squid.conf

Squid3 (squid.conf)

pelo

Squid3 com suporte a HTTPS

Categoria: Networking

Software: Squid3

[ Hits: 4.468 ]

Por: Sérgio Abrantes Junior

2 0

Denuncie Favoritos Indicar

Arquivo de configuração squid.conf sem os comentários.
Possui os parâmatros que utilizo quando preciso de um servidor que suporte a filtragem de sites https.

Caso queira saber todas as etapas para montar um servidor, veja o artigo que escrevi aqui no: VOL https://www.vivaolinux.com.br/artigo/Squid3-no-Debian-8-Jessie-com-suporte-a-filtro-de-paginas-HTTPS

acl SSL_ports port 443
acl Safe_ports port 80      # http
acl Safe_ports port 21      # ftp
acl Safe_ports port 443      # https
acl Safe_ports port 70      # gopher
acl Safe_ports port 210      # wais
acl Safe_ports port 1025-65535   # unregistered ports
acl Safe_ports port 280      # http-mgmt
acl Safe_ports port 488      # gss-http
acl Safe_ports port 591      # filemaker
acl Safe_ports port 777      # multiling http
acl CONNECT method CONNECT
acl LAN src 192.168.51.0/24
acl sites_bloqueados url_regex -i "/etc/squid3/cliente/sites_bloqueados"
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost manager
http_access deny manager
http_access allow localhost
http_access deny sites_bloqueados
http_access allow LAN
http_access deny all
http_port 3128 transparent
https_port 3129 transparent ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/etc/squid3/ssl_cert/srv.pem
ssl_bump server-first all
sslcrtd_program /usr/lib/squid3/ssl_crtd -s /etc/squid3/ssl_cert/ssl_db -M 4MB
 sslcrtd_children 32 startup=5 idle=1
 cache_mem 256 MB
 maximum_object_size_in_memory 512 KB
memory_replacement_policy heap GDSF
cache_replacement_policy heap LFUDA
 maximum_object_size 4 MB
cache_dir diskd /var/spool/squid3 9000 64 256 Q1=64 Q2=72
 logfile_rotate 10
coredump_dir /var/spool/squid3
refresh_pattern ^ftp:      1440   20%   10080
refresh_pattern ^gopher:   1440   0%   1440
refresh_pattern -i (/cgi-bin/|\?) 0   0%   0
refresh_pattern .      0   20%   4320

Comentários

Nenhum comentário foi encontrado.