#por Adriel Melli
#Gerobyte informatica

http_port 3128 #porta que squid opera

hierarchy_stoplist cgi-bin ?

acl QUERY urlpath_regex cgi-bin ?
no_cache deny QUERY

cache_dir ufs /var/spool/squid 128 16 256
#diretorio do cache de disco do squid. no nosso caso, ufs indica o tipo
#/var/spool/squid, o diretorio de cache, 120 o tamanho de cache em megabytes
#16 numero de diretorios e 256 numeros de subdiretorios
#diretorio pode ter

cache_mem 16mb #tamanho do cache em uso pelo squid
cache_swap_low 90
cache_swap_high 95
maximum_object_size 5096 kb

client_netmask 255.255.255.192 #mascara de rede

authenticate_program /usr/libe/squid/ncsa_auth /etc/squid/spasswd
#programa de autenticação e arquivo de senha

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 10.186.80.1/255.255.255.192
acl ssl_ports port 443 563
acl safe_ports port 21  # ftp
acl safe_ports port 80  # http
acl safe_ports port 70  # gopher
acl safe_ports port 210 # whais
acl safe_ports port 280 # http-mgmt
acl safe_ports port 488 # gss-http
acl safe_ports port 591 # filemaker
acl safe_ports port 771 # multiling http
acl safe_ports port 1025-65535 # unregistered ports
acl CONNECT method CONNECT
acl permitir_rede  src 10.186.80.2
acl proibir_ip src 10.186.80.4  10.186.80.8
acl senha proxy_auth REQUIRED
acl horario time MTWHF 07:00-06:00
acl poribir_sites dstdomain "/etc/squid/sitios" 
acl probir_palavras url_regex -i "/etc/squid/palavras

http_acess allow manager localhost
http_acess deny manager
http_acess deny !saft_ports
http_acess deny CONNECT !SSl_ports
http_acess deny proibir_sites
http_acess deny proibir_palavras
http_acess allow senha
http_acess allow permitir_rede horario
http_acess denny permitir_rede
http_acess deny proibir_ip

icp_acess allow all 

miss_acess allow all

#e-mail do administrador do cache do squid
cache_mgr webmaster adriel@gerobyte.com.br

cache_effective_user root #usuario dono do squid
cache_effective_group root #grup dono do squid

# nome do host mostrado em mensagens de erro
visible_hostname firewall gerobyte.com.br

httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_single_host oof
httpd_accel_with_proxy on
httpd_accel_uses_host_header on