Attachment 208886 Details for Bug 241720 – squid.conf file used

squid.conf file used

squid.conf (text/plain), 6.02 KB, created by Jenny Cabrera Varona on 2019-11-05 17:10:28 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jenny Cabrera Varona

Created: 2019-11-05 17:10:28 UTC

Size: 6.02 KB

patch

obsolete

># OPTIONS FOR AUTHENTICATION
># -----------------------------------------------------------------------------
>auth_param basic program /usr/local/libexec/squid/basic_ncsa_auth /usr/local/etc/squid/passwd
>auth_param basic children 5 startup=5 idle=1
>auth_param basic realm Squid proxy-caching web server
>auth_param basic credentialsttl 2 hours
>
>
># ACCESS CONTROLS
># -----------------------------------------------------------------------------
>acl servers src 172.17.110.192/28	# RFC1918 possible internal network
>acl localnet src 172.17.110.224/27	# RFC1918 possible internal network
>acl localnet src 172.17.110.208/29	# RFC1918 possible internal network
>
>acl SSL_ports port 443
>acl Safe_ports port 80		# http
>acl Safe_ports port 21		# ftp
>acl Safe_ports port 443		# https
>acl CONNECT method CONNECT
>
># Deny requests to certain unsafe ports
>http_access deny !Safe_ports
>
># Deny CONNECT to other than secure SSL ports
>http_access deny CONNECT !SSL_ports
>
># SNMP
>acl snmppublic snmp_community public
>snmp_port 3401
>snmp_access allow snmppublic localhost
>snmp_access deny all
>
># Only allow cachemgr access from localhost
>http_access allow localhost manager
>http_access deny manager
>http_access allow localhost
>
># We strongly recommend the following be uncommented to protect innocent
># web applications running on the proxy server who think the only
># one who can access services on "localhost" is a local user
>#http_access deny to_localhost
>
>#
># INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS
>#
>acl cuba dstdomain .cu
>acl google dstdomain .google.com.cu
>acl une dstdomain .une.cu
>acl localdomain dstdomain .example.com.cu
>acl localdomain dstdomain .example.local.cu
>
>http_access allow localnet localdomain
>http_access allow servers
>
>############### ACLS Internas ############
>
>#Maxconn and Limit IP
>acl maxcnn maxconn 50
>#http_access deny localnet maxcnn
>acl maxusr max_user_ip -s 1
>http_access deny maxusr
>
>#Down_Time
>acl down_time time M T W H F 17:00-23:59
>acl down_time time M T W H F 00:00-06:00
>acl down_time time S A 00:00-23:59
>
>#Noticias
>acl noticias dstdomain "/usr/local/etc/squid/whitelist"
>
>#Denegados
>acl denied_doms dstdomain "/usr/local/etc/squid/denied_doms"
>
>#Telecom
>acl user1_ip src 172.17.110.251/32
>acl user1_auth proxy_auth user1
>http_access allow user1_auth user1_ip
>
>#Denegacion Temporal Video Conferencia
>#http_access deny all
>
>############ NACIONAL ################
>
>acl nacional_auth proxy_auth REQUIRED
>http_access allow nacional_auth cuba
>
>#####################################
>
># And finally deny all other access to this proxy
>http_access deny all
>
># NETWORK OPTIONS
># -----------------------------------------------------------------------------
>http_port 3128
>
># OPTIONS WHICH AFFECT THE NEIGHBOR SELECTION ALGORITHM
># -----------------------------------------------------------------------------
>cache_peer 172.16.20.111		parent		8080	0	default	no-query	name=internacional
>cache_peer 172.16.20.112		parent		3128	0	default	no-query	name=nacional
>
>cache_peer_access internacional allow google
>cache_peer_access internacional deny cuba
>cache_peer_access nacional allow cuba
>cache_peer_access nacional deny all
>cache_peer_access internacional allow all
>
># MEMORY CACHE OPTIONS
># -----------------------------------------------------------------------------
># cache_mem 256 MB
># maximum_object_size_in_memory 512 KB
># memory_replacement_policy lru
>
>cachemgr_passwd secret secretpwd
>
># DISK CACHE OPTIONS
># -----------------------------------------------------------------------------
># cache_replacement_policy lru
># maximum_object_size 4 MB
>
>cache_dir ufs /var/squid/cache 100 16 256
>
># LOGFILE OPTIONS
># -----------------------------------------------------------------------------
># access_log daemon:/var/log/squid/access.log squid
># logfile_daemon /usr/lib/squid/log_file_daemon
>#logfile_rotate 365
>
>#logformat common %>a %[ui %[un [%tl] "%rm %ru HTTP/%rv" %>Hs %<st %Ss:%Sh
>
>access_log daemon:/var/log/squid/access.log common
>
># mime_table /usr/share/squid/mime.conf
># pid_filename /var/run/squid.pid
>
># OPTIONS FOR TROUBLESHOOTING
># -----------------------------------------------------------------------------
>cache_log /var/log/squid/cache.log
>coredump_dir /var/squid/cache
>
># OPTIONS FOR FTP GATEWAYING
># -----------------------------------------------------------------------------
>ftp_user squid@example.com.cu
>ftp_passive on
>ftp_sanitycheck on
>ftp_epsv_all on
>
># Rewrite
>url_rewrite_program /usr/local/bin/squidGuard -c /usr/local/etc/squid/squidGuard.conf
>
># OPTIONS FOR URL REWRITING
># -----------------------------------------------------------------------------
># url_rewrite_children 20 startup=0 idle=1 concurrency=0
># url_rewrite_host_header on
># url_rewrite_bypass off
>
># OPTIONS FOR TUNING THE CACHE
># -----------------------------------------------------------------------------
>refresh_pattern ^ftp:		1440	20%	10080
>refresh_pattern ^gopher:	1440	0%	1440
>refresh_pattern -i (/cgi-bin/|\?) 0	0%	0
>refresh_pattern .		0	20%	4320
>
># DELAY POOL PARAMETERS
># -----------------------------------------------------------------------------
>delay_pools 3
>
>#Empresa
>delay_class 1 2
>delay_class 2 2
>delay_class 3 2
>
>#Empresa
>delay_parameters 1 120000/120000 120000/120000
>delay_parameters 2 60000/60000 8000/60000
>delay_parameters 3 60000/60000 8000/60000
>
>delay_initial_bucket_level 50
>
>#Empresa
>delay_access 1 allow localnet down_time
>delay_access 1 deny all
>delay_access 2 allow localnet cuba
>delay_access 2 deny all
>delay_access 3 allow localnet
>delay_access 3 deny all
>
># OPTIONS INFLUENCING REQUEST FORWARDING 
># -----------------------------------------------------------------------------
>always_direct allow localhost
>always_direct allow localdomain
>always_direct allow une
>nonhierarchical_direct off
># prefer_direct off
>never_direct allow all
>
># DNS OPTIONS
># -----------------------------------------------------------------------------
># allow_underscore on
>dns_v4_first on
>dns_nameservers 172.17.110.197
>
># MISCELLANEOUS
># -----------------------------------------------------------------------------
># forwarded_for on
>
>visible_hostname proxy.example.local.cu
>httpd_suppress_version_string on

Actions: View

Attachments on bug 241720: 208886