edisonsousa
(usa Debian)
Enviado em 12/07/2017 - 13:03h
http_port 3128
cache_mem 64 MB
cache_dir ufs /var/spool/squid 100 16 256
cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log
pid_filename /var/run/squid.pid
#error_directory /usr/share/squid/erros/Portuguese
emulate_httpd_log on
visible_hostname firewall
cache_mgr edison@tecad.com.br
#
#Proxy transparente
#******************************
#
#httpd_accel_host virtual
#httpd_accel_port 80
#httpd_accel_with_proxy on
#httpd_accel_uses_host_header on
#
#acl- recomendadas
#
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
#acl to_localhost dst 127.0.0.1/8
acl SSL_ports port 443 563 #https
acl SSL_ports port 873
acl Safe_ports port 80
acl Safe_ports port 21
acl safe_ports port 443 563
acl safe_ports port 70
acl safe_ports port 83
acl safe_ports port 210
acl safe_ports port 1025-65535
acl Safe_ports port 280
acl Safe_ports port 488
acl Safe_ports port 587
acl Safe_ports port 591
acl safe_ports port 777
acl safe_ports port 631
acl Safe_ports port 873
acl Safe_ports port 901
acl Safe_ports port 8081
acl Safe_ports port 8082
acl Safe_ports port 1433
acl purge method PURGE
acl CONNECT method CONNECT
#
#***Define rede interna
#
acl intranet src 192.168.0.0/255.255.255.0
#
#Define PC com privilegio total
#
#acl admin arp "/etc/squid/list/admin.txt"
#acl site dstdomain -i "/etc/squid/list/site.txt"
#
#Define formatos de videos, audio e outros de risco
#
#acl video urlpath_regex .wma$ .asf$ .mov$ .mpg$ .mpeg$ .avi$
#acl audio urlpath_regex .mp3$ .wav$ .mid$
#
#
acl extencoes urlpath_regex -i "/etc/squid/list/extencoes.txt"
http_access deny extencoes
#
acl podetudo src "/etc/squid/list/podetudo.txt"
http_access allow podetudo
#
acl facebook_lib url_regex -i "/etc/squid/list/facebook.txt"
acl adiretoria src "/etc/squid/list/diretoria.txt"
http_access deny facebook_lib !adiretoria
#
acl bol_lib url_regex -i "/etc/squid/list/bol.txt"
acl dp src "/etc/squid/list/dp.txt"
http_access deny bol_lib !dp
#
acl vendas_lib url_regex -i "/etc/squid/list/vendas.txt"
acl vendas src "/etc/squid/list/ipvendas.txt"
http_access allow vendas
http_access deny vendas_lib !vendas !adiretoria
#
acl liberar_site url_regex -i "/etc/squid/list/liberasite.txt"
http_access allow liberar_site
#
acl bloquear_site url_regex -i "/etc/squid/list/site.txt"
http_access deny bloquear_site
#
acl palavrasproibidas dstdom_regex "/etc/squid/list/palavrasproibidas.txt"
http_access deny palavrasproibidas
#
#http_acces Recomendadas
#
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
#
#
#Nega site improprios
#http_access deny site !admin
#
#permite acesso a rede interna
http_access allow localhost
http_access allow intranet
http_access allow all
#
#***Nega tudo que não foi liberado ou negado
#
http_access deny all