rendered paste body# TAG_HTTPORT #
# http_port 3128
http_port 172.17.3.1:3128 transparent
# END_TAG #
visible_hostname gw-cyt2
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
refresh_pattern ^ftp: 1440 20% 10080
# refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
coredump_dir /var/spool/squid
cache_effective_user proxy
cache_effective_group proxy
cache_mem 16 MB
maximum_object_size 4096 KB
# establecemos la cache del disco
cache_dir ufs /var/spool/squid 2000 16 256
cache_mgr admin@cyt.monagas.gov.ve
# Identifica el cache padre de donde llamará obtejos almacenados
#cache_peer 172.17.0.1 parent 3128 3130 proxy-only
# Rotacion de Historicos
logfile_rotate 7
# El usuario ftp anonimo #
ftp_user proxy@monagas.gov.ve
# Llevamos un registro de lo que hacen
emulate_httpd_log on
# END_TAG #
acl localhost src 127.0.0.0/8
acl localhostdst dst 127.0.0.0/8
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563 # https, snews
acl SSL_ports port 873 # rsync
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 631 # cups
acl Safe_ports port 873 # rsync
acl Safe_ports port 901 # SWAT
#acl Safe_ports port 1863 # MSN
acl purge method PURGE
acl CONNECT method CONNECT
# Mi Lista de Control de acceso (ACL) #
acl todalared src 172.17.3.0/255.255.255.0
acl redcyt src "/etc/squid/redcyt.txt"
acl permitidos src "/etc/squid/permitidos"
acl castigados src "/etc/squid/castigados.txt"
acl sitiosdenegados url_regex "/etc/squid/sitiosdenegados"
acl listaextensiones urlpath_regex -i "/etc/squid/listaextensiones"
acl messenger req_mime_type -i ^application/x-msn-messenger$
acl messengerrep rep_mime_type -i ^application/x-msn-messenger$
acl msn url_regex -i gateway.dll
#acl msn url_regex -i ADSAdClient31.dll
acl semana time MTWHF
acl matutino time 08:00-11:59
acl mediodia time 12:00-13:59
acl vespertino time 14:00-17:59
acl nocturno time 18:00-23:59
acl madrugada time 00:00-7:59
# REGLAS DE CONTROL DE ACCESO PREDEFINIDAS#
http_access allow localhost
http_access deny manager
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_reply_access allow all
# MIS REGLAS DE CONTROL DE ACCESO #
http_access allow permitidos all
http_access allow redcyt mediodia
http_access deny castigados all
http_access allow redcyt matutino !sitiosdenegados !listaextensiones !msn
http_access allow redcyt vespertino !sitiosdenegados !listaextensiones !msn
http_access allow redcyt nocturno all
http_access allow redcyt madrugada all
http_access deny messenger redcyt !mediodia !permitidos
http_reply_access deny messengerrep redcyt !mediodia !permitidos
http_access deny all
# END_TAG #