Advertisement
Guest User

squid.conf

a guest
Apr 9th, 2013
298
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 13.16 KB | None | 0 0
  1. http_port 3128 transparent
  2. server_http11 on
  3.  
  4. pid_filename /var/run/squid.pid
  5. coredump_dir /var/spool/squid/
  6. error_directory /usr/share/squid/errors/English
  7. icon_directory /usr/share/squid/icons
  8. mime_table /usr/share/squid/mime.conf
  9.  
  10. cache_mem 8 MB
  11. maximum_object_size_in_memory 512 bytes
  12. memory_replacement_policy heap GDSF
  13. cache_replacement_policy heap LFUDA
  14.  
  15. minimum_object_size 0 KB
  16. maximum_object_size 1024 MB
  17. cache_swap_low 97
  18. cache_swap_high 99
  19.  
  20. cache_dir aufs /cache1 50000 38 256
  21. cache_dir aufs /cache2 50000 38 256
  22. cache_dir aufs /cache3 50000 38 256
  23. cache_dir aufs /cache4 50000 38 256
  24. cache_dir aufs /cache5 50000 38 256
  25. cache_dir aufs /cache6 50000 38 256
  26. cache_dir aufs /cache7 50000 38 256
  27. cache_dir aufs /cache8 50000 38 256
  28.  
  29. access_log daemon:/var/log/squid/access.log squid
  30. cache_log /var/log/squid/cache.log
  31. cache_store_log none
  32. cache_peer_access httpsAccel allow all
  33. store_dir_select_algorithm round-robin
  34. logfile_daemon /usr/lib/squid/logfile-daemon
  35. logfile_rotate 1
  36.  
  37. acl all src all
  38. acl manager proto cache_object
  39. acl localhost src 127.0.0.1/32
  40. acl to_localhost dst 127.0.0.0/8
  41. acl localnet src 192.168.7.0/24
  42.  
  43. acl SSL_ports port 443
  44. acl Safe_ports port 80 # http
  45. acl Safe_ports port 21 # ftp
  46. acl Safe_ports port 443 # https
  47. acl Safe_ports port 70 # gopher
  48. acl Safe_ports port 210 # wais
  49. acl Safe_ports port 1025-65535 # unregistered ports
  50. acl Safe_ports port 280 # http-mgmt
  51. acl Safe_ports port 488 # gss-http
  52. acl Safe_ports port 591 # filemaker
  53. acl Safe_ports port 777 # multiling http
  54. acl CONNECT method CONNECT
  55. acl purge method PURGE
  56. acl snmppublic snmp_community public
  57.  
  58. http_access allow manager localhost
  59. http_access deny manager
  60. http_access allow purge localhost
  61. http_access deny !Safe_ports
  62. http_access deny CONNECT !SSL_ports
  63.  
  64. http_access allow localnet
  65. http_access allow all
  66. http_access deny all
  67.  
  68. icp_access allow localnet
  69. icp_access deny all
  70. icp_port 0
  71.  
  72. buffered_logs on
  73.  
  74. acl shoutcast rep_header X-HTTP09-First-Line ^ICY.[0-9]
  75. upgrade_http0.9 deny shoutcast
  76.  
  77. acl apache rep_header Server ^Apache
  78. broken_vary_encoding allow apache
  79.  
  80. forwarded_for off
  81. header_access From deny all
  82. header_access Server deny all
  83. header_access Link deny all
  84. header_access Via deny all
  85. header_access X-Forwarded-For deny all
  86. httpd_suppress_version_string on
  87.  
  88. acl yutub url_regex -i .*youtube\.com\/.*$
  89. acl yutub url_regex -i .*youtu\.be\/.*$
  90. logformat squid1 %{Referer}>h %ru %Ss/%03Hs %<st
  91. access_log /var/log/squid/access.log squid1 yutub
  92. acl redirec urlpath_regex -i .*&redirect_counter=1&cms_redirect=yes
  93. acl redirec urlpath_regex -i .*&ir=1&rr=12
  94. cache deny redirec
  95. acl reddeny url_regex -i c\.youtube\.com\/videoplayback.*redirect_counter=1.*$
  96. acl reddeny url_regex -i c\.youtube\.com\/videoplayback.*cms_redirect=yes.*$
  97. storeurl_access deny reddeny
  98.  
