JeanVinicius
(usa CentOS)
Enviado em 23/02/2016 - 15:46h
Segue
http_port 192.168.10.35:3128
visible_hostname apas-fw01
#ACLs
acl all src 0.0.0.0/0.0.0.0
#acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443
acl Safe_ports port 21 80 443 563 1521 70 210 280 488 59 777 901
acl Safe_ports port 1025-65535
acl Safe_ports port 20000-20019
acl purge method PURGE
acl CONNECT method CONNECT
acl wuCONNECT dstdomain
www.update.microsoft.com
acl redelocal src 192.168.10.0/24
acl siteblock url_regex -i "/etc/squid/regras/siteblock.acl"
acl palavrasblock url_regex -i "/etc/squid/regras/palavrablock.acl"
acl urlblock url_regex -i "/etc/squid/regras/urlblock.acl"
acl liberado url_regex -i "/etc/squid/regras/liberado.acl"
acl extensoes urlpath_regex -1 "/etc/squid/regras/extensoes.acl"
acl avast url_regex -i "/etc/squid/regras/avast.acl"
acl webproxy urlpath_regex -i "/etc/squid/regras/webproxy.acl"
acl hosts_liberados src "/etc/squid/regras/hosts_liberados.acl"
acl bloquearip src "/etc/squid/regras/ip_block.acl"
acl microsoft url_regex "/etc/squid/regras/ms-update.acl"
acl windowsupdate dstdomain .microsoft.com .windowsupdate.com
acl domain_watson dstdomain .watson.microsoft.com
#Politicas
http_access allow hosts_liberados
http_access allow avast
http_access allow microsoft
http_access allow windowsupdate
http_access allow domain_watson
http_access allow manager localhost
http_access deny bloquearip
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_access allow liberado
http_access deny palavrasblock
http_access deny siteblock
http_access deny urlblock
http_access deny !Safe_ports
http_access deny extensoes
http_access allow redelocal
http_access allow all
#Cache
cache_mem 4096 MB
maximum_object_size_in_memory 100 KB
maximum_object_size 6144 MB
maximum_object_size 6 GB windowsupdate
minimum_object_size 0 KB
range_offset_limit -1 windowsupdate
quick_abort_min -1 KB windowsupdate
cache_dir ufs /var/spool/squid 5120 16 256
#cache_access_log /var/spool/squid 5120 16 256
cache_swap_low 90
cache_swap_high 95
refresh_pattern ^ftp: 15 20% 2280
refresh_pattern ^gopher: 15 0% 2280
refresh_pattern . 15 20% 2280
refresh_pattern -i microsoft.com/.*\.(cab|exe|ms[i|u|f]|asf|wm[v|a]|dat|zip|psf) 4320 80% 43200 reload-into-ims
refresh_pattern -i windowsupdate.com/.*\.(cab|exe|ms[i|u|f]|asf|wm[v|a]|dat|zip|psf) 4320 80% 43200 reload-into-ims
#Logs
cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log
