squid.conf

acl all src all
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32
acl purge method PURGE
acl localnet src 192.168.2.0/24
acl SSL_ports port 443
acl SSL_ports port 80
acl Safe_ports port 80
acl Safe_ports port 21
acl Safe_ports port 443
acl Safe_ports port 70
acl Safe_ports port 210
acl Safe_ports port 1024-65535
acl Safe_ports port 280
acl Safe_ports port 488
acl Safe_ports port 591
acl Safe_ports port 777
acl CONNECT method CONNECT
acl rules dstdomain -i "/etc/squid/rules"
acl shoutcast rep_header X-HTTP09-First-Line ^ICY.[0-9]
acl apache rep_header Server ^Apache
cache deny to_localhost apache
broken_vary_encoding allow apache
access_log /var/log/squid/access.log squid
http_access allow rules
http_access allow manager localhost
http_access deny manager
http_access allow CONNECT localnet Safe_ports
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny to_localhost
http_access allow localnet
http_access allow localhost
http_access allow purge localhost
http_access deny purge
http_access allow rules
http_access deny all
url_rewrite_access deny localhost
icp_access allow localnet
icp_access deny all
http_port 192.168.2.1:3128 transparent
hierarchy_stoplist cgi-bin ?
cache_mem 8 MB
memory_replacement_policy lru
cache_replacement_policy lru
cache_dir ufs /var/cache/squid 100 16 256
minimum_object_size 0 KB
maximum_object_size 4096 KB
cache_swap_low 90
logformat squid %ts.%03tu %6tr %>a %Ss/%03Hs %<st %rm %ru %un %Sh/%<A %mt
logformat squidmime %ts.%03tu %6tr %>a %Ss/%03Hs %<st %rm %ru %un %Sh/%<A %mt [%>h] [%<h]
logformat common %>a %ui %un [%tl] "%rm %ru HTTP/%rv" %Hs %<st %Ss:%Sh
logformat combined %>a %ui %un [%tl] "%rm %ru HTTP/%rv" %Hs %<st "%{Referer}>h" "%{User-Agent}>h" %Ss:%Sh
logfile_daemon /usr/sbin/logfile-daemon
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log
emulate_httpd_log off
mime_table /etc/squid/mime.conf
pid_filename /var/run/squid.pid
buffered_logs on
netdb_filename /var/log/squid/netdb.state
ftp_passive on
pinger_program /usr/sbin/pinger
url_rewrite_program /usr/local/bin/squidclamav
refresh_pattern ^ftp: 1440 20 10080
refresh_pattern ^gopher: 1440 0 1440
refresh_pattern -i  (/cgi-bin/|\?) 0 0 0
refresh_pattern . 0 20 4320
refresh_pattern -i  \.gif$ 43200 100 43200
refresh_pattern -i  \.png$ 43200 100 43200
refresh_pattern -i  \.jpg$ 43200 100 43200
refresh_pattern -i  \.jpeg$ 43200 100 43200
refresh_pattern -i  \.pdf$ 43200 100 43200
refresh_pattern -i  \.zip$ 43200 100 43200
refresh_pattern -i  \.tar$ 43200 100 43200
refresh_pattern -i  \.gz$ 43200 100 43200
refresh_pattern -i  \.tgz$ 43200 100 43200
refresh_pattern -i  \.exe$ 43200 100 43200
refresh_pattern -i  \.prz$ 43200 100 43200
refresh_pattern -i  \.ppt$ 43200 100 43200
refresh_pattern -i  \.inf$ 43200 100 43200
refresh_pattern -i  \.swf$ 43200 100 43200
refresh_pattern -i  \.mid$ 43200 100 43200
refresh_pattern -i  \.wav$ 43200 100 43200
refresh_pattern -i  \.mp3$ 43200 100 43200
upgrade_http0.9 deny shoutcast
connect_timeout 2 minutes
client_lifetime 1 days
cache_mgr webmaster
cache_effective_user squid
icp_port 0
log_icp_queries off
error_directory /usr/share/squid/errors/English
dns_nameservers 93.91.232.242 8.8.8.8 4.4.8.8
hosts_file /etc/hosts
coredump_dir /var/cache/squid
cache_swap_high 95