#Configuracion Squid

#Recommended minimum configuration:

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443
acl Safe_ports port 80

# http

acl Safe_ports port 21

# ftp

acl Safe_ports port 443

# https

acl Safe_ports port 70

# gopher

acl Safe_ports port 210

# wais

acl Safe_ports port 1025-65535 # unregistered ports

acl Safe_ports port 280

# http-mgmt

acl Safe_ports port 488

# gss-http

acl Safe_ports port 591

# filemaker

acl Safe_ports port 777

# multiling http

acl CONNECT method CONNECT

acl intranet1 src "/etc/squid/intranet1.sqd"
acl intranet2 src "/etc/squid/intranet2.sqd"
acl intranet3 src "/etc/squid/intranet3.sqd"
acl intranet4 src "/etc/squid/intranet4.sqd"
acl intranet5 src "/etc/squid/intranet5.sqd"
acl excluidos url_regex -i "/etc/squid/excluidos.sqd"
acl permitidos url_regex -i "/etc/squid/permitidos.sqd"
acl denegados url_regex -i "/etc/squid/denegados.sqd"

acl limitados url_regex -i "/etc/squid/limitados.sqd"

######Messenger
acl msn_url url_regex -i gateway.dll
acl msnmessenger req_mime_type ^application/x-msn-messenger$
acl msn_port port 1863
acl msn_method method POST
acl MSN_Messenger browser ^Mozilla.compatible;.MSN Messenge
######Streaming Players Audio & Video
acl useragent browser -i ^application/NSPlayer$
acl useragent browser -i ^application/player$
acl useragent browser -i ^application/Windows-Media-Player$
# Only allow cachemgr access from localhost
http_access allow manager localhost
http_access deny manager
# Deny requests to unknown ports
http_access deny !Safe_ports
# Deny CONNECT to other than SSL ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_access allow intranet1
http_access deny useragent
http_access allow permitidos
http_access allow intranet2 !excluidos
http_access deny MSN_Messenger
http_access allow intranet3 !excluidos
http_access deny msnmessenger

http_access deny msn_method msn_url

http_access deny msn_port
http_access deny CONNECT msn_port
http_access deny excluidos
http_access deny denegados
http_access allow intranet4 limitados
http_access allow intranet5 limitados
http_access deny all
#Allow ICP queries from everyone
icp_access allow all
# Squid normally listens to port 3128
http_port 8080 transparent

#Default:
cache_mem 32 MB
#Default:
# cache_dir ufs /var/spool/squid 100 16 256
cache_dir aufs /var/spool/squid/cache1 800 16 256
cache_dir aufs /var/spool/squid/cache2 800 16 256
#

Note: 2.6.STABLE14 and earlier only supports a slightly different

#
and undocumented format with all uppercase LOG_FACILITY|
LOG_PRIORITY
access_log /var/log/squid/access.log squid
#Suggested default:
refresh_pattern ^ftp:

1440 20%

refresh_pattern ^gopher: 1440 0%

1440

refresh_pattern .

4320

20%

10080

#Default:
# none
visible_hostname internet.uct.edu.ec
#Default:
max_filedesc 12288