vcaramori
(usa CentOS)
Enviado em 22/08/2012 - 16:33h
estou usando o CentOS 5.8
squid 2.6
essa aqui é a config do squid.
http_port 3128 transparent
error_directory /usr/share/squid/errors/Portuguese/
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
cache_mem 1024 MB
cache_swap_low 95
cache_swap_high 98
maximum_object_size 10 MB
minimum_object_size 0 KB
maximum_object_size_in_memory 20 KB
cache_dir ufs /var/spool/squid 3000 16 256
cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
#ACLs padroes
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
acl rede_local src 192.168.0.0/24 192.168.1.0/24
acl especial src 192.168.0.150 192.168.0.161 192.168.0.178 192.168.0.200 192.168.0.202 192.168.0.205 192.168.0.207 192.168.0.212 192.168.0.220 192.168.0.221 192.168.0.222 192.168.0.231 192.168.0.243 192.168.0.244 192.168.0.246 192.168.0.247 192.168.0.248 192.168.0.252 192.168.1.207 192.168.0.166
acl msn url_regex /gateway/gateway.dll
acl liberados url_regex -i gvt ice adc adisul adna adobe agricon agripec agro.basf agroamazonia agroceres agrofel agrofit.agricultura.gov agrosystem aircruiser airtrip alconquimica amalcaburio amanco ambev ambid amtu analisefinanceira andef apontador apostilando argos argosguindastes assoade assomit asus atanorsa atlastransportes atmtec autoban autovias avast bancodobrasil bancoreal bancovw bayer bayercropscience bb bcb belgo bimetal binotto biosoja bogota bogota.procergs bosch bradesco brasilogisticaetransijut.fazenda braspress brexpress brp bunge buonny cacique caged caixa caramori carbocloro cardinali carvalima casadalavoura casp castrol cat centraldoissqn centrovias certificadodigital cespe cetip cheque-pre ciee citrix
acl proibidos url_regex -i orkut facebook sexo videos youtube badoo
acl mula_ports port 4662 4242 3000 4661 7777 4321 26661 8888 5555 1661 13131 4099 2222 4444 3220 5660 8661 3333 8344 7341
acl streaming rep_mime_type ^video/x-ms-asf
acl proibir_musica urlpath_regex -i \.aif$ \.aifc$ \.aiff$ \.asf$ \.avi$ \.au$ \.m3u$ \.med$ \.mp3$ \.m1v$ \.mp2$ \.mp2v$ \.mpa$ \.mov$ \.mpe$ \.mpg$ \.mpeg$ \.ogg$ \.pls$ \.ram$ \.ra$ \.ram$ \.snd$ \.wma$ \.wmv$ \.wvx$ \.mid$ \.midi$ \.rmi$
acl video url_regex -i \.avi \.wmf \.mp3 \.mp4
acl Safe_ports port 888
acl intermediario src 192.168.0.10 192.168.0.107 192.168.0.120 192.168.0.121 192.168.0.122 192.168.0.123 192.168.0.124 192.168.0.125 192.168.0.126
#padroes
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow especial
http_access deny msn
http_access deny video
http_access deny proibidos
http_access allow intermediario
http_access deny proibir_musica
http_access deny mula_ports all
http_reply_access deny streaming
http_access allow liberados
miss_access deny mula_ports all
http_access allow rede_local
http_access allow localhost
http_access deny all
http_reply_access allow all
icp_access deny all
visible_hostname Proxy
coredump_dir /var/spool/squid