View difference between Paste ID: iALqvVZ3 and pCS8S7mj
SHOW: | | - or go back to the newest paste.
1
dns_v4_first on
2
reply_header_access Alternate-Protocol deny all
3
reply_header_access Alt-Svc deny all
4
refresh_all_ims on
5
reload_into_ims on
6
7
sslproxy_cert_error allow all
8
sslproxy_flags DONT_VERIFY_PEER
9
10
retry_on_error on
11
connect_retries 3
12
13
#debug_options 11,2 22,3
14
 
15
cache_dir aufs /cache 670000 256 256
16
cache_mem 2 MB
17
cache_swap_high 95
18
cache_swap_low 90
19
 
20
cache_replacement_policy heap LFUDA
21
memory_replacement_policy heap GDSF
22
 
23
maximum_object_size 4096000 KB
24
maximum_object_size_in_memory 0 KB
25
request_body_max_size 0 KB
26
 
27
cache_mgr [email protected]
28
visible_hostname cespun
29
strip_query_terms off
30
via off
31
forwarded_for off
32
33
request_header_access X-Forwarded-For deny all
34
request_header_access Proxy-Connection deny all
35
request_header_access Connection deny all
36
request_header_access Via deny all
37
38
reply_header_access X-Forwarded-For deny all
39
reply_header_access Proxy-Connection deny all
40
reply_header_access Connection deny all
41
reply_header_access Via deny all
42
43
reply_header_access Server deny all
44
reply_header_replace Server cespun-proxy
45
46
coredump_dir /var/log/squid
47
logfile_rotate 1
48
49
max_filedescriptors 65536
50
fqdncache_size 0
51
ipcache_size 0
52
ipcache_high 0
53
ipcache_low 0
54
55
http_port 3128
56
http_port 3129 tproxy
57
https_port 3127 tproxy ssl-bump generate-host-certificates=on cert=/etc/squid/ssl_cert/warnet.pem
58
 
59
qos_flows local-hit=0x30
60
 
61
acl localnet src all
62
acl semuaport port 0-65535
63
acl PURGE method PURGE 
64
acl step1 at_step SslBump1
65
acl step2 at_step SslBump2
66
acl step3 at_step SslBump3
67
acl bypass ssl::server_name_regex -i "/etc/squid/bypass.txt"
68
acl range206 req_header Range -i byte
69
acl uabrowser browser -i regexp (iPhone|iPad)
70
acl uabrowser browser -i regexp (BlackBerry|PlayBook)
71
acl uabrowser browser -i regexp (Windows.*Phone|Trident|IEMobile)
72
acl uabrowser browser -i regexp Android
73
acl uabrowser browser -i regexp Linux
74
acl yt-rewrite url_regex -i ^https?\:\/\/(www|gaming)\.youtube\.com\/(watch\?v|embed|v)[=%&?\/]
75
acl yt-rewrite url_regex -i ^https?\:\/\/www\.youtube\.com$
76
acl yt-rewrite url_regex -i ^https?\:\/\/www\.youtube\.com\/$
77
acl youtube url_regex -i ^http.*(youtube|googlevideo|videoplayback|videogoodput)
78
acl googlevideo url_regex -i ^http.*google.*video(playback|goodput).*
79
acl mimehtml rep_mime_type -i mime-type html
80
acl mimeplain rep_mime_type -i mime-type text
81
acl urltomiss url_regex -i ^http.*(serverpatch|server_patch|server-patch|patchserver|patch_server|patch-server)
82
acl urltomiss url_regex -i ^http.*googlevideo\.com\/video(playback|goodput).*source[\&\=\?\/]yt_live
83
acl patchpartial url_regex -i ^http.*patch.*garena
84
acl patchpartial url_regex -i ^http.*garena.*patch
85
acl patchpartial url_regex -i ^http:\/\/.*google\.com\/.*chrome.*\/(.*.(exe))
86
acl httptomiss http_status 302
87
acl tostoreid url_regex -i ^http.*(youtube|googlevideo|videoplayback|videogoodput)
88
acl tostoreid url_regex -i ^http.*(fbcdn|akamaihd)
89
acl tostoreid url_regex -i ^http.*c2lo\.reverbnation\.com\/audio_player\/ec_stream_song\/.*\?
90
acl tostoreid url_regex -i ^http.*\.c\.android\.clients\.google\.com\/market\/GetBinary\/GetBinary\/.*\/.*\?
91
acl tostoreid url_regex -i ^http.*datafilehost.*\/get\.php.*file\=.*
92
acl tostoreid url_regex -i ^http.*\.filehippo\.com\/.*\?
93
acl tostoreid url_regex -i ^http.*\.4shared\.com\/.*\/.*\/.*\/dlink.*preview.mp3
94
acl tostoreid url_regex -i ^http.*\.4shared\.com\/download\/.*\/.*\?tsid
95
acl tostoreid url_regex -i ^http.*steam(powered|content).*\/(client|depot)\/.*\/(chunk|manifest)\/.*\?.*
96
acl tostoreid url_regex -i ^http.*savefile\.co\:[0-9]{2,5}\/.*\/.*\.(mp4|flv|3gp)
97
acl tostoreid url_regex -i ^http.*video\-http\.media\-imdb\.com\/.*\.mp4\?
98
acl tostoreid url_regex -i ^http.*\.dl\.sourceforge\.net
99
acl tostoreid url_regex -i ^http.*\youtubeinmp3\.com\/download\/get\/.*id\=.*t\=.*
100
acl tostoreid url_regex -i ^http.*patch\.gemscool\.com\/lsaga.*\.iop.*\?.*
101
acl tostoreid url_regex -i ^http.*googleusercontent\.com/docs/securesc\/.*
102
acl tostoreid url_regex -i ^http.*mp4upload\.com\:[0-9]{2,5}\/.*\.[0-9a-zA-Z]{2,5}
103
acl speedtest url_regex -i ^http.*([0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}|speedtest|espeed|api\.ookla).*\/(speedtest\.swf|speedtest-long\.swf|latency\.txt|upload\.php|speedtest-config\.php|ipaddress\.php|random.*\.jpg)
104
acl denyurl url_regex -i gvt1.com\/edgedl.*
105
acl denyurl url_regex -i google\.com/edgedl.*
106
acl denyurl url_regex -i ^http\:\/\/cache\.pack\.google\.com\/edgedl\/.*
107
acl rangesteam url_regex -i ^http.*steam(powered|content).*\/(client|depot)\/.*\/(chunk|manifest)\/.*\?.*
108
acl basejs url_regex -i ^http.*(youtube|ytimg)\.com\/.*\/player.*\/base\.js
109
 
