http_port 3128
visible_hostname ServerNet

cache_mem 128 MB
maximum_object_size_in_memory 8 kb
maximum_object_size 128 MB
minimum_object_size 0 KB
cache_swap_low 90
cache_swap_high 95
cache_dir ufs /var/spool/squid 2048 16 256
cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_log /var/log/squid/store.log
refresh_pattern ^ftp: 15 20% 2280
refresh_pattern ^gopher: 15 20% 2280
refresh_pattern . 15 20% 2280
logfile_rotate 10
icp_port 0
#icp_port 3130



acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker 
acl Safe_ports port 777 # multiling http
acl Safe_ports port 901 # SWAT
acl purge method PURGE
acl CONNECT method CONNECT

acl rede src 192.168.0.0/24



acl libera src "/etc/squid/vip.txt"
acl dom_permitidos dstdomain src "/etc/squid/dominios.txt"
http_access allow libera
http_access deny dom_permitidos
acl site_restrito dstdomain .leilocar.com.br .guariglia.com.br .itau.com.br .abcr.org.br .gov.br .eset.com .bradesco.com.br .pamplona.netgever.com.br .bancoreal.com.br .viajeaqui.abril.com.br .200.143.36.15 .maplink.uol.com.br .200.221.3.29 .ig.com.br .google.com .banerj.com.br .200.238.107.164 .bancobrasil.com.br .realsecureweb.com.br .bb.com.br .cifrafacil.com.br .correios.com.br .bogota.procergs.com.br .webgen.procergs.com.br
http_access allow  site_restrito
http_access deny rede

acl msnmessenger url_regex -i /gateway/gateway.dll
http_access deny  msnmessenger
 

#acl palavras dstdom_regex "/etc/squid/palavras.txt"
#http_access deny palavras



http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_PORTS

acl redelocal src 192.168.0.0/24
http_access allow localhost
http_access deny redelocal

http_access deny all