84/255.255.255.255
#acl slavica src 192.168.1.112/255.255.255.255
acl stenli src 192.168.1.124/255.255.255.255
acl maria src 192.168.1.16/255.255.255.255
acl ntibor src 192.168.1.17/255.255.255.255
acl kiskaroly src 192.168.1.89/255.255.255.255
acl imelda src 192.168.6.10/255.255.255.255
acl djurdjica src 192.168.1.150/255.255.255.255
acl dir2 src 192.168.1.15/255.255.255.255
acl antal-home src 192.168.1.38/255.255.255.255
acl laptop-becskei src 192.168.1.40/255.255.255.255
acl bferi src 192.168.1.67/255.255.255.255
acl robi-otthoni src 192.168.1.195/255.255.255.255
acl info-1 src 192.168.1.23/255.255.255.255
acl szabo src 192.168.1.47/255.255.255.255
acl krsto src 192.168.1.144/255.255.255.255
acl timi src 192.168.1.162/255.255.255.255
acl sneska src 192.168.1.11/255.255.255.255
acl ivana src 192.168.1.94/255.255.255.255
acl bferi-home src 192.168.1.165/255.255.255.255
acl nebojsa src 192.168.1.163/255.255.255.255
acl mark src 192.168.1.53/255.255.255.255
acl robi-otthoni-2 src 192.168.1.196/255.255.255.255

acl bridge src 192.168.1.200/255.255.255.255
acl pdc src 192.168.1.104/255.255.255.255
acl bdc src 192.168.3.200/255.255.255.255
acl bdc2 src 192.168.1.109/255.255.255.255
acl bdc3 src 192.168.3.201/255.255.255.255
acl bdc4 src 192.168.1.61/255.255.255.255
acl bdc5 src 192.168.1.129/255.255.255.255
acl bdc6 src 192.168.6.200/255.255.255.255
acl bdc7 src 192.168.6.201/255.255.255.255

# TPU Company  szabadka ############################

acl szabadka src 192.168.3.0/255.255.255.0

# TPU Company becse ################################

acl becse src 192.168.6.0/255.255.255.0
####################################################

# Krivaja Hotel ####################################

acl restoran src 192.168.5.17/255.255.255.255
acl server src 192.168.5.18/255.255.255.255
acl aperitiv src 192.168.5.19/255.255.255.255
acl kuglana src 192.168.5.20/255.255.255.255
####################################################

acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl Dangerous_ports port 7 9 19 22 23 25 53 109 110 119
acl skype url_regex ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+
acl CONNECT method CONNECT
acl deny_ext urlpath_regex -i "/etc/squid/deny_ext"
acl tiltot_lapok dstdom_regex -i "/etc/squid/deny_webpages"

acl nem_cachelunk dstdomain .google.com
no_cache deny nem_cachelunk

acl nem_cachelunk2 dstdomain .deltabanka.co.yu
no_cache deny nem_cachelunk2

acl nem_cachelunk3 dstdom_regex (^|\.)datalab\.
no_cache deny nem_cachelunk3

#acl capriolobike dstdom_regex (^|\.)capriolo\.

acl capriolo dstdom_regex (^|\.)capriolo\.
acl microsoft_update dstdomain .microsoft.com
acl microsoft_update2 dstdomain .download.windowsupdate.com
acl msn dstdomain .passport.com
acl msn2 dstdomain .hotmail.com
acl helpserver dstdomain .helpserver.vir
acl datalab dstdom_regex (^|\.)datalab\.
acl spyware dstdom_regex (^|\.)spywareblaster\.
acl nbs dstdom_regex (^|\.)nbs.yu
acl apr dstdom_regex (^|\.)apr.sr.gov.yu
acl virusirto dstdom_regex (^|\.)eset\.
acl europos dstdom_regex (^|\.)europos\.
acl viplc dstdom_regex (^|\.)viplc-backatopola\.
acl spybot dstdom_regex (^|\.)safer-networking\.
acl spybot2 dstdom_regex (^|\.)see-cure.net
acl spybot3 dstdom_regex (^|\.)spybotupdates.com