  99. acl store_rewrite_list urlpath_regex \/(get_video|video\?v|videoplayback\?id|videoplayback.*id)
  100. acl store_rewrite_list urlpath_regex \/(get_video\?|videodownload\?|videoplayback.*id|watch\?)
  101. acl store_rewrite_list urlpath_regex \.(3gp|mp(3|4)|flv|(m|f)4v|on2|fid|avi|mov|wm(a|v)|(mp(e?g|a|e|1|2))|mk(a|v)|jp(e?g|e|2)|gif|png|tiff?|bmp|tga|svg|ico|swf|exe|ms(i|u|p)|cab|psf|mar|bin|z(ip|[0-9]{2})|r(ar|[0-9]{2})|7z)\?
  102. acl store_rewrite_list_domain url_regex ^http:\/\/(([a-z-]+[0-9-]+)|([0-9-]+[a-z-]+))\.[a-z0-9-]*\.[a-z]{2,4}
  103. acl store_rewrite_list_domain url_regex ^http:\/\/([a-zA-Z-]+[0-9-]+)\.[A-Za-z]*\.[A-Za-z]*
  104. acl store_rewrite_list_domain url_regex (([a-z]{1,2}[0-9]{1,3})|([0-9]{1,3}[a-z]{1,2}))\.[a-z]*[0-9]?\.[a-z]{3}
  105. acl store_rewrite_list_path urlpath_regex \.(3gp|mp(3|4)|flv|(m|f)4v|on2|fid|avi|mov|wm(a|v)|(mp(e?g|a|e|1|2))|mk(a|v)|jp(e?g|e|2)|gif|png|tiff?|bmp|tga|svg|ico|swf|exe|ms(i|u|p)|cab|psf|mar|bin|z(ip|[0-9]{2})|r(ar|[0-9]{2})|7z)$
  106. acl store_rewrite_list_domain_CDN url_regex (cbk|mt|khm|mlt|tbn)[0-9]?.google\.co(m|\.uk|\.id)
  107. acl store_rewrite_list_domain_CDN url_regex photos-[a-z].ak.fbcdn.net
  108. acl store_rewrite_list_domain_CDN url_regex ^http:\/\/([a-z])[0-9]?(\.gstatic\.com|\.wikimapia\.org)
  109. acl store_rewrite_list_domain_CDN url_regex ^http:\/\/[.a-z0-9]*\.photobucket\.com.*\.[a-z]{3}$
  110. #acl store_rewrite_list_domain_CDN url_regex ^http:\/\/.*speedtest.*
  111. acl store_rewrite_list_domain_CDN url_regex streamate.doublepimp.com.*\.js\? \.doubleclick\.net.* yieldmanager cpxinteractive quantserve\.com
  112. acl speedtest_allow_url url_regex -i \.speedtest\.net\/ speedtest
  113. acl speedtest_allow_url url_regex ^http:\/\/speedtest\.*
  114. acl speedtest_allow_dom dstdomain .speedtest.net
  115.  
  116. acl dontrewrite url_regex (get_video|video\?v=|videoplayback\?id|videoplayback.*id).*begin\=[1-9][0-9]* \.php\? \.asp\? \.aspx\? threadless.*\.jpg\?r=
  117. acl getmethod method GET
  118.  
  119. storeurl_access deny dontrewrite
  120. storeurl_access deny !getmethod
  121.  
  122. storeurl_access allow store_rewrite_list_domain_CDN
  123. storeurl_access allow store_rewrite_list
  124. storeurl_access allow store_rewrite_list_domain store_rewrite_list_path
  125. storeurl_access allow speedtest_allow_url
  126. storeurl_access allow speedtest_allow_dom
  127. storeurl_access deny all
  128. storeurl_rewrite_program /etc/squid/storeurl.pl
  129. storeurl_rewrite_children 1
  130. storeurl_rewrite_concurrency 99
  131.  
