Advertisement
Gatekeeper-Za

squid3 refusing connections..

Apr 30th, 2011
216
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.07 KB | None | 0 0
  1. acl QUERY urlpath_regex -i cgi-bin \? \.php$ \.asp$ \.shtml$ \.cfm$ \.cfml$ \.phtml$ \.php3$ localhost
  2. acl all src all
  3. acl localnet src 192.168.0.0/24
  4. acl localhost src 127.0.0.1/32
  5. acl to_localhost dst 127.0.0.0/8
  6. acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901 81 3128 1025-65535
  7. acl sslports port 443 563 81
  8. acl manager proto cache_object
  9. acl purge method PURGE
  10. acl connect method CONNECT
  11.  
  12. http_access allow manager localhost
  13. http_access deny manager
  14. http_access allow purge localhost
  15. http_access deny purge
  16. http_access deny !safeports
  17. http_access deny CONNECT !sslports
  18. http_access allow localhost
  19. http_access allow localnet
  20. always_direct allow all
  21. http_reply_access allow all
  22. http_access deny all
  23.  
  24. http_port 192.168.0.5:3128 transparent
  25.  
  26. cache_mem 8 MB
  27. maximum_object_size_in_memory 32 KB
  28. memory_replacement_policy heap GDSF
  29. cache_replacement_policy heap LFUDA
  30. cache_dir aufs /cache 4000 10 256
  31. maximum_object_size 128000 KB
  32. cache_swap_low 95
  33. cache_swap_high 99
  34.  
  35. access_log none
  36. cache_log /cache/cache.log
  37. cache_log /dev/null
  38. cache_store_log none
  39. logfile_rotate 5
  40. log_icp_queries off
  41.  
  42.  
  43.  
  44. cache deny QUERY
  45. refresh_pattern ^ftp: 1440 20% 10080
  46. refresh_pattern ^gopher: 1440 0% 1440
  47. refresh_pattern -i \.(gif|png|jp?g|ico|bmp|tiff?)$ 10080 95% 43200 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-private
  48. refresh_pattern -i \.(rpm|cab|deb|exe|msi|msu|zip|tar|gz|tgz|rar|bin|7z|doc?|xls?|ppt?|pdf|nth|psd|sis)$ 10080 90% 43200 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-private
  49. refresh_pattern -i \.(avi|iso|wav|mid|mp?|mpeg|mov|3gp|wm?|swf|flv|x-flv|axd)$ 43200 95% 432000 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-private
  50. refresh_pattern -i \.(html|htm|css|js)$ 1440 75% 40320
  51. refresh_pattern -i \.index.(html|htm)$ 0 75% 10080
  52. refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
  53. refresh_pattern . 1440 90% 10080
  54.  
  55. quick_abort_min 0 KB
  56. quick_abort_max 0 KB
  57. quick_abort_pct 100
  58. store_avg_object_size 13 KB
  59.  
  60. vary_ignore_expire on
  61.  
  62. request_header_access From deny all
  63. request_header_access Server deny all
  64. request_header_access Link deny all
  65. request_header_access Via deny all
  66. request_header_access X-Forwarded-For deny all
  67.  
  68. forward_timeout 240 second
  69. connect_timeout 30 second
  70. peer_connect_timeout 5 second
  71. read_timeout 600 second
  72. request_timeout 60 second
  73. shutdown_lifetime 10 second
  74.  
  75. cache_mgr th3r00t
  76. # cache_effective_user proxy
  77. # cache_effective_group proxy
  78. httpd_suppress_version_string on
  79. visible_hostname th3r00t
  80.  
  81. dns_timeout 10 seconds
  82. dns_nameservers 208.67.222.222 208.67.220.220
  83.  
  84. memory_pools off
  85. client_db off
  86. reload_into_ims on
  87. coredump_dir /cache
  88. pipeline_prefetch on
  89. offline_mode off
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement