API tools faq
paste
irwan94

irwan

irwan94
May 9th, 2015
432
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 7.21 KB | None | 0 0
raw download clone embed print report
  1. squid.conf
  2. acl all src
  3. acl SSL_ports port 443
  4. acl Safe_ports port 80 # http
  5. acl Safe_ports port 21 # ftp
  6. acl Safe_ports port 443 # https
  7. acl Safe_ports port 70 # gopher
  8. acl Safe_ports port 210 # wais
  9. acl Safe_ports port 1025-65535 # unregistered ports
  10. acl Safe_ports port 280 # http-mgmt
  11. acl Safe_ports port 488 # gss-http
  12. acl Safe_ports port 591 # filemaker
  13. acl Safe_ports port 777 # multiling http
  14. acl CONNECT method CONNECT
  15. acl GET_ONLY method GET
  16.  
  17. acl deny_cache url_regex -i ^https?.*(mdn.net\/instream|googleapis.com|doubleclick.net)\/.*\/adsapi.*\.swf$
  18. acl deny_cache url_regex -i ^https?:\/\/download\.mozilla\.(org|net)\/\?product
  19. acl deny_cache url_regex -i ^http:\/\/notifier\.avira\.com\/\?lngprod
  20. acl deny_cache url_regex -i \.*mdn\.net\/instream\/html5/.*
  21. cache deny deny_cache
  22.  
  23. #deny access
  24. acl deny_site dstdomain .windowsupdate.com .dl.ws.microsoft.com dl.tusfiles.net .googlesyndication.com .doubleclick.com .doubleclick.de .doubleclick.net
  25. http_access deny deny_site
  26. acl deny_url url_regex -i \.(googleusercontent|pack\.google|gvt[0-9])\.com\/(edgedl|crx)\/.*\.(exe|crx|msi)$
  27. acl deny_url url_regex -i \.(googleusercontent|c\.pack\.google|gvt[0-9])\.com\/(crx|edgedl)\/.*\.(exe|crx|msi)\?
  28. http_access deny deny_url
  29. http_reply_access deny deny_url
  30.  
  31.  
  32. acl rapani-id dstdomain .akamaihd.net
  33. acl rapani-id dstdomain .xx.fbcdn.net
  34. acl youtube url_regex -i (youtube|gstatic|google).*(ptracking|stream_204|playback|player_204|gen_204|watchtime|set_awesome|get_video|get_video_info|s\?|ads|qoe|csi|atr).*(video_id|docid|\&v|content_v)\=([^\&\s]*).*
  35. acl youtube url_regex -i (youtube|google|gstatic).*(videoplayback|liveplay|videogoodput).*
  36.  
  37. http_access deny !Safe_ports
  38. http_access deny CONNECT !SSL_ports
  39. http_access allow all
  40. http_reply_access allow all
  41. icp_access allow all
  42.  
  43. # NETWORK OPTIONS
  44. https_port 3127 tproxy ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/etc/squid/ssl_cert/myCA.pem
  45. http_port 3129 tproxy
  46. http_port 3128
  47. always_direct allow all
  48. # TAG: ssl_bump
  49. ssl_bump server-first all
  50. #Default:
  51. sslcrtd_program /usr/lib/squid/ssl_crtd -s /etc/squid/ssl_db/certs/ -M 4MB
  52. sslcrtd_children 10
  53. sslproxy_cert_error allow all
  54. sslproxy_flags DONT_VERIFY_PEER
  55.  
  56. # MEMORY CACHE OPTIONS
  57. # -----------------------------------------------------------------------------
  58. cache_mem 512 MB
  59. maximum_object_size_in_memory 32 KB
  60. maximum_object_size 1024 MB
  61. minimum_object_size 32 bytes
  62. memory_replacement_policy heap GDSF
  63. cache_replacement_policy heap LFUDA
  64.  
  65. #dir cache --------------------------------------------------------------------
  66. cache_dir aufs /cache 10000 23 256
  67. #-------------------------------------------------------------------------------
  68. cache_swap_low 98
  69. cache_swap_high 99
  70.  
  71. # TAG: store_id_program
  72. store_id_program /etc/squid/store-id.exe
  73. store_id_children 10 startup=5 idle=1 concurrency=100
  74. store_id_access deny !GET_ONLY
  75. store_id_access allow rapani-id
  76. store_id_access allow youtube
  77. store_id_access deny all
  78.  
  79.  
  80. # TAG: access_log
  81. access_log daemon:/var/log/squid/access.log squid
  82. #cache_log /var/log/squid/cache.log
  83. logfile_rotate 1
  84. strip_query_terms off
  85. coredump_dir /cache
  86. #--------------------------------------------------------------------------------------------
  87. max_stale 1 year
  88.  