  132. acl DENYCACHE urlpath_regex \.(ini|ui|lst|inf|pak|ver|patch|md5|cfg|lst|list|rsc|log|conf|dbd|db)$
  133. acl DENYCACHE urlpath_regex (notice.html|afs.dat|dat.asp|patchinfo.xml|version.list|iepngfix.htc|updates.txt|patchlist.txt)
  134. acl DENYCACHE urlpath_regex (pointblank.css|login_form.css|form.css)$
  135. acl DENYCACHE urlpath_regex (Loader|gamenotice|sources|captcha|notice|reset)
  136. cache deny DENYCACHE
  137.  
  138. refresh_pattern \.facebook\.com.*\.(jp(e?g|e|2)|gif|png|tiff?|bmp|swf|mp(4|3)) 43800 99999% 43200 override-expire ignore-reload ignore-no-cache ignore-private ignore-no-store ignore-must-revalidate store-stale
  139. refresh_pattern \.fbcdn\.net.*\.(jp(e?g|e|2)|gif|png|tiff?|bmp|swf|mp(4|3)) 43800 99999% 43800 override-expire ignore-reload ignore-no-cache ignore-private ignore-no-store ignore-must-revalidate store-stale negative-ttl=0
  140. refresh_pattern ^.*safebrowsing.*google 2629742 999999% 2629742 override-expire ignore-reload ignore-no-cache ignore-no-store ignore-private ignore-auth ignore-must-revalidate negative-ttl=10080 store-stale
  141.  
  142. refresh_pattern ^.*(streamate.doublepimp.com.*\.js\?|utm\.gif|ads\?|rmxads\.com|ad\.z5x\.net|bh\.contextweb\.com|bstats\.adbrite\.com|a1\.interclick\.com|ad\.trafficmp\.com|ads\.cubics\.com|ad\.xtendmedia\.com|\.googlesyndication\.com|advertising\.com|yieldmanager|game-advertising\.com|pixel\.quantserve\.com|adperium\.com|doubleclick\.net|adserving\.cpxinteractive\.com|syndication\.com|media.fastclick.net).* 2629742 20% 2629742 ignore-no-cache ignore-no-store ignore-private override-expire ignore-reload ignore-auth ignore-must-revalidate store-stale negative-ttl=40320 max-stale=1440
  143.  
  144. refresh_pattern (get_video\?|videoplayback\?|videodownload\?|watch\?\.flv?|.vid\?) 2629742 99999999% 2629742 override-expire ignore-reload ignore-must-revalidate ignore-no-cache ignore-no-store ignore-private store-stale negative-ttl=0
  145. refresh_pattern (\.swf\?|\.avi\?|\.mov\?|\.wm(a|v)\?|\.3gp\?|\.mp(4|3)\?|\.rm\?|\.ram\?|\.m4v\?|\.on2\?) 43200 999999% 2629742 override-expire ignore-reload ignore-must-revalidate ignore-no-cache ignore-no-store ignore-private store-stale negative-ttl=0
  146. refresh_pattern \.(ico|video-stats) 2629742 999999% 2629742 override-expire ignore-reload ignore-no-cache ignore-no-store ignore-private ignore-auth override-lastmod ignore-must-revalidate negative-ttl=10080 store-stale
  147.  
