Attachment 5766 Details for Bug 14904 – A minimalistic internal squid.conf based on Mageia5, only.

A minimalistic internal squid.conf based on Mageia5, only.

squid.conf (text/plain), 1.28 KB, created by Bjarne Thomsen on 2014-12-29 10:20:30 CET

(hide)

Description:

Filename:

MIME Type:

Creator: Bjarne Thomsen

Created: 2014-12-29 10:20:30 CET

Size: 1.28 KB

patch

obsolete

># Test by "squid -k pars"
>acl localnet src 10.0.0.0/8
>acl localnet src 172.16.0.0/12
>acl localnet src 192.168.0.0/16
>
># acl mynetwork src $intf->{NETWORK}/$prefix
>acl mynetwork src 192.168.15.0/24
>
>acl SSL_ports port 443
>acl Safe_ports port 80		# http
>acl Safe_ports port 21		# ftp
>acl Safe_ports port 443		# https
>acl Safe_ports port 70		# gopher
>acl Safe_ports port 210		# wais
>acl Safe_ports port 1025-65535	# unregistered ports
>acl Safe_ports port 280		# http-mgmt
>acl Safe_ports port 488		# gss-http
>acl Safe_ports port 591		# filemaker
>acl Safe_ports port 777		# multiling http
>acl CONNECT method CONNECT
>http_access deny !Safe_ports
>http_access deny CONNECT !SSL_ports
>http_access allow localhost manager
>http_access deny manager
>http_access allow mynetwork
>http_access allow localnet
>http_access allow localhost
>
># https proxy
># http_port $squid_conf->{http_port}[0] intercept
>http_port 3128 intercept
># forward proxy
>http_port 8080
>
># cache_dir ufs /var/spool/squid $squid_conf->{cache_size}[1] 16 256
>cache_dir ufs /var/spool/squid 100 16 256
>
>coredump_dir /var/spool/squid
>refresh_pattern ^ftp:		1440	20%	10080
>refresh_pattern ^gopher:	1440	0%	1440
>refresh_pattern -i (/cgi-bin/|\?) 0	0%	0
>refresh_pattern .		0	20%	4320
>shutdown_lifetime 5 seconds
>cache_effective_user squid
>cache_effective_group squid

# Test by "squid -k pars"
acl localnet src 10.0.0.0/8
acl localnet src 172.16.0.0/12
acl localnet src 192.168.0.0/16

# acl mynetwork src $intf->{NETWORK}/$prefix
acl mynetwork src 192.168.15.0/24

acl SSL_ports port 443
acl Safe_ports port 80		# http
acl Safe_ports port 21		# ftp
acl Safe_ports port 443		# https
acl Safe_ports port 70		# gopher
acl Safe_ports port 210		# wais
acl Safe_ports port 1025-65535	# unregistered ports
acl Safe_ports port 280		# http-mgmt
acl Safe_ports port 488		# gss-http
acl Safe_ports port 591		# filemaker
acl Safe_ports port 777		# multiling http
acl CONNECT method CONNECT
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost manager
http_access deny manager
http_access allow mynetwork
http_access allow localnet
http_access allow localhost

# https proxy
# http_port $squid_conf->{http_port}[0] intercept
http_port 3128 intercept
# forward proxy
http_port 8080

# cache_dir ufs /var/spool/squid $squid_conf->{cache_size}[1] 16 256
cache_dir ufs /var/spool/squid 100 16 256

coredump_dir /var/spool/squid
refresh_pattern ^ftp:		1440	20%	10080
refresh_pattern ^gopher:	1440	0%	1440
refresh_pattern -i (/cgi-bin/|\?) 0	0%	0
refresh_pattern .		0	20%	4320
shutdown_lifetime 5 seconds
cache_effective_user squid
cache_effective_group squid

Actions: View

Attachments on bug 14904: 5765 | 5766 | 5772