Guest User

Untitled

a guest
Dec 5th, 2016
304
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. always_direct allow all
  2. sslproxy_cert_error allow all
  3. http_access allow all
  4. visible_hostname pxy.<domain>.com
  5.  
  6.  
  7. acl localnet src 10.0.0.0/24 # RFC1918 possible internal network
  8. #acl localnet src 172.16.0.0/12 # RFC1918 possible internal network
  9. #acl localnet src 192.168.0.0/16 # RFC1918 possible internal network
  10. #acl localnet src fc00::/7 # RFC 4193 local private network range
  11. #acl localnet src fe80::/10 # RFC 4291 link-local (directly plugged) machines
  12.  
  13. #allow Skype
  14. acl numeric_IPs dstdom_regex ^(([0-9]+\.[0-9]+\.[0-9]+\.[0-9]+)|(\[([0-9a-f]+)?:([0-9a-f:]+)?:([0-9a-f]+|0-9\.]+)?\])):443
  15. acl Skype_UA browser ^skype
  16.  
  17.  
  18. acl SSL_ports port 443
  19. acl Safe_ports port 80 # http
  20. acl Safe_ports port 21 # ftp
  21. acl Safe_ports port 443 # https
  22. acl Safe_ports port 70 # gopher
  23. acl Safe_ports port 210 # wais
  24. acl Safe_ports port 1025-65535 # unregistered ports
  25. acl Safe_ports port 280 # http-mgmt
  26. acl Safe_ports port 488 # gss-http
  27. acl Safe_ports port 591 # filemaker
  28. acl Safe_ports port 777 # multiling http
  29. acl Safe_ports port 587 #SMTP
  30. acl CONNECT method CONNECT
  31.  
  32. http_access deny !Safe_ports
  33. http_access deny CONNECT !SSL_ports
  34. http_access allow localhost manager
  35. http_access deny manager
  36. http_access allow localnet
  37. http_access allow localhost
  38. #http_access deny all
  39. http_access allow CONNECT localnet numeric_IPs Skype_UA
  40.  
  41. http_port 3127 tproxy
  42. http_port 3128
  43. https_port 3129 tproxy ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/etc/squid/ssl_certs/squid.crt key=/etc/squid/ssl_certs/squid.key cipher=ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:AES128-SHA:RC4-SHA:HIGH:!aNULL:!MD5:!ADH
  44.  
  45.  
  46. acl step1 at_step SslBump1
  47. acl step2 at_step SslBump2
  48. acl step3 at_step SslBump3
  49. ssl_bump peek step1 all
  50. ssl_bump bump all
  51.  
  52.  
  53. refresh_pattern ^ftp: 1440 20% 10080
  54. refresh_pattern ^gopher: 1440 0% 1440
  55. refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
  56. refresh_pattern . 0 20% 4320
  57.  
  58.  
  59. url_rewrite_program /usr/bin/squidGuard
  60.  
  61.  
  62. # END
RAW Paste Data