  148. refresh_pattern (photobucket|pbsrc|flickr|yimg|ytimg|twimg|gravatar)\.com.*\.(jp(e?g|e|2)|gif|png|tiff?|bmp|swf|mp(4|3)) 2629742 999999% 2629742 override-expire ignore-reload ignore-no-cache ignore-private ignore-no-store ignore-must-revalidate store-stale
  149. refresh_pattern ^http:\/\/images|image|img|pics|openx|thumbs[0-9]\. 2629742 999999% 2629742 override-expire ignore-reload ignore-no-cache ignore-private ignore-no-store ignore-must-revalidate store-stale
  150. refresh_pattern (zynga|ninjasaga|mafiawars|cityville|farmville|crowdstar|spilcdn|agame|popcap)\.com/.* 2629742 999999% 2629742 override-expire ignore-reload ignore-no-cache ignore-private ignore-no-store ignore-must-revalidate store-stale
  151. refresh_pattern \.(akamaihd|edgecastcdn|spilcdn|zgncdn|(tw|y|yt)img)\.com.*\.(jp(e?g|e|2)|gif|png|swf|mp(3|4)) 43200 99999% 43200 override-expire override-lastmod ignore-reload ignore-no-cache ignore-private ignore-must-revalidate store-stale
  152. refresh_pattern \.gstatic\.com/images\? 43200 99999% 43200 override-expire override-lastmod ignore-reload ignore-no-cache ignore-private ignore-must-revalidate store-stale
  153. refresh_pattern (gstatic|diggstatic)\.com/.* 2629742 999999% 2629742 override-expire ignore-reload ignore-no-cache ignore-private ignore-no-store ignore-must-revalidate store-stale
  154. refresh_pattern ^http://((cbk|mt|khm|mlt|tbn)[0-9]?)\.google\.co(m|\.uk|\.id) 43200 999999% 43200 override-expire override-lastmod ignore-reload ignore-no-cache ignore-private ignore-auth ignore-must-revalidate ignore-no-store negative-ttl=10080 store-stale
  155. refresh_pattern vid\.akm\.dailymotion\.com.*\.on2\? 2629742 999999% 2629742 ignore-no-cache override-expire override-lastmod store-stale
  156. refresh_pattern \.speedtest/.* 43200 99999% 432000 override-expire ignore-reload ignore-no-cache ignore-no-store ignore-must-revalidate store-stale
  157. refresh_pattern galleries\.video(\?|sz) 2629742 999999% 2629742 override-expire ignore-reload ignore-no-cache ignore-must-revalidate ignore-private store-stale
  158. refresh_pattern \.wikimapia\.org\/? 43200 99999% 43200 override-expire override-lastmod ignore-reload ignore-no-cache ignore-private ignore-must-revalidate store-stale
  159. refresh_pattern \.(rackcdn|spilcdn|zgncdn)\.com.*\.(jp(e?g|e|2)|gif|png|swf|mp(3|4)) 43200 9999% 43200 override-expire ignore-reload ignore-no-cache store-stale
  160. refresh_pattern code.googlec.com.*(svn|download) 0 50% 1440 reload-into-ims
  161.  
  162. refresh_pattern -i \.(sc-|dl-|ex-|mh-|dll|da-|iop) 0 5% 60 reload-into-ims
  163. refresh_pattern -i \.(mst|Xtp)$ 0 50% 1440 reload-into-ims
  164. refresh_pattern -i (main.exe|update.exe|grandchase.exe|FSLauncher.exe|FreeStyle_Setup.exe|grandchase.exe|autoupgrade.exe)$ 0 50% 1440 reload-into-ims
  165. refresh_pattern -i (UpdaterModifier.exe|FreeStyle.exe|PBLauncher.exe|update.exe|NewLauncher.exe|NewAvalon.exe|hon.exe.zip|cabal.exe)$ 0 50% 1440 reload-into-ims
  166. refresh_pattern -i (PointBlank.exe.zip|HSUpdate.exe.zip|PBConfig.exe.zip) 0 50% 1440 reload-into-ims
  167. refresh_pattern -i (wks_avira-win32-en-pecl.info.gz|wks_avira10-win32-en-pecl.info.gz)$ 0 50% 1440 reload-into-ims
  168. refresh_pattern -i (setup.exe.gz|avscan.exe.gz|avguard.exe.gz|AvaClient.exe) 0 50% 1440 reload-into-ims
  169. refresh_pattern -i (livescore.com|goal.com|bobet) 0 50% 60 reload-into-ims
  170.  
