aramis
(usa Debian)
Enviado em 11/08/2011 - 12:51h
http_port 3128 transparent
cache_mem 4048 MB
cache_swap_low 90
cache_swap_high 95
maximum_object_size 16384 KB
maximum_object_size_in_memory 20 KB
cache_dir ufs /var/spool/squid 40000 16 256
access_log /var/log/squid/access.log squid
cache_log /var/log/squid/cache.log
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 # https
#acl SSL_port port 443 # https
acl SSL_ports port 563 # snews
acl SSL_ports port 873 # rsync
acl SSL_ports port 873 # rsync
acl Safe_ports port 80 # http
acl Safe_ports port 21 #ftp
acl Safe_ports port 8080 #http
#acl Safe_port port 443 # https
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 631 # cups
acl Safe_ports port 873 # rsync
acl Safe_ports port 901 # SWAT
acl purge method PURGE
acl CONNECT method CONNECT
########## ACL para roteamento ################
################## ACL para acesso a rede local ###############
acl rede_adm src 192.168.254.0/24
acl rede_2 src 192.168.2.0/24
################# ACLS para bloqueio pelo MAC ########################################################
#acl secretaria_blockmac arp 00:15:F2:73:48:54 00:30:67:1F:E8:07 00:30:67:1F:E7:FF 00:05:00:19:16:6C 00:1e:90:f2:8e:73
acl biblioteca_blockmac arp 00:16:EC:D3:C2:FC
acl xerox_blockmac arp 00:25:11:D9:ED:6A
acl hotmail_domains dstdomain .hotmail.msn.com
#acl biblioteca_blockmac
#acl xerox_blockmac
acl hotmail url_regex -i login.live.com
########################## Regras de Aceso ###################
acl sites url_regex -i "/etc/squid/regras/sitessl"
acl blockword url_regex -i "/etc/squid/regras/blockword"
acl blockdomain dstdomain -i "/etc/squid/regras/blockdomain"
##acl webmail url_regex -i mail.live.com
acl blockbiblioteca dstdomain -i "/etc/squid/regras/biblioteca_block_mac"
acl blockxerox dstdomain -i "/etc/squid/regras/xerox_block_mac"
#acl blockslaprofessores dstdomain -i "/etc/squid/regras/block_sla_prof"
acl arpsite dstdomain -i "/etc/squid/regras/blockmac"
acl blockdownload urlpath_regex -i "/etc/squid/regras/blockdownload"
acl blockmsn url_regex -i "/etc/squid/regras/blockmsn"
acl blocktalk url_regex -i mail.google.com/mail/channel/bind
acl unblockword url_regex -i "/etc/squid/regras/unblockword"
acl unblockdomain dstdomain -i "/etc/squid/regras/unblockdomain"
http_access allow manager localhost
http_access deny manager
# Only allow purge requests from localhost
http_access allow purge localhost
http_access deny purge
# Deny requests to unknown ports
http_access deny !Safe_ports
#http_access allow Safe_port sitessl
#http_access deny !Safe_ports
# Deny CONNECT to other than SSL ports
http_access deny CONNECT !SSL_ports
#http_access allow hotmail_domains
http_access allow blockbiblioteca
http_access deny biblioteca_blockmac
http_access allow hotmail
http_access allow arpsite
#http_access allow site
#http_access deny secretaria_blockmac
http_access allow localhost
http_access allow aramis
http_access allow eventos
http_access deny blockword !unblockword !unblockdomain
http_access deny blockdomain !unblockword !unblockdomain
http_access deny blockdownload !unblockdownload !unblockdomain
http_access deny blocktalk
http_access deny blockmsn
#http_access allow unblockmac
http_access allow rede_adm
http_access deny rede_2
# And finally deny all other access to this proxy
http_access deny all
http_reply_access allow all
icp_access allow all
cache_effective_group proxy
header_access Accept-Encoding deny hotmail_domains
