# Kerberos Authentication (DOMAIN)
auth_param negotiate program /usr/sbin/negotiate_kerberos_auth -s HTTP/sharky.main.varndean.ac.uk@MAIN.VARNDEAN.AC.UK
auth_param negotiate children 20 startup=0 idle=1
auth_param negotiate keep_alive on

# NTLM Authentication (WIFI)
auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp --domain=MAIN
auth_param ntlm children 20 startup=0 idle=1
auth_param ntlm keep_alive off # Needed for prompt logins to work

# Require proxy authentication
acl auth proxy_auth REQUIRED

# MSSQL Block list
url_rewrite_program /usr/local/bin/beached2
url_rewrite_children 5 startup=0 idle=2

# Number of workers (SMP), mkdir /var/run/squid!!!!!!!
workers 8

# Maximum open files
max_filedesc 8192

# Internal IP networks from where browsing should be allowed
acl localnet src 10.10.0.0/16

# ACL of all "safe" ports
acl SSL_ports port 443
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443         # https
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT

# Proxy access rules
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost manager
http_access deny manager
http_access deny !auth
http_access allow auth
http_access deny all

# HTTP filtering port
http_port 3128

# Try connecting to first 25 ips of a domain name
forward_max_tries 25

# Memory cache
cache_mem 512 MB
maximum_object_size_in_memory 1024 KB

# Limit download to 500 overall, none for the subnet and 50 individual
delay_pools 1
delay_class 1 3
delay_access 1 allow all
delay_parameters 1 524288000/524288000 none 52428800/52428800

# Limit upload !!WORK IN PROGRESS!!
client_delay_pools 1
client_delay_access 1 allow all
client_delay_parameters 1 52428800 52428800

# Leave coredumps in the first cache dir
coredump_dir /var/cache/squid

# Log format
logformat squid %>a %un %tl %rm %<st %Ss/%>Hs %ru  %Sh/%<A %mt

# SNMP required settings
snmp_port 3401
acl snmppublic snmp_community public
snmp_access allow snmppublic all

# Make squid shutdown faster
shutdown_lifetime 3 seconds

# Add any of your own refresh_pattern entries above these.
refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern -i (/cgi-bin/|\?) 0     0%      0
refresh_pattern .               0       20%     4320