  171. refresh_pattern avast.com.*\.vpx 40320 90% 161280 ignore-reload ignore-no-cache ignore-no-store store-stale ignore-must-revalidate reload-into-ims
  172. refresh_pattern (avgate|avira).*\.(idx|gz)$ 1440 90% 1440 ignore-reload ignore-no-cache ignore-no-store store-stale ignore-must-revalidate
  173. refresh_pattern kaspersky.*\.avc$ 2629742 999999% 2629742 ignore-reload store-stale
  174. refresh_pattern kaspersky 1440 50% 161280 ignore-no-cache store-stale
  175.  
  176. refresh_pattern \.(jp(e?g|e|2)|tiff?|bmp|gif|png) 2629742 999999% 2629742 ignore-no-cache ignore-no-store reload-into-ims override-expire ignore-private ignore-must-revalidate store-stale
  177. refresh_pattern \.(z(ip|[0-9]{2})|r(ar|[0-9]{2})|jar|bz2|gz|tar|rpm|vpu) 2629742 999999% 2629742 override-expire reload-into-ims ignore-no-cache ignore-private ignore-must-revalidate ignore-no-store store-stale
  178. refresh_pattern \.(mp3|wav|og(g|a)|flac|midi?|rm|aac|wma|mka|ape) 2629742 999999% 2629742 override-expire reload-into-ims ignore-reload ignore-no-cache ignore-private ignore-must-revalidate ignore-no-store store-stale
  179. refresh_pattern \.(exe|msi|msp|msu|dmg|bin|xpi|iso|swf|mar|psf|cab) 2629742 999999% 2629742 override-expire reload-into-ims ignore-reload ignore-no-cache ignore-private ignore-must-revalidate ignore-no-store store-stale
  180. refresh_pattern \.(mpeg|ra?m|avi|mp(g|e|4)|mov|divx|asf|wmv|m\dv|rv|vob|asx|ogm|flv|3gp|on2) 2629742 999999% 2629742 override-expire override-lastmod ignore-reload ignore-no-cache ignore-private ignore-auth ignore-must-revalidate ignore-no-store negative-ttl=0 store-stale
  181. refresh_pattern -i (cgi-bin) 0 0% 0
  182. refresh_pattern \.(php|jsp|cgi|asx|asp|aspx)\? 0 0% 0
  183. refresh_pattern ^ftp: 40320 20% 40320 override-expire reload-into-ims store-stale
  184. refresh_pattern ^gopher: 1440 0% 1440
  185. refresh_pattern . 0 50% 40320 store-stale
  186.  
  187. shutdown_lifetime 10 seconds
  188.  
  189. snmp_port 3401
  190. snmp_access allow snmppublic all
  191. dns_timeout 1 minutes
  192.  
  193. fqdncache_size 16384
  194. ipcache_size 16384
  195. ipcache_low 97
  196. ipcache_high 99
  197. log_fqdn off
  198. memory_pools off
  199.  
  200. maximum_single_addr_tries 2
  201. retry_on_error on
  202.  
  203. icp_hit_stale on
  204.  
  205. strip_query_terms on
  206.  
  207. query_icmp on
  208. reload_into_ims on
  209. emulate_httpd_log off
  210. negative_ttl 0 seconds
  211. pipeline_prefetch off
  212. vary_ignore_expire on
  213. half_closed_clients off
  214. high_page_fault_warning 2
  215. nonhierarchical_direct on
  216. prefer_direct off
  217. cache_mgr Alijohn86@yahoo.com
  218. cache_effective_user proxy
  219. cache_effective_group proxy
  220. visible_hostname Grace.Net
  221. unique_hostname Grace.Net
  222. cachemgr_passwd none all
  223. client_db on
  224. max_filedescriptors 8192
  225. zph_mode tos
  226. zph_local 0x30
  227. zph_parent 0
  228. zph_option 136
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement