Advertisement
crewoulart

Squid.conf

Jan 23rd, 2017
178
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.58 KB | None | 0 0
  1. acl localnet src 10.0.0.0/8 # RFC1918 possible internal network
  2. acl localnet src 172.16.0.0/12 # RFC1918 possible internal network
  3. acl localnet src 192.168.0.0/16 # RFC1918 possible internal network
  4. acl localnet src fc00::/7 # RFC 4193 local private network range
  5. acl localnet src fe80::/10 # RFC 4291 link-local (directly plugged) machines
  6.  
  7. acl SSL_ports port 443
  8. acl Safe_ports port 80 # http
  9. acl Safe_ports port 21 # ftp
  10. acl Safe_ports port 443 # https
  11. acl Safe_ports port 70 # gopher
  12. acl Safe_ports port 210 # wais
  13. acl Safe_ports port 1025-65535 # unregistered ports
  14. acl Safe_ports port 280 # http-mgmt
  15. acl Safe_ports port 488 # gss-http
  16. acl Safe_ports port 591 # filemaker
  17. acl Safe_ports port 777 # multiling http
  18. acl CONNECT method CONNECT
  19.  
  20. http_access deny !Safe_ports
  21. http_access deny CONNECT !SSL_ports
  22. http_access allow localhost manager
  23. http_access deny manager
  24. http_access allow localnet
  25. http_access allow localhost
  26. http_access deny all
  27. https_port 3127 tproxy ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/etc/squid/ssl_cert/myCA.pem
  28. http_port 3128
  29. http_port 3129 tproxy
  30. acl step1 at_step SslBump1
  31. acl step2 at_step SslBump2
  32. acl step3 at_step SslBump3
  33. ssl_bump peek step1 all
  34. ssl_bump bump all
  35.  
  36. #RAMFS
  37. cache_dir aufs /cache 17048 40 256
  38.  
  39. # WCCP2
  40. wccp2_router 10.10.10.1
  41. wccp2_forwarding_method l2
  42. wccp2_return_method l2
  43. wccp2_service standard 0
  44. qos_flows tos local-hit=0x30
  45.  
  46. refresh_pattern ^ftp: 1440 20% 10080
  47. refresh_pattern ^gopher: 1440 0% 1440
  48. refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
  49. refresh_pattern . 0 20% 4320
  50.  
  51. # END
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement