Created
February 25, 2013 00:28
-
-
Save steveb/5026466 to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
--- squid.conf.orig 2013-02-25 11:31:23.839560066 +1300 | |
+++ squid.conf 2013-02-25 11:42:02.713076606 +1300 | |
@@ -702,6 +702,7 @@ | |
#acl localnet src 192.168.0.0/16 # RFC1918 possible internal network | |
#acl localnet src fc00::/7 # RFC 4193 local private network range | |
#acl localnet src fe80::/10 # RFC 4291 link-local (directly plugged) machines | |
+acl localnet src 192.168.3.0/24 | |
acl SSL_ports port 443 | |
acl Safe_ports port 80 # http | |
@@ -828,7 +829,7 @@ | |
# We strongly recommend the following be uncommented to protect innocent | |
# web applications running on the proxy server who think the only | |
# one who can access services on "localhost" is a local user | |
-#http_access deny to_localhost | |
+http_access deny to_localhost | |
# | |
# INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS | |
@@ -837,7 +838,7 @@ | |
# Example rule allowing access from your local networks. | |
# Adapt localnet in the ACL section to list your (internal) IP networks | |
# from where browsing should be allowed | |
-#http_access allow localnet | |
+http_access allow localnet | |
http_access allow localhost | |
# And finally deny all other access to this proxy | |
@@ -1133,7 +1134,7 @@ | |
# | |
# Squid normally listens to port 3128 | |
-http_port 3128 | |
+http_port 3128 intercept | |
# TAG: https_port | |
# Note: This option is only available if Squid is rebuilt with the | |
@@ -2229,7 +2230,7 @@ | |
# | |
# Uncomment and adjust the following to add a disk cache directory. | |
-#cache_dir ufs /var/spool/squid3 100 16 256 | |
+cache_dir ufs /var/spool/squid3 8000 16 256 | |
# TAG: store_dir_select_algorithm | |
# Set this to 'round-robin' as an alternative. | |
@@ -2611,7 +2612,7 @@ | |
# Note2, for Debian/Linux the default of logfile_rotate is | |
# zero, since it includes external logfile-rotation methods. | |
#Default: | |
-# logfile_rotate 0 | |
+logfile_rotate 10 | |
# TAG: emulate_httpd_log on|off | |
# The Cache can emulate the log file format which many 'httpd' | |
@@ -3673,7 +3674,7 @@ | |
# during shutdown mode. Any active clients after this many | |
# seconds will receive a 'timeout' message. | |
#Default: | |
-# shutdown_lifetime 30 seconds | |
+shutdown_lifetime 2 seconds | |
# ADMINISTRATIVE PARAMETERS | |
# ----------------------------------------------------------------------------- |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment