Meu script completo não serviria para vc pois cada caso é um caso mas segue como base para o seu:
### Configuracoes ####
acl manager proto cache_object
acl localhost src 127.0.0.1/32 ::1
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 81 # http
acl Safe_ports port 88 # http
acl Safe_ports port 89 # Speedy
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 809 # SPTRANS
acl Safe_ports port 403 # Avast
acl Safe_ports port 8443 # appmanagerq
acl Safe_ports port 631 # Cups
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_port 3128 transparent
#### DNS Google ####
dns_nameservers 8.8.8.8
dns_nameservers 8.8.8.4
error_directory /usr/share/squid3/errors/pt-br
cache_mgr alguem@algo.com.br
#### Delay Pools (Controle de banda) ####
delay_pools 1
delay_class 1 1
delay_parameters 1 45000/50000
access_log /var/log/squid3/access.log squid
#### Cache e limite de banda para Youtube ####
acl youtube dstdomain .youtube.com
delay_access 1 allow youtube
################################
#### Sites com limite de banda ####
acl limitados url_regex -i "/etc/squid3/limitados"
delay_access 1 allow limitados
### Bloqueio Messenger #######
acl msn_on arp "/etc/squid3/msn_on"
acl msn_site url_regex -i "/etc/squid3/msn_site"
http_access deny msn_site !msn_on
acl estagiarios arp "/etc/squid3/estagiarios"
acl atendimento arp "/etc/squid3/atendimento"
acl hotmail url_regex -i "/etc/squid3/hotmail"
### Acesso sem bloqueios ######
acl acesso_full arp "/etc/squid3/acesso_full"
http_access allow acesso_full
### Usuarios com Downloads permitidos #####
acl download_on arp "/etc/squid3/download_on"
### Sites permitidos download ####
acl updates url_regex -i "/etc/squid3/updates"
http_access allow updates
### Bloqueio de downloads ####
acl downloads urlpath_regex -i "/etc/squid3/downloads"
http_access deny downloads !download_on !updates
delay_access 1 allow downloads
### Usuarios com acesso a redes sociais ####
acl acesso_sociais arp "/etc/squid3/acesso_sociais"
### Globo Videos
acl acesso_globo arp "/etc/squid3/acesso_globo"
acl videos_globo url_regex -i "/etc/squid3/videos_globo"
http_access deny videos_globo !acesso_globo
### Sites Bloqueados ####
acl bloqueados url_regex -i "/etc/squid3/bloqueados"
http_access deny bloqueados
### Acesso Liberado nos horarios
acl acesso_almoco time MTWHF 12:00-13:00
acl acesso_noite time MTWHF 19:00-23:59
#acl acesso_noite time MTWHF 17:00-23:59
acl sabado time AS 06:00-23:59
http_access allow all acesso_almoco !bloqueados !estagiarios
http_access allow all acesso_noite !bloqueados !estagiarios
http_access allow all sabado !bloqueados !estagiarios
### Bloqueio de redes sociais ####
acl redes_sociais url_regex -i "/etc/squid3/redes_sociais"
http_access deny redes_sociais !acesso_sociais
http_access deny hotmail atendimento
##### Cache do Windows Update #####
refresh_pattern msgruser.dlservice.microsoft.com/.*\.(cab|exe|msi|dll|psf) 10080 100% 43200 reload-into-ims
refresh_pattern update.microsoft.com/.*\.(cab|exe|dll|msi|psf) 10080 100% 43200 reload-into-ims
refresh_pattern windowsupdate.com/.*\.(cab|exe|dll|msi|psf) 10080 100% 43200 reload-into-ims
refresh_pattern download.microsoft.com/.*\.(cab|exe|dll|msi|psf) 10080 100% 43200 reload-into-ims
refresh_pattern
www.microsoft.com/.*\.(cab|exe|dll|msi|psf) 10080 100% 43200 reload-into-ims
refresh_pattern au.download.windowsupdate.com/.*\.(cab|exe|dll|msi|psf) 10080 100% 43200 reload-into-ims
########### Cache Audio e Videos ###########
refresh_pattern -i \.(mp3|mp4|m4a|ogg|mov|avi|wmv|flv)$ 10080 90% 999999 ignore-no-cache override-expire ignore-private
### Acesso a todos sites sem regras correspondentes
http_access allow all !bloqueados
# Sites sem cache:
#acl semcache dstdomain .terra.com.br
#cache deny semcache
### Configuracoes de cache ####
cache_dir AUFS /var/spool/squid3 2000 64 256
cache_dir AUFS /var/spool/squid3 2000 64 256
cache_dir AUFS /var/spool/squid3 2000 64 256
cache_dir AUFS /var/spool/squid3 2000 64 256
cache_dir AUFS /var/spool/squid3 2000 64 256
cache_dir AUFS /var/spool/squid3 2000 64 256
cache_dir AUFS /var/spool/squid3 2000 64 256
cache_dir AUFS /var/spool/squid3 2000 64 256
cache_dir AUFS /var/spool/squid3 2000 64 256
cache_dir AUFS /var/spool/squid3 2000 64 256
cache_dir AUFS /var/spool/squid3 2000 64 256
cache_dir AUFS /var/spool/squid3 2000 64 256
cache_mem 256 MB
cache_swap_low 90
cache_swap_high 95
memory_pools on
memory_pools_limit 64 MB
log_fqdn on
maximum_object_size_in_memory 64 KB
maximum_object_size 600 MB
minimum_object_size 2 KB
quick_abort_min -1
cache_replacement_policy heap GDSF
#memory_replacement_policy heap LFUDA
memory_replacement_policy heap GDSF
half_closed_clients on
hierarchy_stoplist cgi-bin ?
#acl QUERY urlpath_regex cgi-bin \?
#no_cache deny QUERY
coredump_dir /var/spool/squid3
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320
################################