acl FTP proto FTP
always_direct allow FTP

acl deltabank dstdomain .deltabanka.co.yu

acl authentic proxy_auth internet
acl masterUser proxy_auth master

http_access deny Dangerous_ports


http_access allow datalab
http_access allow spyware
http_access allow helpserver
http_access allow capriolo
http_access allow microsoft_update
http_access allow microsoft_update2
http_access allow msn
http_access allow msn2
http_access allow deltabank
http_access allow nbs
http_access allow apr
http_access allow virusirto
http_access allow europos
http_access allow viplc
http_access allow spybot
http_access allow spybot2
http_access allow spybot3

# Skype letiltva globalissan proxy keresztul
http_access deny connect skype

http_access allow csuzdi3

# Weblapok letiltva TPU Company proxy-n keresztul
http_access deny tiltot_lapok topolya
http_access deny tiltot_lapok becse
http_access deny tiltot_lapok szabadka
deny_info ERR_BLOKIRANO topolya
deny_info ERR_BLOKIRANO becse
deny_info ERR_BLOKIRANO szabadka



# TPU Company topolya ############
http_access allow csuzdi1
http_access allow csuzdi2
http_access allow csuzdi3
#http_access allow slavica
http_access allow stenli
http_access allow maria
http_access allow ntibor
http_access allow kiskaroly
http_access allow djurdjica
http_access allow dir2
http_access allow antal-home
http_access allow laptop-becskei
http_access allow bferi
http_access allow robi-otthoni
http_access allow info-1
http_access allow szabo
http_access allow krsto
http_access allow timi
http_access allow sneska
http_access allow ivana
http_access allow bferi-home
http_access allow nebojsa
http_access allow mark
http_access allow robi-otthoni-2

http_access allow bridge
http_access allow pdc
http_access allow bdc
http_access allow bdc2
http_access allow bdc3
http_access allow bdc4
http_access allow bdc5
http_access allow bdc6
http_access allow bdc7

http_access deny topolya
deny_info ERR_INTERNET topolya

# TPU Company szabadka ###########
http_access deny szabadka
deny_info ERR_INTERNET szabadka

# TPU Company becse ##############
http_access allow imelda

http_access deny becse
deny_info ERR_INTERNET becse

# Krivaja Hotel #################

http_access deny restoran
deny_info ERR_INTERNET restoran

http_access deny server
deny_info ERR_INTERNET server

http_access deny aperitiv
deny_info ERR_INTERNET aperitiv

http_access deny kuglana
deny_info ERR_INTERNET kuglana

http_access allow masterUser

######################################
# C A P R I O L O -start
######################################
#http_access deny csaba-1800256
#http_access deny tamas-1300384
http_access deny secretary
http_access deny bogi-750256
http_access deny andrea-1700256
http_access deny service
http_access deny mag03
http_access deny peter
#http_access deny mpbt-1700256
#http_access deny kisker-600256
http_access deny alfred

#deny_info ERR_INTERNET csaba-1800256
#deny_info ERR_INTERNET tamas-1300384
deny_info ERR_INTERNET secretary
deny_info ERR_INTERNET bogi-750256
deny_info ERR_INTERNET andrea-1700256
deny_info ERR_INTERNET service
deny_info ERR_INTERNET mag03
deny_info ERR_INTERNET peter
#deny_info ERR_INTERNET mpbt-1700256
#deny_info ERR_INTERNET kisker-600256
deny_info ERR_INTERNET alfred
######################################
# C A P R I O L O -end
######################################

http_access deny deny_ext

http_access allow authentic
http_access deny all

redirector_access deny masterUser
redirect_program /usr/bin/squidguard
redirect_children 8