leandrobrunoo
(usa Ubuntu)
Enviado em 08/11/2010 - 15:46h
# porta padrao do squid
http_port 3128 transparent
# nome do servidor na rede
visible_hostname Servidor_bjcia
# Email do administrador
cache_mgr leandrobruno@msn.com
# Apresentar erro em portugues
error_directory /usr/share/squid/errors/Portuguese
cache_mem 100 MB
maximum_object_size_in_memory 1024 KB
maximum_object_size 512 MB
minimum_object_size 0 KB
cache_swap_low 95
cache_swap_high 98
cache_dir ufs /var/spool/squid 3000 16 256
cache_access_log /var/log/squid/access.log
refresh_pattern ^ftp: 15 20% 2280
refresh_pattern ^gopher: 15 0% 2280
refresh_pattern . 15 20% 2280
# Cache do windows update obs: windows_xp
refresh_pattern windowsupdate.com/.*\.(cab|exe|dll|msi) 10080 100% 43200 reload-into-ims
refresh_pattern download.microsoft.com/.*\.(cab|exe|dll|msi) 10080 100% 43200 reload-into-ims
refresh_pattern
www.microsoft.com/.*\.(cab|exe|dll|msi) 10080 100% 43200 reload-into-ims
refresh_pattern au.download.windowsupdate.com/.*\.(cab|exe|dll|msi) 4320 100% 43200 reload-into-ims
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 21 80 443 563 70 210 280 488 59 777 901 1025-65535
acl purge method PURGE
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
acl liberasites dstdomain "/etc/squid/sites_liberados"
http_access allow liberasites
# ips livres de regras
acl ips_livres src "/etc/squid/ips_livres"
http_access allow ips_livres
# Bloqueio por extecao ex. exe, avi etc ...
acl download url_regex -i "/etc/squid/download"
http_access deny download
# Bloqueio de palavras
acl palavrasproibidas dstdom_regex "/etc/squid/palavrasproibidas"
http_access deny palavrasproibidas
deny_info
http://www.google.com.br palavrasproibidas.
# limite do tamanho do arquivo pra download
acl html rep_mime_type text/html
reply_body_max_size 0 allow html
reply_body_max_size 10485760 allow all
# ips cadastrado para ter acesso.
acl redelocal src "/etc/squid/redelocal"
# limitando a banda
delay_pools 1
delay_class 1 2
delay_parameters 1 38400/38400 16384/16384
delay_access 1 allow redelocal
http_access allow localhost
http_access allow redelocal
http_access deny all