marcosg
(usa Red Hat)
Enviado em 06/07/2015 - 09:37h
### PROXY ###
http_port 8080
snmp_port 3401
visible_hostname meuproxy
cache_mem 6 GB
maximum_object_size_in_memory 64 KB
maximum_object_size 2 GB
minimum_object_sie 0 KB
cache_swap_low 90
cache_swap_high 95
#cache_dir aufs /var/squid/cache 4000 16 256
cache_access_log /var/log/squid/access.log
cache_store_log none
error_directory /usr/share/squid/errors/pt-br
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
request_header_max_size 16 KB
memory_replacement_policy heap GDSF
cache_replacement_policy heap LFUDA
memory_pools on
memory_pools_limit 64 MB
fqdncache_size 1024
#acl all src 0.0.0.0/0.0.0.0
acl localhost src 127.0.0.1/32
acl manager proto cache_object
acl purge method PuRGE
acl CONNECT method CONNECT
## Conjunto de ACLs (todos as acls estao dentro do diretorio /etc/squid/list/)
acl SSL_ports port 443
acl Safe_ports port 8888 104 2200
acl sites_bloqueados url_regex -i "/etc/squid/list/sites_bloqueados.txt"
acl dominio_lib dstdomain "/etc/squid/list/dominio_lib.txt"
acl ip_liberado src "/etc/squid/list/ip_liberado.txt"
acl rede_uai src "/etc/squid/list/rede_uai.txt"
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
acl bloqueio_geral url_regex -i "/etc/squid/list/bloqueio_geral.txt"
## Aplicando as ACL's ##
http_access deny bloqueio_geral
http_access allow ip_liberado
http_access allow Safe_ports
http_access deny sites_bloqueados
http_access allow dominio_lib
http_access allow rede_uai
http_access allow localhost
http_access allow SSL_ports
http_access deny all
cache_effective_user squid
cache_effective_group squid
