Squid (squid.conf)
Configuração básica do Squid usando delay pools, liberação de alguns sites e requisição de senha para outros.
######################### # # # SQUID COM AUTENTICAÇÃO # # RODRIGO MENDES PASINI # # 04/08/2009 # # # ######################### ################ # AUTENTICAÇÃO # ################ auth_param basic program /usr/bin/ncsa_auth /etc/squid/passwd #Localização do programa de autenticação e o arquivo de usuários auth_param basic children 5 auth_param basic realm Para acessar esse Site e necessário permissão especial #mensagem exibida para o usuario na janela de autenticação auth_param basic credentialsttl 2 hours #tempo que expira a autenticação auth_param basic casesensitive off #desativa diferenciação de maiúsculas e minúsculas #################### # CONTROLES DE ACESSO # #################### acl all src all acl manager proto cache_object acl localhost src 127.0.0.1/32 acl to_localhost dst 127.0.0.0/8 acl SSL_ports port 443 # https acl SSL_ports port 563 # snews acl SSL_ports port 873 # rsync acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 # https acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl Safe_ports port 631 # cups acl Safe_ports port 873 # rsync acl Safe_ports port 901 # SWAT acl Safe_ports port 5000 # VPN acl purge method PURGE acl CONNECT method CONNECT ### CONTROLE DE BANDA ### delay_pools 1 delay_class 1 2 delay_parameters 1 229376/229376 8192/8192 acl rede src 192.168.2.0/24 # acl que registra a rede que acessará a Internet acl siteson url_regex -1 "/etc/squid/on" #acl da lista de sites permitidos acl password proxy_auth REQUIRED #acl que obrigará a autenticação acl sitesoff url_regex -i "/etc/squid/off" #acl dos sites bloqueados acl governo dstdom_regex .gov.br #acl que indica domínios do governo ############# # PERMISSÕES # ############# delay_acces 1 allow 192.168.2.0/24 http_access allow manager localhost http_access deny manager http_access allow purge localhost http_access deny purge http_access deny !Safe_ports http_access deny CONNECT !SSL_ports http_access allow localhost # regra que bloqueia todas redes menos a nossa http_access deny all !rede # libera a lista de sites permitidos http_access allow siteson #Libera sites do governo http_access allow governo # daqui pra frente só com senha http_access allow password # bloqueia os sites não permitidos caso não forneça senha http_access deny sitesoff http_access allow rede icp_access allow rede icp_access deny all ################ # NETWORK OPTIONS # ################ http_port 192.168.2.99:3128 hierarchy_stoplist cgi-bin ? ######################## # OPÇÕES DE CACHE EM MEMÓRIA # ######################## cache_mem 16 MB maximum_object_size_in_memory 8 KB memory_replacement_policy lru ###################### # OPÇÕES DE CACHE EM DISCO # ###################### cache_replacement_policy lru cache_dir ufs /var/spool/squid 100 16 256 store_dir_select_algorithm least-load max_open_disk_fds 0 minimum_object_size 0 KB maximum_object_size 20480 KB cache_swap_low 90 cache_swap_high 95 update_headers on ####################### # OPÇÕES DE ARQUIVOS DE LOG # ####################### access_log /var/log/squid/access.log squid logfile_daemon /usr/lib/squid/logfile-daemon cache_log /var/log/squid/cache.log cache_store_log /var/log/squid/store.log ################################ # OPÇÕES PARA PERFORMANCE DO CACHE # ################################ refresh_pattern ^ftp: 1440 20% 10080 refresh_pattern ^gopher: 1440 0% 1440 refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 refresh_pattern (Release|Package(.gz)*)$ 0 20% 2880 refresh_pattern . 0 20% 4320 acl shoutcast rep_header X-HTTP09-First-Line ^ICY\s[0-9] upgrade_http0.9 deny shoutcast acl apache rep_header Server ^Apache broken_vary_encoding allow apache extension_methods REPORT MERGE MKACTIVITY CHECKOUT ############################# # PARAMETROS ADMINISTRATIVOS # ############################# cache_mgr Rodrigo ################### # INTERNAL ICON OPTIONS # ################### icon_directory /usr/share/squid/icons global_internal_static on ####################### # OPÇÕES DE PAGINA DE ERRO # ####################### error_directory /usr/share/squid/errors/Portuguese hosts_file /etc/hosts coredump_dir /var/spool/squid