  89. # TAG: refresh_pattern
  90. refresh_pattern ^.*safebrowsing.*google 43830 99% 259200 override-expire ignore-reload ignore-no-store ignore-private ignore-auth ignore-must-revalidate store-stale
  91. #---------------------------------------------------------------------------
  92. refresh_pattern -i proxy\.rapani-id 10080 90% 259200 override-expire override-lastmod ignore-reload reload-into-ims ignore-no-store ignore-must-revalidate ignore-private ignore-auth refresh-ims store-stale
  93. #sensitif
  94. refresh_pattern ^http:\/\/.*\.(crossfire.web\.id|worldinayodance\.com)\/.*\.(ini|list|xml|txt) 0 0% 0
  95. refresh_pattern ^http:\/\/patch\.gemscool\.com\/dz\/live\/DZPatch\/Patched_GameLoader\.exe 0 0% 0
  96. refresh_pattern -i \.lytogame\.com\/.*\.(ini|inf) 0 0% 0
  97. refresh_pattern -i ^http:\/\/202\.93\.20\.237\/rf2\/.*\.(lst|ini|inf) 0 0% 0
  98. refresh_pattern -i ^http:\/\/.*\.winnerinter\.co\.id\/new_autopatch\/.*\.xml 0 0% 0
  99. refresh_pattern -i ^http.*\.gemscool.com\/lsaga\/hackshield 0 0% 0
  100. refresh_pattern -i ^http.*(hackshield|nprotect|webnProtect) 0 0% 0
  101. refresh_pattern ^http:\/\/patch\.gemscool\.com\/lsaga 0 0% 0
  102. refresh_pattern ^http:\/\/lostsaga-image\.gscdn\.com 0 0% 0
  103. refresh_pattern -i ^http:\/\/.*\.(garenanow|starhub)\.com\/.*\.(dll|php|version|xml|js)$ 0 0% 0
  104. refresh_pattern -i ^http:\/\/.*\.garenanow\.com\/.*\/(app|ui)$ 0 0% 0
  105. refresh_pattern -i ^http:\/\/update3\.netmarble\.co\.id\/sf2\/.*\/.*\.(xml|jpg)\.dfg 0 0% 0
  106.  
  107. refresh_pattern -i \.(gif|png|pnp|img|jpg|jpeg|jpe?g|jpeg2|ico|mod|bmp|eps|tif|tiff?|pcx|pic|tga|iff|sct|pxr|raw|dcs|rle|lzw|ccit|f3d|woff)$ 43830 99% 259200 override-expire override-lastmod ignore-reload ignore-no-store ignore-must-revalidate ignore-private ignore-auth store-stale
  108. refresh_pattern -i \.(pps|ppsx|ps|rtx|wpl|doc|docx|pdf|xls|xlsx|latex|ppt|pptx|mbd|bat|psd)$ 43830 99% 259200 override-expire override-lastmod ignore-reload ignore-no-store ignore-must-revalidate ignore-private ignore-auth store-stale
  109. refresh_pattern -i \.(mp4|3ivx|asf|avi|m2ts|divx|mjpeg|ogv|webm|mpg|mpeg|ogg|wmv|mkv|3gp|swf|flv|x-flv|3g2|vob|swf|swz|mov)$ 43830 99% 259200 override-expire override-lastmod ignore-reload ignore-no-store ignore-must-revalidate ignore-private ignore-auth store-stale
  110. refresh_pattern -i \.(ogg|mp2|ac3|mpc|m4a|flac|aiff|aif|aifc|raw|au|mid|wav|wv|mp3|gsm|dct|aac|mmf|wma|atrac|ra|ram|dss|msv|dvf|m4p|amr|awb|ape|apl)$ 43830 99% 259200 override-expire override-lastmod ignore-reload ignore-no-store ignore-must-revalidate ignore-private ignore-auth store-stale
  111. refresh_pattern -i \.(exe|dfg|crx|7z|mds|mod|mdl|arj|bz2|ms-dos|ccd|sub|deb|cab|pak|bin|cue|nrg|isz|mdf|qt|zip|tar|jar|jxr|jad|tar.gz|tar|msi|inc|lha|ms(i|p|u)|rpm|rtp|rpz|nui|kom|stg|pak|sup|nzp|npz|tgz|reg|vpx|idx|avc|ref|msp|iso|info.gz|rar|mar)$ 43830 99% 259200 override-expire override-lastmod ignore-reload ignore-no-store ignore-must-revalidate ignore-private ignore-auth store-stale
  112.  
  113. #-------------------------------------------------------------------------
  114. refresh_pattern ^ftp: 1440 20% 10080
  115. refresh_pattern ^gopher: 1440 0% 1440
  116. refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
  117. refresh_pattern . 0 20% 1440
  118. #-------------------------------------
  119.  
  120. range_offset_limit 1 KB
  121. quick_abort_min 0 KB
  122. quick_abort_max 0 KB
  123. quick_abort_pct 100
  124. negative_ttl 1 seconds
  125. positive_dns_ttl 24 hours
  126. negative_dns_ttl 1 minutes
  127. forward_timeout 3 minutes
  128. vary_ignore_expire on
  129. # TAG: request_header_access
  130. request_header_access From deny all
  131. request_header_access Server deny all
  132. request_header_access Link deny all
  133. request_header_access Via deny all
  134. request_header_access X-Forwarded-For deny all
  135.  
  136. # ADMINISTRATIVE PARAMETERS
  137. # -----------------------------------------------------------------------------
  138. cache_mgr webmaster
  139. cache_effective_user proxy
  140. cache_effective_group proxy
  141. visible_hostname squid
  142. ipcache_size 1024
  143. ipcache_low 90
  144. ipcache_high 95
  145. fqdncache_size 1024
  146. memory_pools off
  147. forwarded_for off
  148. client_db off
  149. reload_into_ims on
  150. offline_mode off
  151. qos_flows local-hit=0x30
  152.  
  153.  
  154.  
  155. rc.local
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!