squid.conf

# SQUID - Lusca Head
# CONFIG DATE : 04 Dec 2011
# iniDian

# Port Configuration
http_port 3128 transparent
#icp_port 3130
icp_port 0
htcp_port 0
snmp_port 3401

# Logfile & Directory Location
access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log none
error_directory /usr/share/squid/errors/English
icon_directory /usr/share/squid/icons
pid_filename /var/log/squid/squid.pid
logfile_rotate 2

#DNS Lookup
dns_nameservers "/etc/resolv.conf"

# Tuning Memory Parameters
max_filedescriptors 8192
cache_mem 500 MB
maximum_object_size_in_memory 4 bytes
memory_replacement_policy heap GDSF
cache_replacement_policy heap LFUDA
#minimum_object_size 0 bytes
maximum_object_size 320 MB
store_avg_object_size 13 KB

offline_mode off
memory_pools off
cache_swap_low 96
cache_swap_high 97

# Cache Directory
cache_dir aufs /cache 750000 16 256

# Default ACL
acl all src 0.0.0.0/0.0.0.0
acl localhost src 127.0.0.1/255.255.255.255
acl webserver src 127.0.0.1/255.255.255.255
acl SafePorts port 21 70 80 210 280 443 488 563 591 631 777 901 81 3128 1025-65535
acl SSLports port 443 563 81
acl manager proto cache_object
acl purge method PURGE
acl connect method CONNECT
acl snmppublic snmp_community public
acl NoCache dstdomain "/etc/squid/noCache-domain.acl"
acl NoCache1 urlpath_regex \.ini
acl NoCache1 urlpath_regex \.xml
acl NoCache1 urlpath_regex \.dat

#Block ACL
acl blocksites dstdomain "/etc/squid/squid-block.acl"
acl blockfiles urlpath_regex -i "/etc/squid/squid-block-file.acl"
acl conficker url_regex "/etc/squid/conficker.url"

cache deny NoCache
no_cache deny NoCache1

snmp_access allow snmppublic localhost
snmp_access deny all

http_access allow manager localhost
http_access allow manager webserver
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !SafePorts
http_access deny CONNECT !SSLports

#Block
http_access deny blocksites
http_access deny blockfiles
http_access deny conficker

# ACL Acces
acl localnet src 192.168.0.0/24
acl localnet src 192.168.1.0/24
acl localnet src 192.168.2.0/24
acl localnet src 192.168.4.0/24
acl localnet src 192.168.10.0/24

# Always allow localhost connections
http_access allow localhost
http_access allow localnet
http_access deny all

# Include Rewrite & Refresh Pattern configuration
include /etc/squid/rewrite.conf
include /etc/squid/refresh.conf

# Misc
server_http11 on
client_persistent_connections off
server_persistent_connections on
half_closed_clients off
strip_query_terms off
#quick_abort_min 0 KB
quick_abort_max 0 KB
quick_abort_pct 100
vary_ignore_expire on
reload_into_ims on
pipeline_prefetch on
#range_offset_limit 50 KB
read_timeout 30 minutes
client_lifetime 2 hours
negative_ttl 30 seconds
positive_dns_ttl 6 hours
negative_dns_ttl 60 seconds
pconn_timeout 15 seconds
request_timeout 1 minute
logfile_rotate 10

log_icp_queries off
ipcache_size 16384
ipcache_low 98
ipcache_high 99
log_fqdn off
fqdncache_size 16384
uri_whitespace strip
shutdown_lifetime 7 seconds

# High Anonymous Config
#header_access Accept-Encoding deny all
forwarded_for off
via on

# Zero Penalty Hit
tcp_outgoing_tos 0x30 localnet
zph_mode tos
zph_local 0x30
zph_parent 0
zph_option 136

# User Management
cache_effective_user squid
cache_effective_group squid
cachemgr_passwd none all
client_db on
visible_hostname proxy.iniDian.com
cache_mgr [email protected]