20180514_vyos_sample_squid.conf

gistfile1.txt

vyos@vyos# cat /etc/squid3/squid.conf
#
# autogenerated by vyatta-update-webproxy.pl
#

acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8
acl net src all
acl SSL_ports port 443
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443         # https
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT

auth_param basic children 5
auth_param basic credentialsttl 60 minute
auth_param basic realm proxy-authentication
auth_param basic program /usr/lib/squid3/squid_ldap_auth -v 3 -b "ou=Proxy,dc=lab,dc=local" -D "CN=Administrator,CN=Users,DC=lab,DC=local" -w 【Password】 -f sAMAccountName=%s -u samAccountName -p 389 -R -h 192.168.129.135
acl auth proxy_auth REQUIRED
http_access allow auth
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_access allow net
http_access deny all

cache_dir ufs /var/spool/squid3 100 16 256
cache_mem 20 MB
access_log /var/log/squid3/access.log common

cache_store_log none

http_port 192.168.129.133:3128

forwarded_for off

redirect_program /usr/bin/squidGuard -c /etc/squid/squidGuard.conf
redirect_children 8
redirector_bypass on

[edit]
vyos@vyos#