thierryvdb
(usa Fedora)
Enviado em 11/10/2007 - 15:09h
ex de um squid.conf
########################
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
http_port 8080
#http_port 192.168.0.1:8080
icp_port 10.10.10.4:3130
error_directory /usr/share/squid/errors/Portuguese
#dns_nameservers 127.0.0.1
dns_nameservers 200.255.255.65
visible_hostname srv.com.br
maximum_object_size 100000 KB
cache_replacement_policy heap GDSF
#cache_peer 10.10.10.226 parent 8080 3130 no-query no-digest
cache_dir diskd /var/spool/squid/ 24000 16 256
acl Safe_ports port 21
cache_mem 64 MB
acl all src 0/0
acl rede_priv src 192.168.0.0/24
acl rede_sol src 10.10.10.0/24
acl localhost src 127.0.0.1
acl usuarios_msn ident administrador suporte
acl usuarios_suporte ident suporte
acl usuarios_liberados_bloqueados ident admin
acl usuarios_liberados_total ident administrador suporte admin
acl ips_liberados_total src 10.10.10.1 10.10.10.11 10.10.10.12 10.10.10.16 10.10.10.17 10.10.10.2 10.10.10.202 10.10.10.204 10.10.10.208 10.10.10.210 10.10.10.219 10.10.10.227 10.10.10.228 10.10.10.26 10.10.10.28 10.10.10.29 10.10.10.3 10.10.10.30 10.10.10.48 10.10.10.49 10.10.10.5 10.10.10.51 10.10.10.6 10.10.10.61 10.10.10.62 10.10.10.63 10.10.10.64 10.10.10.71 10.10.10.77 10.10.10.8 10.10.10.9 10.10.10.18
acl liberados_comercial url_regex -i "/etc/squid/liberados_comercial"
acl bloqueados_priv url_regex -i "/etc/squid/bloqueados_priv"
acl liberados_comercial_total url_regex -i "/etc/squid/liberados_comercial_total"
acl liberados_almoco_total url_regex -i "/etc/squid/liberados_almoco_total"
acl liberados_almoco url_regex -i "/etc/squid/liberados_almoco"
acl bloqueados url_regex -i "/etc/squid/bloqueados"
acl bloqueados_comercial url_regex -i "/etc/squid/bloqueados_comercial"
acl downloads_bloqueados urlpath_regex "/etc/squid/downloads_bloqueados"
acl downloads_16kbps urlpath_regex "/etc/squid/downloads_16kbps"
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
# Java
refresh_pattern .class 2880 60% 28800
# Imagens
#refresh_pattern .gif 2880 150% 28800 override-expire reload-into-ims
#refresh_pattern .jpg 2880 150% 28800 override-expire reload-into-ims
#refresh_pattern .jpeg 2880 150% 28800 override-expire reload-into-ims
refresh_pattern .png 2880 150% 28800 override-expire reload-into-ims
refresh_pattern .bmp 2880 150% 28800 override-expire reload-into-ims
refresh_pattern .tif 2880 150% 28800 override-expire reload-into-ims
refresh_pattern .tiff 2880 150% 28800 override-expire reload-into-ims
refresh_pattern .xbm 2880 150% 28800 override-expire reload-into-ims
refresh_pattern .ico 2880 150% 28800 override-expire reload-into-ims
# Animacoes
refresh_pattern .mov 2880 80% 28800 override-expire reload-into-ims ignore-reload
refresh_pattern .avi 2880 80% 28800 override-expire reload-into-ims ignore-reload
refresh_pattern .mpg 2880 80% 28800 override-expire reload-into-ims ignore-reload
refresh_pattern .swf 2880 80% 28800 override-expire reload-into-ims ignore-reload
# Audio
refresh_pattern .wav 2880 80% 28800 override-expire reload-into-ims
refresh_pattern .au 2880 80% 28800 override-expire reload-into-ims
refresh_pattern .mid 2880 150% 28800 override-expire reload-into-ims
refresh_pattern .mp3 2880 80% 28800 override-expire reload-into-ims
# Arquivos comprimidos
refresh_pattern .zip 2880 80% 28800 override-expire reload-into-ims
refresh_pattern .gz 2880 80% 28800 override-expire reload-into-ims
refresh_pattern .arj 2880 80% 28800 override-expire reload-into-ims
refresh_pattern .lha 2880 80% 28800 override-expire reload-into-ims