110
acl CONNECT method CONNECT
111
acl getmethod method GET
112
113
http_access deny denyurl
114
http_access deny rangesteam range206
115
deny_info https://s.ytimg.com/yts/swfbin/player-vflx0pAVB/watch_as3.swf basejs
116
http_access deny basejs
117
118
http_access allow localhost manager
119
http_access deny manager
120
http_access allow localhost purge
121
http_access deny purge
122
http_access allow localnet
123
http_access allow localhost
124
http_access allow semuaport
125
http_access deny all
126
127
access_log /var/log/squid/access.log !CONNECT
128
129
range_offset_limit none range206 patchpartial
130
range_offset_limit 128 KB range206 !patchpartial
131
quick_abort_min 1 KB
132
quick_abort_max 1 KB
133
quick_abort_pct 95
134
 
135
ssl_bump splice bypass
136
ssl_bump peek step1 all
137
ssl_bump bump all
138
139
cache_peer 10.212.212.212 parent 8033 0 no-digest no-tproxy
140
dead_peer_timeout 5 seconds
141
cache_peer_access 10.212.212.212 allow speedtest
142
cache_peer_access 10.212.212.212 deny all
143
always_direct deny speedtest
144
never_direct allow speedtest
145
 
146
request_header_access Accept-Encoding deny yt-rewrite !uabrowser
147
#yt_quality: tiny = 144px small = 240px medium = 360px large = 480px HD720 = Hd720px
148
ecap_enable on
149
loadable_modules /usr/local/lib/ecap_adapter_modifying.so
150
ecap_service modif respmod_precache uri=ecap://dokter-squid.com/ecap yt_quality=medium no-html5=no
151
#ecap_service modif respmod_precache uri=ecap://e-cap.org/ecap/services/sample/modifying victim="html5":true replacement="html5":false
152
#ecap_service modif respmod_precache uri=ecap://e-cap.org/ecap/services/sample/modifying victim="enablejsapi" replacement="dash":"0","vq":"medium","enablejsapi"
153
adaptation_access modif allow yt-rewrite !uabrowser
154
adaptation_access modif deny all
155
156
store_id_bypass off
157
store_id_extras "%{Referer}>h"
158
store_id_program /etc/squid/storeid.pl
159
store_id_children 2000 startup=30 idle=1
160
store_id_access allow tostoreid
161
store_id_access deny all
162
 
163
store_miss deny googlevideo httptomiss
164
send_hit deny googlevideo httptomiss
165
store_miss deny googlevideo mimeplain
166
send_hit deny googlevideo mimeplain
167
store_miss deny googlevideo mimehtml
168
send_hit deny googlevideo mimehtml
169
store_miss deny urltomiss
170
send_hit deny urltomiss
171
store_miss deny mimehtml
172
send_hit deny mimehtml
173
store_miss deny mimeplain
174
send_hit deny mimeplain
175
176
refresh_pattern -i ^https?\:\/\/squid\/(mp4upload|google\/video) 0 90% 432000 override-expire override-lastmod ignore-no-store ignore-must-revalidate ignore-private ignore-auth
177
refresh_pattern -i .* 0 1% 1 override-expire override-lastmod ignore-no-store ignore-must-revalidate ignore-private ignore-auth