refresh_pattern .lzh 2880 80% 28800 override-expire reload-into-ims
refresh_pattern .rar 2880 80% 28800 override-expire reload-into-ims
refresh_pattern .tgz 2880 80% 28800 override-expire reload-into-ims
refresh_pattern .tar\.gz 2880 80% 28800 override-expire reload-into-ims
refresh_pattern .tar 2880 80% 28800 override-expire reload-into-ims
refresh_pattern .Z 2880 80% 28800 override-expire reload-into-ims
# Documentos
refresh_pattern .pdf 2880 60% 28800
refresh_pattern .rtf 2880 60% 28800
refresh_pattern .doc 2880 60% 28800
refresh_pattern .wp 2880 60% 28800
refresh_pattern .wp5 2880 60% 28800
refresh_pattern .ps 2880 60% 28800
refresh_pattern .prn 2880 60% 28800
refresh_pattern .asp 2880 60% 28800
refresh_pattern .aspx 2880 60% 28800
refresh_pattern .php 2880 60% 28800
refresh_pattern .php3 2880 60% 28800
refresh_pattern .srf 2880 60% 28800
#Executaveis
refresh_pattern .exe 2880 150% 28800 override-expire reload-into-ims
#Diversos
refresh_pattern .xml 2880 60% 28800 reload-into-ims
#refresh_pattern .html 60 90% 10080 reload-into-ims
#refresh_pattern .js 60 150% 10080 reload-into-ims
refresh_pattern .ashx 60 90% 10080 reload-into-ims
refresh_pattern .dll 60 90% 10080 reload-into-ims
#Microsoft Windows update/Downloads
refresh_pattern windowsupdate.com/.*\.(cab|exe) 4320 150% 43200 reload-into-ims
refresh_pattern download.microsoft.com/.*\.(cab|exe) 4320 150% 43200
#Windows
refresh_pattern microsoft 1080 150% 10080 override-lastmod
refresh_pattern windowsupdate 1080 150% 10080 override-lastmod
refresh_pattern msn\.com 4320 150% 10080 override-lastmod
refresh_pattern ^http://.*\.doubleclick\.net 10080 300% 40320 override-lastmod
#CLARO
refresh_pattern claro\.com\.br 4320 10% 10080 override-lastmod
acl horario_almoco time 12:00-14:00
#acl rota_net url_regex 200.208.112.14
#acl rota_net url_regex abusar.org
acl msn url_regex passport.net
acl msn url_regex live.com
acl msn url_regex passport.com
acl msn url_regex messenger.hotmail.com
acl msn url_regex webmessenger.com
acl msn url_regex webmessenger.msn.com
#acl acesso_bloqueado src
#tcp_outgoing_address 200.177.111.163 rota _net
icp_access deny all
http_access allow ips_liberados_total
#http_access deny acesso_bloqueado !all
http_access allow usuarios_liberados_total
http_access allow all horario_almoco msn
#editei aqui
#http_access deny usuarios_bloqueados_total !usuarios_suporte !usuarios_msn !msn
#fim da edicao
http_access allow liberados_comercial_total
http_access allow usuarios_msn msn
http_access allow downloads_bloqueados usuarios_suporte
http_access deny downloads_bloqueados
http_access deny bloqueados
http_access allow usuarios_liberados_bloqueados !bloqueados !bloqueados_comercial
http_access allow all liberados_comercial !bloqueados
http_access allow all horario_almoco liberados_almoco_total !downloads_bloqueados
http_access allow all horario_almoco liberados_almoco !bloqueados
http_access deny safe_ports
http_access deny all
#delay_pools 2
#delay_class 1 3
#delay_class 2 3
#delay_parameters 1 16000/16000 16000/16000 16000/16000
#delay_parameters 2 32000/32000 32000/32000 16000/32000
#delay_access 1 allow downloads_16kbps
#delay_access 2 allow rede_priv
store_avg_object_size 100000 KB
cache_effective_user proxy
cache_effective_group proxy
emulate_httpd_log on
always_direct deny rede_sol
deny_info
http://www.hotmail.com usuarios_liberados_total
##########################
o que vc esta querendo é algo assim
acl all src 0/0
acl ips_liberados src 10.10.10.1 10.10.10.11
acl bloqueados url_regex -i "/etc/squid/bloqueados"
http_access deny bloqueados !ips_liberados
